Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/taIF9W_Erj4x4WP03cGmmsMR3qM.roa
File: taIF9W_Erj4x4WP03cGmmsMR3qM.roa (raw, json)
Hash identifier: Sp3RgisGDZqx5FrNg0I1uo4oUwvxzFpJGrEAmoJ5ozc=
Subject key identifier: B5:A2:05:F5:6F:C4:AE:3E:31:E1:63:F4:DD:C1:A6:9A:C3:11:DE:A3
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018CC72772FFFBF9031DA8868D8CDB16A289
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/taIF9W_Erj4x4WP03cGmmsMR3qM.roa
Signing time: Mon 01 Jan 2024 22:31:40 +0000
ROA not before: Mon 01 Jan 2024 22:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9056
IP address blocks: 194.149.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:72:ff:fb:f9:03:1d:a8:86:8d:8c:db:16:a2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 22:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5a205f56fc4ae3e31e163f4ddc1a69ac311dea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a1:98:80:00:74:f4:6c:22:5d:62:b1:49:6f:
8d:0d:1e:95:72:4e:61:1c:30:23:4a:cf:5d:df:0a:
b0:5f:44:92:2b:75:96:de:96:dc:d3:5b:2d:3b:39:
8a:3d:97:98:e8:c2:84:19:75:06:20:95:62:59:40:
62:61:5c:70:e6:ca:d5:f7:bd:f1:3c:2b:96:5f:9d:
90:fb:3a:c7:27:31:ae:3e:c2:a0:ab:8a:6b:41:cd:
b7:af:01:c8:28:89:b4:50:fe:da:74:98:ce:85:31:
6a:57:53:b5:ee:6c:e7:1e:03:c9:0d:e1:e1:36:99:
52:8a:4c:da:52:c4:b3:4e:94:9a:b8:50:46:a6:d3:
f7:0f:77:0b:c9:b7:bb:a6:a8:44:d5:dd:e0:d7:98:
55:2f:da:2a:0e:f0:41:be:9c:31:4b:81:46:64:04:
40:4d:75:57:71:76:15:5d:37:82:36:52:be:ef:f5:
36:dd:11:c6:1e:70:26:58:08:eb:68:9c:f0:59:cf:
bb:9a:2c:b2:c8:e8:b0:bb:37:06:a3:4a:ac:22:57:
d9:5d:c5:ab:33:e6:97:87:79:11:25:9c:8d:18:e1:
28:82:f7:0f:49:ac:d1:b3:81:ce:56:02:22:a4:a5:
97:c6:35:40:ad:ca:7e:85:b5:eb:eb:9d:7c:6b:55:
50:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A2:05:F5:6F:C4:AE:3E:31:E1:63:F4:DD:C1:A6:9A:C3:11:DE:A3
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/taIF9W_Erj4x4WP03cGmmsMR3qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.66.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a4:4f:7e:5e:84:ae:de:63:b9:61:80:c1:28:63:9f:52:8b:
01:e2:1c:92:a6:70:db:3c:97:73:6e:ea:c8:e2:fc:77:80:cf:
14:44:a6:c5:79:85:5d:32:86:c8:e5:2b:77:0b:d7:82:80:d0:
17:11:89:33:ef:8e:66:9a:5c:c4:08:5a:81:ed:25:70:36:0f:
d9:55:f0:a1:c4:55:68:b6:f7:f9:8c:a3:0e:53:84:fe:06:03:
e1:7c:1e:42:d5:33:23:b3:f7:70:d2:ee:e4:0f:bd:28:b9:e9:
be:62:30:03:cc:9e:d1:bb:5d:1b:80:4b:9d:8f:f3:91:aa:90:
74:ac:69:00:1b:9d:d9:55:f3:b5:17:0f:20:6a:d3:5b:76:e5:
e9:1e:65:71:5d:20:14:b9:6d:87:04:f9:24:fd:0f:ef:a8:3b:
cf:9b:12:bc:28:ea:89:00:cd:11:ea:6a:a3:ca:b4:2f:9e:d4:
32:da:99:ab:43:29:a9:23:32:10:1a:11:cd:f4:b8:14:6a:9a:
f8:57:7a:cb:7a:8b:7c:61:36:74:e8:7f:03:5d:be:4e:d6:6a:
21:aa:4e:5c:02:84:d9:74:94:0f:c9:86:d6:7b:75:90:06:20:
14:df:c7:10:75:0d:9c:e2:63:a1:ee:16:18:89:40:b2:88:a7:
43:4c:9f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:59:57 2024 by rpki-client on console-fra.rpki-client.org