Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/ioar9alyWI8wLlovRI-n6NS4310.roa
File: ioar9alyWI8wLlovRI-n6NS4310.roa (raw, json)
Hash identifier: V+QCDq7NAmpt1J2ukaEC5GGaCHYDfnPhV+s3w5zmrEo=
Subject key identifier: 8A:86:AB:F5:A9:72:58:8F:30:2E:5A:2F:44:8F:A7:E8:D4:B8:DF:5D
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 018CC8706BF042C2F16645CCE99B2920ED77
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/ioar9alyWI8wLlovRI-n6NS4310.roa
Signing time: Tue 02 Jan 2024 04:30:59 +0000
ROA not before: Tue 02 Jan 2024 04:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196838
IP address blocks: 194.156.253.0/24 maxlen: 24
194.156.252.0/24 maxlen: 24
194.156.255.0/24 maxlen: 24
194.156.254.0/24 maxlen: 24
109.69.164.0/24 maxlen: 24
109.69.163.0/24 maxlen: 24
109.69.166.0/24 maxlen: 24
109.69.165.0/24 maxlen: 24
109.69.160.0/24 maxlen: 24
109.69.162.0/24 maxlen: 24
109.69.161.0/24 maxlen: 24
93.159.192.0/24 maxlen: 24
109.69.167.0/24 maxlen: 24
93.159.198.0/24 maxlen: 24
93.159.197.0/24 maxlen: 24
93.159.199.0/24 maxlen: 24
93.159.194.0/24 maxlen: 24
93.159.193.0/24 maxlen: 24
93.159.196.0/24 maxlen: 24
93.159.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 04:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:6b:f0:42:c2:f1:66:45:cc:e9:9b:29:20:ed:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Jan 2 04:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a86abf5a972588f302e5a2f448fa7e8d4b8df5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:42:0a:bf:24:61:7e:ca:69:54:41:83:2a:
72:bc:b6:a2:be:81:7a:3b:21:af:41:3e:c4:f0:1f:
5a:ef:77:bd:93:8e:ff:7d:d3:cc:4d:7c:b2:f7:ec:
ad:9a:0f:ed:e9:81:b0:29:9b:27:a9:f7:2c:36:13:
a7:9c:78:5f:d9:13:a9:a1:1b:c9:ca:90:f8:68:4a:
f7:0c:0b:e6:68:56:5d:4e:8f:84:6c:dc:6c:fe:33:
b0:c7:cd:5d:61:bd:c4:e6:2b:1d:f3:0a:b0:10:82:
d0:da:b0:60:e6:b1:11:11:d9:bf:2a:5b:0e:92:7f:
df:fd:5f:42:b7:42:92:a3:37:21:33:63:f1:84:63:
3d:4f:8a:ff:03:0d:ba:60:25:ab:d9:2c:b5:22:58:
5e:87:9f:ce:f9:e0:2a:51:0d:6c:b2:4c:bb:86:1e:
34:0e:c0:62:ca:98:81:2a:64:2c:36:b3:b1:9d:14:
5d:f7:6d:9a:82:42:9e:5b:0e:b3:23:b9:5a:46:36:
a5:83:ee:4d:5f:65:cb:9c:38:6b:8b:f6:7d:3e:0a:
dd:b6:b9:3f:b7:11:76:62:5e:7d:76:34:99:07:20:
db:d6:d6:17:0d:c7:dd:65:99:be:9d:64:bb:bf:ea:
d8:e9:e8:ba:30:27:9b:7b:ba:12:20:d2:fe:55:33:
3c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:86:AB:F5:A9:72:58:8F:30:2E:5A:2F:44:8F:A7:E8:D4:B8:DF:5D
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/ioar9alyWI8wLlovRI-n6NS4310.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.192.0/21
109.69.160.0/21
194.156.252.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:b0:8f:a8:cc:3c:42:6f:4f:ae:74:c8:b5:3e:4c:76:1b:f4:
65:c9:1b:dd:24:a8:14:5c:dc:c1:57:4b:dc:a1:1e:bc:d7:a6:
9f:b3:fd:f2:06:0f:bc:73:77:65:e3:69:a2:50:d9:ba:00:68:
ac:fc:41:8c:f3:3f:01:37:28:2f:9a:4c:bd:85:75:7b:be:4f:
00:5d:73:ad:cb:cc:f3:7e:30:f0:5b:35:89:52:b1:c4:e9:0d:
bc:ae:08:4a:1b:aa:3a:d7:f6:8c:7c:69:83:0d:66:80:e1:ca:
96:21:54:00:45:7b:87:5a:46:9d:cf:3e:4a:89:20:1f:59:d9:
fd:29:cb:cf:65:78:a4:15:bd:6b:ce:07:51:f3:4f:21:4f:ab:
c5:8e:0c:03:65:39:00:86:c1:9b:eb:a3:33:e8:93:58:88:ed:
01:99:a4:ca:ba:f4:e3:40:44:d8:62:90:d4:90:d4:ee:0c:4e:
b4:ac:b8:79:a0:24:c1:4a:a4:3e:36:49:df:35:43:65:2f:6b:
e0:fe:d8:19:11:95:a5:61:8f:91:99:16:8c:1b:39:74:9d:71:
04:30:70:f0:44:8e:09:0d:5a:54:11:c0:9b:cc:ed:b5:25:ea:
4f:d7:05:56:a8:b4:05:9f:e2:b0:f2:90:f2:26:50:c0:e7:3a:
ed:7a:1c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 10:47:21 2024 by rpki-client on console-fra.rpki-client.org