Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iGTyWVA0qQQVLECZhzGJziwNhKU.roa
File: iGTyWVA0qQQVLECZhzGJziwNhKU.roa (raw, json)
Hash identifier: yIlUfdS+zPBN9+ThT19/P5LDxEd06tpeVfTBbsITtq0=
Subject key identifier: 88:64:F2:59:50:34:A9:04:15:2C:40:99:87:31:89:CE:2C:0D:84:A5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01926C222EF45C5D0BF1611CCE3131188FC1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iGTyWVA0qQQVLECZhzGJziwNhKU.roa
Signing time: Tue 08 Oct 2024 12:37:12 +0000
ROA not before: Tue 08 Oct 2024 12:37:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48266
IP address blocks: 81.5.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:22:2e:f4:5c:5d:0b:f1:61:1c:ce:31:31:18:8f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 8 12:37:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8864f2595034a904152c4099873189ce2c0d84a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:90:62:57:f9:a3:d3:9e:95:54:0c:56:3d:
d7:f2:e2:23:90:77:96:45:a9:c9:48:38:8a:62:d2:
e5:19:6c:4d:82:cb:c2:65:a8:7a:52:b3:e3:0a:12:
b0:ea:67:3c:8a:2a:4a:8d:58:ab:c9:b0:dc:00:dc:
1f:2b:96:dc:23:e6:a6:6b:0a:2b:15:50:50:ea:0e:
a7:96:f1:d4:e7:1f:40:37:2f:30:53:c3:d7:d7:c0:
17:97:9c:11:79:ac:f5:26:4a:53:9b:ce:4f:a6:5a:
81:39:d2:41:d9:db:32:00:25:67:a0:d5:3f:04:33:
20:2e:b0:98:5c:b6:b7:6b:86:e7:98:a5:9c:15:da:
49:01:b5:a2:be:02:1d:79:db:ea:5e:36:25:b4:88:
5f:b7:66:a4:a2:38:77:fc:55:1f:6c:03:cc:c1:da:
64:5f:4f:0f:c3:c7:4b:b3:cb:00:18:66:96:78:2c:
19:ea:a5:25:6c:3a:de:c3:18:b0:03:83:e8:ef:2d:
19:32:ac:48:ab:4d:e8:d9:87:f7:b5:ce:6e:ee:6d:
a3:62:6c:b5:48:e1:6f:5b:fe:fc:9d:c6:70:cc:cd:
3b:48:85:30:5a:af:7c:d8:5f:72:31:23:81:56:88:
30:dc:fb:15:33:f1:c6:15:b4:81:a1:21:ca:08:cf:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:64:F2:59:50:34:A9:04:15:2C:40:99:87:31:89:CE:2C:0D:84:A5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iGTyWVA0qQQVLECZhzGJziwNhKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.191.0/24
Signature Algorithm: sha256WithRSAEncryption
24:24:96:2e:f3:2c:ba:e6:f4:86:f2:c6:76:86:6f:c0:64:ad:
01:fe:e4:9c:97:c8:20:0d:fb:d5:46:98:dc:c3:a0:0a:9a:69:
15:12:57:c5:99:ed:c3:59:e2:3b:10:f8:8e:a4:8f:82:a2:ac:
ca:ee:de:2b:a5:cb:88:f0:9a:6c:aa:52:e9:3c:f2:a9:9f:16:
d5:1b:65:ba:e6:ec:66:2e:e7:c9:0b:53:06:c1:89:c5:d4:d9:
f7:47:b5:41:3e:8a:53:d5:d1:24:5f:19:c7:ee:e6:49:77:28:
3a:ff:a7:48:86:78:84:be:c7:e3:ab:0a:2f:12:3f:31:d4:f4:
13:b2:54:d2:ff:42:6c:1c:55:4f:9c:a0:b0:41:e9:f7:76:8d:
64:85:cc:e9:01:65:5a:69:2c:ea:2f:1e:dd:3e:d8:12:0a:70:
77:e2:17:8d:d7:f4:b5:81:d2:04:fd:0a:06:50:64:68:59:e0:
7d:27:db:ad:6d:92:12:a8:de:7a:0a:23:f0:de:d5:d5:df:f7:
15:31:61:4e:28:25:12:83:bf:26:f6:74:db:c1:23:2e:8c:f0:
a2:7c:e5:fd:7e:98:e7:2b:75:c5:23:4b:b1:75:51:da:f1:04:
8c:22:f2:ef:25:b2:2f:f7:7d:b2:4d:7f:2b:86:73:44:cd:e1:
24:c6:de:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:55:48 2024 by rpki-client on console-ams.rpki-client.org