Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/Iot7Ai20027hrIpy5ZJz_zTwGgo.roa
File: Iot7Ai20027hrIpy5ZJz_zTwGgo.roa (raw, json)
Hash identifier: 1S6ETnnCAVl0uEwIKeM/2yxJLB7s1ukoofIC9P7XEr0=
Subject key identifier: 22:8B:7B:02:2D:B4:D3:6E:E1:AC:8A:72:E5:92:73:FF:34:F0:1A:0A
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 018CC726E6A61084F2DED86AAA2749833052
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/Iot7Ai20027hrIpy5ZJz_zTwGgo.roa
Signing time: Mon 01 Jan 2024 22:31:04 +0000
ROA not before: Mon 01 Jan 2024 22:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42852
IP address blocks: 149.3.152.0/22 maxlen: 22
149.3.156.0/22 maxlen: 22
91.151.224.0/22 maxlen: 22
91.151.232.0/22 maxlen: 22
91.151.228.0/22 maxlen: 22
91.151.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:e6:a6:10:84:f2:de:d8:6a:aa:27:49:83:30:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Jan 1 22:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=228b7b022db4d36ee1ac8a72e59273ff34f01a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:c5:eb:66:b7:5b:1a:b6:ed:77:83:d5:8c:
74:a3:d3:b5:95:d3:c9:25:70:4c:50:77:3c:32:46:
87:dd:d9:bb:7e:a6:6a:12:54:e8:32:c0:a4:8b:07:
30:b1:36:12:35:12:e4:9c:18:d0:99:69:a8:63:17:
dc:7c:53:fa:14:20:75:fa:07:aa:e7:3a:df:16:11:
f2:7f:01:ff:af:85:d5:12:35:62:da:cb:02:4b:9f:
df:c7:02:af:89:6a:42:d8:f4:14:43:04:33:d7:cb:
da:a7:bd:99:c6:52:39:7d:c5:c7:6c:7d:3c:04:d3:
fd:01:f7:07:52:f6:f7:50:05:67:2b:e5:97:88:7c:
26:36:dc:39:a5:ac:e3:6b:63:29:17:81:64:7f:5e:
67:fd:d4:95:5a:1f:5a:1a:4e:95:9d:32:b7:fa:bd:
e2:bb:24:7d:a6:a2:9a:72:37:6b:a8:28:fd:5e:92:
88:c8:65:7a:0b:3a:97:21:1e:ed:c2:2a:c5:7f:ac:
ba:9a:15:8d:60:45:df:be:f7:7a:4a:d3:58:90:78:
20:7f:f8:40:7b:88:ef:a7:bd:eb:33:5d:f7:36:64:
46:c2:ec:0f:e3:c3:14:9a:2c:2e:86:29:e0:02:b7:
0d:d2:3a:5d:3b:33:d7:e8:11:b5:d6:ba:dd:24:c1:
19:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8B:7B:02:2D:B4:D3:6E:E1:AC:8A:72:E5:92:73:FF:34:F0:1A:0A
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/Iot7Ai20027hrIpy5ZJz_zTwGgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.224.0/20
149.3.152.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:5b:7f:0f:8d:89:5c:28:f5:37:ad:e4:a2:9f:98:45:38:73:
8e:fd:7d:f5:51:a8:35:f7:5a:5d:0c:76:02:bd:45:b5:06:9a:
69:b1:fa:60:0b:e7:40:03:04:3d:cb:63:17:e3:3f:17:d9:10:
da:78:4f:b3:0d:73:13:6d:a9:e9:90:87:dd:8f:a4:56:dc:f8:
ea:19:28:bf:a2:c3:6c:a0:36:37:c3:48:9c:39:40:aa:b1:7b:
de:93:6b:63:aa:5f:00:a2:38:6a:8a:b3:24:f6:b5:b6:8a:66:
bf:24:85:7e:0a:73:85:ab:3e:f9:9c:bb:2a:45:d0:43:98:9a:
8f:30:c0:7b:22:ac:7f:af:28:f3:f5:31:80:77:f9:30:dd:89:
14:8b:3c:79:be:54:94:36:5b:7e:f2:03:2b:0d:ea:f4:12:87:
23:21:b8:47:14:81:a0:30:be:a9:00:d3:6f:2c:4f:55:41:27:
49:16:4e:86:06:28:c8:06:82:a8:35:eb:f7:33:db:59:f9:d7:
96:da:19:41:aa:d5:87:83:a8:f3:a2:e1:91:f6:ee:d9:4e:fa:
44:e1:bb:f0:89:52:26:47:c5:54:22:fe:af:87:68:eb:08:be:
fe:06:e5:66:c1:4f:a7:9a:83:fc:13:4a:6b:42:ef:5c:c3:02:
b9:99:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:30:59 2024 by rpki-client on console-ams.rpki-client.org