Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/IsaSm-A4XxigbH7BqFQt3NTM0UM.roa
File: IsaSm-A4XxigbH7BqFQt3NTM0UM.roa (raw, json)
Hash identifier: oBpq4bgb4ghZ0OfqMA/bishctUtj+F6nZ7DiSiIwPhY=
Subject key identifier: 22:C6:92:9B:E0:38:5F:18:A0:6C:7E:C1:A8:54:2D:DC:D4:CC:D1:43
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 018CC348B202C537F210715013DF464B9B03
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/IsaSm-A4XxigbH7BqFQt3NTM0UM.roa
Signing time: Mon 01 Jan 2024 04:29:30 +0000
ROA not before: Mon 01 Jan 2024 04:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 193.178.44.0/22 maxlen: 22
45.94.100.0/22 maxlen: 22
2a12:b840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b2:02:c5:37:f2:10:71:50:13:df:46:4b:9b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Jan 1 04:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22c6929be0385f18a06c7ec1a8542ddcd4ccd143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:5c:31:c6:48:d6:76:3a:1a:17:e5:c8:86:
e4:0c:a9:51:03:74:93:73:0f:00:f9:3a:55:9e:45:
15:f8:c0:81:56:62:f5:e6:ca:48:57:71:74:60:d4:
ca:d2:7e:f2:83:e3:09:ed:a9:9b:41:13:5b:19:4c:
ed:f7:1b:d3:14:54:dd:0b:35:a8:a9:61:2b:cc:d3:
b9:92:04:23:6d:a5:25:c8:67:8b:40:a9:d5:6f:68:
9a:81:ed:8d:32:22:26:f0:14:17:f7:a6:a1:6e:f6:
9b:24:d0:25:e7:5b:39:dd:9a:11:ab:0a:2e:d3:62:
e1:f3:0b:c8:fc:e1:a3:29:07:7b:94:a8:ab:8c:22:
b2:64:c4:3c:dd:87:61:b9:dd:24:56:d7:d6:fb:c3:
87:e4:b2:e7:4d:bd:5f:d8:ab:eb:73:d9:4a:9f:98:
2b:8d:d2:74:e7:dc:bc:fd:fb:05:12:cd:5f:af:67:
ff:37:9c:5c:49:24:b4:b1:02:32:9e:52:ab:4c:f4:
14:bd:a1:fc:3b:07:f3:66:f9:e0:ee:17:61:04:7e:
f8:9e:c7:99:62:78:e4:40:82:d3:60:52:7e:7d:8a:
d8:37:79:ce:b0:99:97:65:02:8f:42:e8:d4:0f:d4:
e6:42:7b:af:19:35:1c:01:77:d2:92:81:89:e3:dc:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C6:92:9B:E0:38:5F:18:A0:6C:7E:C1:A8:54:2D:DC:D4:CC:D1:43
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/IsaSm-A4XxigbH7BqFQt3NTM0UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.100.0/22
193.178.44.0/22
IPv6:
2a12:b840::/32
Signature Algorithm: sha256WithRSAEncryption
6a:f6:cb:2d:cb:df:aa:d7:b0:0d:ce:63:61:45:00:60:b4:da:
0f:5d:98:df:c9:c7:1f:42:47:52:69:3d:b3:f9:c8:70:d8:14:
15:e7:23:bb:2c:ef:52:54:1f:10:c7:6a:33:c2:13:2c:24:8e:
6a:03:47:09:5d:50:bf:5f:8d:a2:38:b0:23:e9:8b:87:61:cc:
96:c4:f4:fe:55:72:7e:6b:f3:4e:82:6a:18:af:cc:56:f5:d5:
6a:ac:77:16:ae:9f:71:6d:40:d1:c5:dd:9d:e1:46:f5:5f:fb:
e9:0d:0c:ec:95:7b:7e:7a:11:e0:f9:59:1d:be:c0:bd:34:1b:
18:e3:ee:f6:57:e6:b5:0d:98:34:69:43:c6:40:09:78:ea:91:
85:86:b5:cc:df:69:39:01:81:00:67:b7:01:84:e5:08:ce:0b:
69:06:5b:57:6b:58:16:ab:d6:fb:b0:f4:92:df:38:b6:40:3b:
b2:1b:99:44:7e:11:d5:b9:88:02:a3:47:8d:bc:17:a6:56:d9:
a6:54:7b:1b:53:b7:26:f2:e2:01:73:3e:4f:eb:ee:86:2f:44:
9d:1b:71:cb:49:c4:a4:36:37:91:d1:f7:8f:7f:cd:07:a1:74:
43:22:02:7e:fb:4c:7f:74:b1:f6:ba:b0:92:02:4f:ed:a5:29:
bf:3b:d4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:15 2024 by rpki-client on console-fra.rpki-client.org