Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/IjXfrYLnl4gBcaL_zV9-OFBgKRQ.roa
File: IjXfrYLnl4gBcaL_zV9-OFBgKRQ.roa (raw, json)
Hash identifier: dbnirSsH7pQKR6dIC9FXUdwhk0WvYYfGalYZO4ox9p0=
Subject key identifier: 22:35:DF:AD:82:E7:97:88:01:71:A2:FF:CD:5F:7E:38:50:60:29:14
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 018CC2DB54E47A1D723654C64BD8C1265AB5
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/IjXfrYLnl4gBcaL_zV9-OFBgKRQ.roa
Signing time: Mon 01 Jan 2024 02:30:03 +0000
ROA not before: Mon 01 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207605
IP address blocks: 176.119.205.0/24 maxlen: 24
195.189.141.0/24 maxlen: 24
2a05:4500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:54:e4:7a:1d:72:36:54:c6:4b:d8:c1:26:5a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2235dfad82e797880171a2ffcd5f7e3850602914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:30:41:e2:a3:83:ab:e4:16:fc:d5:8a:64:
c3:c7:5f:84:3e:91:44:95:83:a9:75:aa:05:8c:e8:
a3:44:8c:76:23:a0:be:fe:41:f0:5d:ff:7d:d3:a6:
df:99:55:ec:53:ca:55:ea:55:e4:ec:78:72:20:61:
d2:17:bc:92:a7:ae:a9:b0:09:c3:b9:42:c8:43:12:
1a:cc:51:a2:fd:35:23:89:5c:79:57:51:46:b8:5d:
d2:f7:f0:2f:cf:7e:07:2c:2a:a5:af:7a:2c:c3:42:
41:14:ec:38:e6:6b:ab:5d:4f:af:bb:ab:09:fc:fb:
77:29:e8:d8:be:db:68:ae:3c:4f:ab:72:52:9a:7e:
68:c1:da:86:cb:ef:9d:08:83:dc:d1:f3:4b:2a:d9:
e7:0e:6f:f2:4f:37:8d:e1:bb:86:a6:7e:96:9a:a6:
62:a2:84:94:f4:af:24:2a:33:7d:cf:73:41:b9:20:
0d:1a:8b:fa:35:a7:ce:14:fd:1c:44:0f:6d:9b:17:
48:98:9c:ab:bd:01:6f:3d:1b:5f:11:ff:18:58:17:
92:3d:9d:3c:f2:e1:fa:7d:ec:36:6c:a2:ae:f6:5b:
95:0f:a9:f0:d8:50:a8:41:d2:72:b5:e9:df:d4:42:
33:19:10:aa:f5:46:44:02:9f:db:f1:75:1f:de:ec:
35:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:35:DF:AD:82:E7:97:88:01:71:A2:FF:CD:5F:7E:38:50:60:29:14
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/IjXfrYLnl4gBcaL_zV9-OFBgKRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.205.0/24
195.189.141.0/24
IPv6:
2a05:4500::/29
Signature Algorithm: sha256WithRSAEncryption
57:54:e5:22:2b:52:f6:91:5d:92:b6:b9:58:b7:6b:38:ae:7a:
6a:f7:4a:75:a1:34:29:4a:58:e2:27:bf:c0:0e:f2:e4:f7:f8:
0f:73:39:c1:bf:e2:70:f4:36:85:f9:fb:16:3d:64:43:20:7b:
d8:7a:51:dd:6b:50:4e:cd:bd:65:12:0c:77:ef:73:24:d1:8d:
3d:2b:60:53:fc:29:0c:0d:6e:b0:c4:c2:b4:a0:b8:8c:96:d5:
e3:72:1b:e6:6e:8c:69:91:9b:4e:72:23:e7:50:ac:c9:a9:8f:
23:7d:4c:38:fe:8b:c5:a2:94:33:cc:76:d9:78:7b:56:61:66:
97:de:35:59:86:37:c0:d7:5d:0b:ac:40:e0:2c:c7:ee:8c:2c:
0c:8d:79:a7:a0:89:b5:69:06:27:4e:58:10:84:f2:9b:09:84:
97:e3:0e:41:f9:36:8a:93:fc:82:67:f6:4c:6d:80:0a:f8:55:
06:84:d8:9c:dc:f5:a0:76:4f:fc:2c:2c:ed:60:02:19:01:7a:
b3:df:1a:aa:9e:d2:56:f4:a8:2f:fe:6f:95:a1:25:b6:f4:09:
a5:9c:ee:74:aa:fd:fc:51:5c:fd:67:43:6e:77:d8:73:ef:5e:
79:4c:22:a9:95:d0:56:9d:1c:65:6d:65:c4:d1:9a:1c:59:e1:
4e:6f:5b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:18:57 2024 by rpki-client on console-fra.rpki-client.org