Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ItbJCJPdPo8zClISs0d1G3pSdbA.roa
File: ItbJCJPdPo8zClISs0d1G3pSdbA.roa (raw, json)
Hash identifier: XH5N80Sb0IMhGd+cz5GC9DoneMxp+WsMB2VpTyBqTuo=
Subject key identifier: 22:D6:C9:08:93:DD:3E:8F:33:0A:52:12:B3:47:75:1B:7A:52:75:B0
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F8AC36ADDF5315519EC7AA5F4135F
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ItbJCJPdPo8zClISs0d1G3pSdbA.roa
Signing time: Tue 02 Jan 2024 04:30:02 +0000
ROA not before: Tue 02 Jan 2024 04:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12525
IP address blocks: 81.198.166.0/24 maxlen: 24
81.198.167.0/24 maxlen: 24
195.13.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:8a:c3:6a:dd:f5:31:55:19:ec:7a:a5:f4:13:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22d6c90893dd3e8f330a5212b347751b7a5275b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:be:8e:15:b8:bc:e5:32:5e:ff:33:e3:48:
13:3c:e3:cb:5c:d7:23:8a:98:99:64:b9:38:67:49:
3f:d0:d6:1a:aa:de:6f:ee:58:20:f8:00:2d:9d:04:
c0:24:aa:5e:34:19:6b:f7:9d:ed:22:39:f1:97:a6:
93:70:c1:db:69:96:2f:4c:3f:84:ea:78:f4:c9:44:
cc:93:d9:b9:f3:fe:8d:a9:6f:33:56:aa:7a:34:1e:
eb:8f:6c:33:8d:c0:b5:ee:88:ea:00:ff:43:ad:f4:
b2:ba:9a:b4:4f:9c:c7:f6:15:19:40:86:ae:2b:3f:
c3:cb:96:f2:2f:04:7a:31:d5:03:b8:6c:e6:73:7a:
3c:97:f3:55:37:1b:81:be:c5:34:4b:6c:70:08:fe:
62:99:95:1e:15:eb:28:3e:dd:51:47:e7:91:88:55:
b6:b4:28:83:1a:ae:95:4c:db:52:6a:bf:5a:49:2e:
41:13:e8:af:5d:e0:44:76:f6:7e:bb:e6:6f:60:cb:
2a:92:70:f2:59:c7:e8:4f:5b:8d:c2:82:78:97:ea:
f0:ab:67:bc:a9:d0:df:a1:b7:b8:7c:3c:9d:ab:7d:
aa:f2:67:89:c8:88:f6:e2:f5:0d:be:25:5e:86:80:
ec:ea:25:b0:89:e0:12:a7:d4:db:35:74:51:c4:bd:
c8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D6:C9:08:93:DD:3E:8F:33:0A:52:12:B3:47:75:1B:7A:52:75:B0
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ItbJCJPdPo8zClISs0d1G3pSdbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.198.166.0/23
195.13.223.0/24
Signature Algorithm: sha256WithRSAEncryption
27:70:49:d2:22:b6:18:4d:12:db:a0:b1:e7:00:1d:b0:85:1d:
01:dd:8b:f4:61:aa:67:e2:90:59:39:4e:93:b5:97:33:13:a7:
a7:ab:91:58:38:87:f3:b7:99:b0:cb:38:c8:38:16:c2:26:d8:
d0:d1:d9:be:f7:28:25:68:60:9a:af:4a:43:04:e7:a7:10:9d:
c5:7f:06:45:68:55:a3:fd:c2:64:26:45:81:4a:f7:30:9b:29:
0f:1a:98:5b:1a:d0:f8:a4:5d:a1:56:3f:5b:f9:d8:73:b5:e3:
ac:53:34:cd:45:59:39:46:6a:63:16:56:77:62:ac:47:84:38:
94:3f:3c:2d:ba:c5:12:b1:19:7c:f4:fd:a7:0e:0b:96:1c:ca:
9c:9d:9a:60:50:7d:13:4e:a6:25:29:f0:b9:04:db:df:81:0b:
fd:e3:d2:3e:74:4b:7b:7c:a8:59:d5:04:e6:31:7d:a6:ee:0d:
78:5d:3f:ad:5b:fc:32:d1:de:5d:5f:04:b2:cc:6c:ce:69:ee:
3d:fb:a0:57:4c:16:b4:28:8f:61:ca:a7:df:61:3f:ed:86:b7:
23:e6:8d:60:0c:86:6f:64:6b:db:e9:9e:10:11:68:12:97:70:
9a:fe:21:63:fe:35:1a:ce:f6:41:0f:2d:14:c3:27:d3:bf:e6:
08:27:92:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 23:05:18 2024 by rpki-client on console-fra.rpki-client.org