Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ItCEliehlzKS9QlsiwK3pq7h_PY.roa
File: ItCEliehlzKS9QlsiwK3pq7h_PY.roa (raw, json)
Hash identifier: ilZi6mRNizySI25rjcmtfulxEWNnGMnTap89e06E5vI=
Subject key identifier: 22:D0:84:96:27:A1:97:32:92:F5:09:6C:8B:02:B7:A6:AE:E1:FC:F6
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D3FAE1C7FCF586D1ECE5A726BE08DF298
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ItCEliehlzKS9QlsiwK3pq7h_PY.roa
Signing time: Thu 25 Jan 2024 08:13:11 +0000
ROA not before: Thu 25 Jan 2024 08:13:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jan 2024 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3f:ae:1c:7f:cf:58:6d:1e:ce:5a:72:6b:e0:8d:f2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 25 08:13:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22d0849627a1973292f5096c8b02b7a6aee1fcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:03:f5:b5:3a:8f:45:f8:a9:68:d2:82:3f:
ab:ca:84:fb:e8:3f:ae:cb:0b:fd:5a:e0:7c:27:77:
23:28:64:07:3f:54:45:c8:3d:15:2f:ec:2d:b3:c4:
86:fb:0b:15:77:73:e1:a2:4a:7e:19:7a:8e:3d:16:
9e:98:77:6e:77:3e:1b:f9:08:e8:ef:95:f4:70:65:
cc:2d:f2:67:5d:4f:7f:e4:8b:05:32:9a:f1:38:92:
92:4c:c4:ca:3a:37:5a:a8:cd:7b:35:44:af:b4:87:
60:fe:4b:d1:0f:0d:49:a1:68:fa:1e:00:7b:52:a2:
c6:88:ab:fa:5c:6d:05:bd:f6:fb:26:13:f0:be:fc:
e6:4e:81:8a:7f:6a:f6:ab:cb:70:fb:fa:c9:66:60:
17:85:7d:08:cf:7f:41:98:19:9e:1b:06:e0:d6:37:
2f:3f:1b:e1:b1:c4:88:35:69:f3:ea:70:bd:3a:c7:
25:09:ac:be:43:33:99:d0:1c:2f:33:4a:2b:42:44:
61:e9:0c:6d:51:09:1e:4a:b6:06:fa:c9:de:c0:a7:
04:ed:08:ff:5e:ff:3d:64:13:de:08:5f:f4:24:91:
53:9a:6c:ba:2b:31:ea:86:9d:ad:5e:15:a3:df:38:
ff:76:6e:88:71:4f:ac:bf:9c:2f:b5:1d:d4:54:83:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D0:84:96:27:A1:97:32:92:F5:09:6C:8B:02:B7:A6:AE:E1:FC:F6
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ItCEliehlzKS9QlsiwK3pq7h_PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:7f:43:b0:40:c1:3a:d1:02:05:d3:2b:5c:61:fc:ff:1b:bd:
be:4f:83:f5:c8:2e:6a:9d:fa:ad:52:56:e2:a9:e0:f2:80:46:
7e:fe:9b:70:17:b1:88:d8:db:06:ec:97:98:c2:30:ac:9e:27:
c3:d9:5b:2a:f3:9f:8a:4c:42:53:72:8c:02:3d:e1:67:46:e2:
19:74:a3:e4:67:60:3e:d6:10:eb:b7:cc:68:5c:b1:b6:79:da:
5f:1c:a7:02:9e:38:25:a1:c4:1d:12:5b:74:bb:85:3f:48:21:
55:3c:4c:e6:dd:2f:fb:8d:df:8b:12:cd:95:35:e6:ca:c7:75:
9d:f2:57:ae:df:e3:05:05:24:72:19:34:47:35:3f:09:65:4b:
28:15:7b:35:23:13:ec:b3:46:4f:4c:3d:fc:7c:c3:c1:28:a5:
9b:2c:84:fe:1f:d1:23:ce:44:89:d1:27:ba:e7:64:7d:80:3d:
a3:d6:2e:de:f5:50:6e:8b:75:40:8e:ff:56:57:79:fa:8a:e8:
b1:91:7e:6b:fb:cb:c8:80:38:6f:28:f7:58:e0:c8:0d:6c:3b:
91:36:5c:2d:e8:f4:93:0d:ec:52:64:e7:9c:84:68:8b:5b:c6:
60:0e:df:55:94:53:6a:95:8b:7c:a9:c1:74:79:20:1c:e1:8f:
ea:bd:09:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 10:01:42 2024 by rpki-client on console-ams.rpki-client.org