Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/icbSWWNNjaiI2jvhZAoCcbvtGSs.roa
File: icbSWWNNjaiI2jvhZAoCcbvtGSs.roa (raw, json)
Hash identifier: JBLJRzuY0Ui6EKYpw3d9Mo2uf1il/pgoOQwQ2KgGmAw=
Subject key identifier: 89:C6:D2:59:63:4D:8D:A8:88:DA:3B:E1:64:0A:02:71:BB:ED:19:2B
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 018CC794E31DC2574F060B0D5DB8ABF3BC0C
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/icbSWWNNjaiI2jvhZAoCcbvtGSs.roa
Signing time: Tue 02 Jan 2024 00:31:12 +0000
ROA not before: Tue 02 Jan 2024 00:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207925
IP address blocks: 45.141.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:e3:1d:c2:57:4f:06:0b:0d:5d:b8:ab:f3:bc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 00:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89c6d259634d8da888da3be1640a0271bbed192b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:72:15:02:99:bb:81:4e:db:bf:10:c8:55:48:
ce:3b:15:d6:99:04:6f:74:d4:6a:25:10:14:c2:60:
bc:d5:ae:f7:fd:78:ff:48:16:57:23:5c:f7:ba:e1:
ce:98:00:8b:d0:d5:9d:84:4f:b9:7e:92:c2:ce:31:
81:06:4b:84:01:93:2a:eb:ad:ea:35:95:4f:09:a3:
a4:8f:8d:10:0f:2a:1d:75:4e:fd:1e:6e:62:1c:06:
42:c1:af:3c:4d:fd:70:85:11:ea:d1:f7:af:be:ba:
4a:71:74:09:88:47:73:47:37:d5:dc:90:75:23:85:
e9:51:e2:7f:64:60:db:0f:85:be:c6:64:50:2a:0b:
af:86:4a:3a:cd:ec:39:de:57:85:55:75:e2:d9:01:
a7:a3:b9:86:bf:79:44:0b:ab:92:37:be:67:10:d9:
18:74:b4:80:68:8b:fe:bd:a0:ed:59:b5:f8:a1:0c:
58:f1:64:b5:f0:87:43:d1:a5:3c:1d:2d:ad:43:7f:
9a:42:fb:94:26:c7:8a:3c:85:11:8c:84:23:0c:c3:
f6:62:df:16:fa:f8:bc:30:c3:dc:b2:8b:d8:3a:a2:
43:8d:5d:b9:f1:ec:d3:e3:3e:59:dc:dc:35:5f:cb:
a4:a7:37:66:fa:fc:94:1d:55:4d:0f:0c:c4:53:0f:
d7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C6:D2:59:63:4D:8D:A8:88:DA:3B:E1:64:0A:02:71:BB:ED:19:2B
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/icbSWWNNjaiI2jvhZAoCcbvtGSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.55.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:a9:fc:65:20:c4:86:7b:28:61:e1:a1:b8:b0:a3:94:a2:c9:
f4:96:90:0e:78:41:74:0f:fe:16:d4:30:3f:da:93:54:b9:2a:
2b:15:3a:24:c6:45:7f:5d:80:7e:e0:18:9b:d0:e2:61:b4:4b:
41:25:2f:f2:c6:83:da:fa:08:2f:f8:2d:e8:dd:de:3d:11:e3:
1b:af:d0:20:b5:cc:39:3f:d2:0b:9d:0d:9a:07:0a:94:10:b2:
1e:f0:6c:37:ed:34:cc:c9:a4:ea:9f:6b:82:06:c2:0d:0d:a7:
00:84:f7:00:5a:52:33:20:11:b9:8d:38:ee:e3:e4:73:82:ee:
c5:ef:b4:de:5d:0e:81:6f:5d:4b:a4:31:0c:b5:9f:96:bd:64:
2d:ed:e2:c0:51:f2:c2:30:b8:d7:10:b9:af:3b:56:e3:97:87:
b4:60:78:e7:6c:42:30:d3:85:e3:d4:02:72:ea:43:9e:85:45:
76:17:3d:cf:a6:a4:12:d8:e4:c3:2d:d2:c6:c4:21:4d:0d:99:
33:98:6a:30:8e:dd:74:b2:10:bf:8f:c2:15:d4:ab:15:8f:46:
0b:aa:1e:25:fc:d9:f0:26:94:9a:c2:04:8b:aa:b4:4a:b8:de:
7c:58:52:9c:6d:e2:06:5f:56:5c:c5:46:1d:b0:0b:69:87:d5:
66:d5:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:12:43 2024 by rpki-client on console-ams.rpki-client.org