Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/i1wr-p9aNfr9LnshHx5h1yZck2U.roa
File: i1wr-p9aNfr9LnshHx5h1yZck2U.roa (raw, json)
Hash identifier: SMNltXPoyepKYlMB8eiEpdY/RqZUxKPtkvUp1tV6Sm4=
Subject key identifier: 8B:5C:2B:FA:9F:5A:35:FA:FD:2E:7B:21:1F:1E:61:D7:26:5C:93:65
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A800136097E3B6710391695EFCACA
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/i1wr-p9aNfr9LnshHx5h1yZck2U.roa
Signing time: Mon 01 Jan 2024 18:30:20 +0000
ROA not before: Mon 01 Jan 2024 18:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197998
IP address blocks: 141.101.207.0/24 maxlen: 24
141.101.212.0/23 maxlen: 23
141.101.214.0/23 maxlen: 23
141.101.140.0/23 maxlen: 23
37.230.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:80:01:36:09:7e:3b:67:10:39:16:95:ef:ca:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b5c2bfa9f5a35fafd2e7b211f1e61d7265c9365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:b8:ac:f5:fa:46:3a:19:10:2d:5c:cc:7e:
b8:a4:98:c0:a2:c1:8c:1e:2b:03:3a:78:b1:f6:83:
0c:60:56:ef:61:10:7b:9d:47:22:13:fd:18:94:66:
5a:97:f0:6a:34:82:08:8a:ee:7c:fa:49:b3:44:ea:
94:3a:70:d8:5a:c2:45:38:a1:a9:8f:0b:a7:fe:89:
4b:e0:ba:d4:73:e7:cf:87:0d:4e:6a:6b:e4:ba:e2:
ad:7c:09:38:60:f9:45:42:df:76:8b:93:dc:86:c2:
2d:60:2b:dc:03:a8:bc:a5:e3:ff:ac:34:c9:6d:93:
ae:b0:c6:02:f1:a7:a7:d4:d1:d6:a4:ee:ff:13:45:
5b:bc:61:c1:fb:25:78:6c:42:5d:c3:71:fe:de:51:
02:13:01:f3:0d:ab:24:36:ac:35:7e:15:cb:6f:12:
e6:8a:ff:a2:de:c5:1c:14:7a:2d:37:99:16:f8:70:
e4:fc:bd:e8:87:48:fd:f2:d0:8c:03:e9:b8:a4:ab:
02:02:02:f9:0b:ff:b1:7d:d7:52:49:50:c3:8b:a6:
32:9a:1f:2f:32:32:1e:c3:17:90:83:02:7c:86:71:
b7:4b:7d:d5:50:d6:ef:cc:f9:a0:f8:8a:e9:be:11:
fe:8f:78:fb:bd:7c:9a:c5:74:9f:aa:6b:2b:6a:92:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5C:2B:FA:9F:5A:35:FA:FD:2E:7B:21:1F:1E:61:D7:26:5C:93:65
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/i1wr-p9aNfr9LnshHx5h1yZck2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.223.0/24
141.101.140.0/23
141.101.207.0/24
141.101.212.0/22
Signature Algorithm: sha256WithRSAEncryption
97:75:e7:df:63:6c:1e:82:23:f7:0d:50:3b:49:26:e1:87:06:
56:ff:93:58:3e:fe:39:c9:52:ea:b5:20:c4:82:ce:50:31:39:
54:d9:6e:67:6b:d2:79:cc:fc:f7:25:5a:b7:f7:aa:97:d3:94:
73:9a:d0:f7:12:00:92:85:55:d1:7c:46:15:58:3f:da:da:0f:
1e:0f:cc:78:a2:17:23:d0:32:f0:3c:da:81:84:3e:d0:18:3d:
ed:98:9a:b1:5c:ef:ce:99:2a:8e:d2:28:21:fc:8b:8a:76:d8:
46:6a:c7:b1:09:db:bf:c1:e6:41:ff:54:c2:3f:54:48:fe:d2:
e2:15:13:14:dc:29:06:77:48:96:88:81:8c:db:c3:4f:d8:e5:
ca:b3:c8:53:44:6d:3d:b8:0c:c7:6a:30:79:92:ca:24:27:2e:
1b:df:55:af:b5:d8:25:f8:cc:7e:97:03:1d:46:72:ab:ab:76:
f5:4b:0b:e1:5c:8b:4c:d0:55:79:e7:c3:57:56:bf:25:56:d0:
78:1b:4e:21:4c:4b:da:bb:51:9b:75:39:af:99:44:a3:db:a7:
5d:08:78:6f:0f:ac:de:c6:a1:9f:19:fb:76:3f:ea:94:28:e8:
5c:5f:d3:5e:aa:83:54:61:05:0e:ed:2c:f4:78:5a:b1:6f:6f:
de:be:40:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:50:17 2024 by rpki-client on console-fra.rpki-client.org