Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/irVe_T-ITijyfwNQ5P-8Tc1siVg.roa
File: irVe_T-ITijyfwNQ5P-8Tc1siVg.roa (raw, json)
Hash identifier: toAa2urp1mHIfE2+m5qG+ohTLO7eSjgp2SR/Wh9ks48=
Subject key identifier: 8A:B5:5E:FD:3F:88:4E:28:F2:7F:03:50:E4:FF:BC:4D:CD:6C:89:58
Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial: 018CC492429FF18209BABBBD11E56AD6F02A
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/irVe_T-ITijyfwNQ5P-8Tc1siVg.roa
Signing time: Mon 01 Jan 2024 10:29:28 +0000
ROA not before: Mon 01 Jan 2024 10:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 553
IP address blocks: 129.206.0.0/16 maxlen: 16
147.142.0.0/16 maxlen: 16
192.100.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:42:9f:f1:82:09:ba:bb:bd:11:e5:6a:d6:f0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Validity
Not Before: Jan 1 10:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ab55efd3f884e28f27f0350e4ffbc4dcd6c8958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:62:73:f0:7e:92:ef:08:48:c3:49:a7:73:
3d:9f:40:de:c7:59:4b:34:3b:fd:6d:cb:84:00:9f:
e1:fb:2b:67:ee:37:cd:58:c5:21:14:81:53:1c:56:
86:4c:59:02:51:30:b6:c7:b2:ac:23:9f:61:45:6f:
10:a3:33:90:68:f8:4a:8c:72:91:d2:7d:97:81:72:
22:bf:ac:eb:b8:85:80:7c:5c:39:fe:72:18:8b:fc:
4c:2c:f4:8b:b9:39:71:0f:9e:9b:be:6c:48:93:42:
fe:8b:28:a2:87:8c:56:6b:18:df:46:a7:ba:0c:3e:
e6:96:e0:02:44:5d:e0:ac:b3:b6:ca:d2:91:a5:18:
8d:d8:1c:9e:a0:7a:9d:2d:77:72:17:e9:b4:6e:ad:
a8:e2:09:7c:e0:55:50:cc:8f:7d:9e:86:6c:28:dc:
01:df:20:45:5b:18:9d:fb:0b:f1:bf:69:98:5d:a9:
23:f3:c5:58:bd:dc:95:45:3a:1e:f0:2d:db:84:eb:
e4:37:02:98:01:59:0e:1d:d7:37:af:b3:cf:43:85:
fb:1e:81:f6:5f:01:28:b3:d5:4f:f6:ee:5c:65:d8:
eb:99:06:2c:f3:fe:19:5d:e6:d7:57:b9:10:1e:1e:
82:b3:6d:68:5e:17:28:21:47:78:95:d5:a0:9c:d1:
c6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B5:5E:FD:3F:88:4E:28:F2:7F:03:50:E4:FF:BC:4D:CD:6C:89:58
X509v3 Authority Key Identifier:
keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/irVe_T-ITijyfwNQ5P-8Tc1siVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.206.0.0/16
147.142.0.0/16
192.100.98.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:7f:a5:b5:cf:4d:51:e4:4a:6a:f8:e0:90:ad:41:cf:d7:69:
ee:59:7d:61:5d:dc:bb:00:96:e5:f5:87:20:3b:3e:ef:e5:2d:
29:a8:6d:4e:5e:0e:e7:40:67:0b:d7:f4:c7:d4:93:48:67:3b:
ee:f0:f6:a7:35:ce:35:ae:3f:5f:16:d3:42:d1:06:95:16:03:
3c:f0:d2:87:af:8a:71:d9:15:e0:84:c1:43:89:c9:19:a4:67:
24:34:af:19:7e:75:ee:a4:5b:b1:a4:a8:25:5b:86:a1:53:45:
de:ea:7f:1c:8b:57:b2:47:d6:48:88:f1:a0:06:78:36:34:d5:
4d:ae:ff:77:bc:bd:82:fa:6f:a5:15:f0:19:85:64:05:52:76:
cc:47:12:87:75:ed:41:57:83:4c:09:ae:8f:77:db:d7:2f:a7:
c7:5f:51:67:01:3d:1e:18:43:a1:d0:7a:3d:2b:f3:32:ec:96:
a1:ea:6e:2d:6e:14:f3:d2:6c:2b:7b:6d:53:bc:8a:0c:c1:76:
12:ca:08:07:62:0a:b1:4d:53:07:73:e2:42:55:dd:fc:a4:65:
df:ec:f7:1f:c3:6f:c9:58:83:a9:31:6a:a2:b0:74:0c:a9:b5:
dd:b7:74:a5:98:9c:c0:9e:df:da:48:94:7a:06:fd:ed:5e:ee:
95:3a:07:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:36:36 2024 by rpki-client on console-fra.rpki-client.org