Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/i2mf2lpfu1OymgZYvIFkfoz7AsA.roa
File: i2mf2lpfu1OymgZYvIFkfoz7AsA.roa (raw, json)
Hash identifier: ar8NH0rlF6hJ9MAL8tcH+dCRTDKmPLUd2LRYxE96+To=
Subject key identifier: 8B:69:9F:DA:5A:5F:BB:53:B2:9A:06:58:BC:81:64:7E:8C:FB:02:C0
Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial: 018CC5DBF0C83748E0B8EDA066A51BD15FB0
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/i2mf2lpfu1OymgZYvIFkfoz7AsA.roa
Signing time: Mon 01 Jan 2024 16:29:34 +0000
ROA not before: Mon 01 Jan 2024 16:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203703
IP address blocks: 192.100.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f0:c8:37:48:e0:b8:ed:a0:66:a5:1b:d1:5f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
Validity
Not Before: Jan 1 16:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b699fda5a5fbb53b29a0658bc81647e8cfb02c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:17:93:ae:a1:09:e0:2f:5b:5c:e7:38:91:
b2:3d:aa:25:bd:1f:d9:8b:25:0d:06:8d:0c:4e:de:
05:af:1f:95:ee:41:75:84:29:67:26:c2:b6:e1:a9:
dc:22:c4:3a:0d:63:e5:24:8b:0c:a5:c8:f1:11:58:
e0:b2:96:9a:e2:4c:67:d9:0c:37:b8:d0:9e:cd:fb:
b1:06:1f:91:66:78:4a:68:63:78:41:9f:01:4c:41:
a2:44:42:07:17:f9:70:26:39:a1:eb:5b:99:28:69:
5d:69:ec:3c:2f:aa:95:92:f1:fb:f2:8f:b3:24:4c:
1e:ee:1d:69:ad:57:86:5b:d8:c5:85:e9:a3:88:9e:
f3:dc:a0:97:34:48:d6:b1:c4:b4:cb:7f:0e:63:e5:
5c:a7:61:26:ac:62:39:39:87:72:f0:d5:83:26:b6:
3a:48:a2:c9:b0:3d:98:ea:c2:73:26:78:10:d4:4e:
30:2d:ba:75:7a:76:75:6b:75:1e:c9:3b:20:ee:5f:
d9:89:46:fe:75:99:f7:f4:c2:0d:9d:01:a7:d0:4a:
df:db:92:22:1b:14:7d:ee:d1:a8:6a:e1:b4:96:87:
26:14:1b:c2:2c:81:9d:4a:50:fa:97:49:91:d0:a9:
08:39:ef:27:70:c7:ca:3f:04:10:7a:74:49:5b:d1:
98:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:69:9F:DA:5A:5F:BB:53:B2:9A:06:58:BC:81:64:7E:8C:FB:02:C0
X509v3 Authority Key Identifier:
keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/i2mf2lpfu1OymgZYvIFkfoz7AsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.100.96.0/23
Signature Algorithm: sha256WithRSAEncryption
24:31:03:85:78:f1:c3:96:cc:cf:42:6d:6a:d3:1a:1d:0e:f9:
49:6e:18:d9:ba:1b:78:6d:b1:fa:51:d9:dc:ba:b8:81:d3:e4:
ac:1c:1e:6f:f1:59:e9:10:6e:72:37:e4:7b:63:08:f1:ac:35:
dd:46:1a:1a:da:81:f6:ab:7a:f7:8b:78:4b:a2:a2:97:d0:c5:
93:d7:ec:0d:87:22:10:c8:dd:d7:ca:13:ad:4f:b4:21:b2:87:
6f:e1:77:19:43:d1:83:60:83:4b:87:96:3b:50:42:f3:85:49:
62:01:87:07:0e:ae:07:10:6f:50:a8:fe:2c:c3:34:39:49:98:
eb:c8:c8:49:7c:a9:4d:a2:1e:5c:d2:7a:3e:16:33:b5:84:80:
4e:38:2a:92:5c:6a:1d:e2:77:ef:aa:e5:53:9f:f1:13:99:9c:
7d:b1:60:22:50:2a:ed:bf:ba:48:90:f3:e4:2a:10:0b:b6:b5:
c8:a6:cd:cc:3b:48:75:b3:56:b6:0b:21:1b:50:cb:f9:28:71:
99:17:ad:fe:9b:de:42:92:b0:42:eb:64:42:19:44:60:f3:8e:
25:9a:ce:07:40:1d:80:a7:09:69:98:56:23:10:4c:39:d0:b7:
ce:ee:6c:cf:4f:d7:e7:90:c2:8d:54:48:ff:7b:63:07:40:26:
90:1c:13:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:05:07 2024 by rpki-client on console-ams.rpki-client.org