Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/iooExV1bUYYxcOnMzgYYgTqf0mo.roa
File: iooExV1bUYYxcOnMzgYYgTqf0mo.roa (raw, json)
Hash identifier: +CxTzVo3bKmu6xPl04XFmWMYxQN5cFwvPe32CpQZ3k4=
Subject key identifier: 8A:8A:04:C5:5D:5B:51:86:31:70:E9:CC:CE:06:18:81:3A:9F:D2:6A
Certificate issuer: /CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
Certificate serial: 018CC64B3B26A08DB16CE9A71F62EF7F5EC0
Authority key identifier: 58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/iooExV1bUYYxcOnMzgYYgTqf0mo.roa
Signing time: Mon 01 Jan 2024 18:31:08 +0000
ROA not before: Mon 01 Jan 2024 18:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 178.21.33.0/24 maxlen: 24
178.21.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:3b:26:a0:8d:b1:6c:e9:a7:1f:62:ef:7f:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
Validity
Not Before: Jan 1 18:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a8a04c55d5b51863170e9ccce0618813a9fd26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:00:7d:55:d2:46:fd:85:2c:62:05:b4:00:
e6:d2:c9:20:55:15:c0:77:c8:ea:20:1a:5b:ff:14:
82:31:3d:5c:2a:7d:8e:50:80:d2:e6:b8:20:69:f0:
ed:ac:8f:36:32:66:16:01:f6:ca:57:d3:a6:4f:3e:
51:b9:e2:c2:3c:6b:84:b7:7f:1e:75:1b:ee:3b:5f:
7d:95:0e:36:af:2c:ed:02:f1:d1:b6:21:e6:a1:32:
5c:09:8b:66:d6:3c:3c:b7:ed:e9:a5:db:63:28:d9:
33:6d:ed:e8:8b:cf:47:ae:ba:7f:cd:12:96:a1:85:
d6:fc:06:e5:42:2d:dc:45:aa:64:68:6d:96:d7:a3:
b5:14:a4:ef:7a:cb:84:02:ec:5e:70:7d:b7:88:e8:
f9:b7:df:26:3a:68:1a:32:7c:06:cf:ae:3b:9b:8d:
5c:a7:35:7d:2c:66:48:86:d2:6e:d6:97:13:be:ff:
62:1e:80:41:a6:fe:23:f6:04:00:35:3c:38:18:0d:
60:d9:db:ae:cc:39:15:17:e8:41:4a:b7:d1:da:96:
74:71:63:94:c0:ed:fb:95:38:a6:f4:6c:56:61:09:
52:08:6e:45:98:25:99:5c:89:aa:57:50:1e:cd:e6:
70:6d:e2:6b:41:69:a2:61:eb:ab:2d:29:43:f5:58:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8A:04:C5:5D:5B:51:86:31:70:E9:CC:CE:06:18:81:3A:9F:D2:6A
X509v3 Authority Key Identifier:
keyid:58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/iooExV1bUYYxcOnMzgYYgTqf0mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.32.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:6b:92:d8:24:af:9a:6a:86:76:85:18:df:61:df:97:19:5f:
1b:b6:46:26:24:ac:f0:7a:49:09:d6:d6:94:65:28:a6:2f:8b:
57:66:67:8f:f2:51:17:c2:eb:3b:6b:50:58:74:ae:15:f7:a3:
12:17:7a:81:00:bf:55:40:e1:18:f6:35:53:ff:f0:2d:fa:00:
e9:84:1e:1f:9c:fc:bd:24:d0:a8:c9:ee:1d:ae:9c:2a:85:4b:
8c:39:71:bd:09:6f:5c:08:97:7d:16:68:db:fc:fd:de:3f:6f:
80:4d:99:41:9b:25:f6:7f:4b:14:dd:49:1c:f3:41:12:58:14:
a4:7a:54:c5:9c:46:4f:25:73:73:51:cd:41:4c:4d:a9:b7:9d:
ea:b0:ab:59:82:f6:61:36:26:0c:96:3f:4f:31:0c:3b:0a:dd:
14:d4:85:b4:7e:a4:50:8b:1b:04:ec:62:94:04:af:63:5b:ba:
7e:2f:59:72:74:04:59:c5:c3:92:94:a5:d7:c8:18:b6:38:af:
50:fd:c5:d8:61:2f:fb:12:b0:36:3c:2d:f9:0c:5b:02:e0:8c:
20:4a:58:5b:2f:ea:c8:ed:07:da:ed:1c:ef:dc:e2:25:39:ff:
55:06:b9:96:7b:0a:51:5d:a1:57:87:29:85:f5:2f:0a:25:27:
a0:b4:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:36:28 2024 by rpki-client on console-ams.rpki-client.org