Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/IMWWCNqy5FphtAiMS8OFDUHXZFw.roa
File: IMWWCNqy5FphtAiMS8OFDUHXZFw.roa (raw, json)
Hash identifier: bmTSiVl6qB4udIHFs06GZosezYq12NWt67ccfrOUhbc=
Subject key identifier: 20:C5:96:08:DA:B2:E4:5A:61:B4:08:8C:4B:C3:85:0D:41:D7:64:5C
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 018CC4931AA3C71F4C9CD06C18BD64B3E8C7
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/IMWWCNqy5FphtAiMS8OFDUHXZFw.roa
Signing time: Mon 01 Jan 2024 10:30:24 +0000
ROA not before: Mon 01 Jan 2024 10:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 194.9.44.0/24 maxlen: 24
194.9.45.0/24 maxlen: 24
2001:678:e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:1a:a3:c7:1f:4c:9c:d0:6c:18:bd:64:b3:e8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Jan 1 10:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20c59608dab2e45a61b4088c4bc3850d41d7645c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a0:4a:ea:24:f6:91:b1:16:bf:50:f8:b2:2c:
9f:89:aa:a9:48:8d:85:06:a5:d0:01:0d:95:af:82:
2f:7c:30:0c:03:fa:b7:6c:09:57:8b:87:2b:88:e3:
a7:5e:31:ca:99:c0:b2:03:25:1c:c1:f0:0c:a0:02:
89:53:83:41:03:40:50:c9:0b:32:3a:d1:8d:3b:60:
b4:58:1d:dc:b6:df:e3:ce:63:e6:f1:d8:a1:c4:6f:
21:7c:aa:35:9a:68:50:ee:a4:eb:28:a4:f3:8a:4e:
8c:d9:18:42:75:94:ec:96:65:36:2e:98:a3:dc:4d:
33:ef:d4:68:f3:d2:85:fe:c5:0a:be:df:d6:1e:4a:
39:72:d8:8d:98:ac:bc:2e:f0:26:9a:59:41:d9:33:
a7:7c:8d:ff:4b:1c:34:61:ef:b6:c4:af:1c:34:c6:
1b:5b:72:98:41:b1:84:eb:a5:f1:70:2d:22:e9:16:
ad:67:b2:b5:de:99:cc:f1:2e:3e:45:f4:84:62:3d:
ba:68:c5:45:fa:f8:48:b9:00:c7:d3:32:96:67:18:
e4:01:5d:48:72:0e:97:ff:e2:1b:c8:c7:ac:9b:5f:
98:ef:a5:3a:0a:bd:d3:b7:63:ee:57:20:60:5d:e9:
f1:64:b2:48:fe:5a:ad:9b:81:f1:f6:82:56:fd:28:
ab:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C5:96:08:DA:B2:E4:5A:61:B4:08:8C:4B:C3:85:0D:41:D7:64:5C
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/IMWWCNqy5FphtAiMS8OFDUHXZFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.44.0/23
IPv6:
2001:678:e0::/48
Signature Algorithm: sha256WithRSAEncryption
87:16:00:b1:42:62:e5:eb:1a:54:9c:1e:ba:7e:aa:dc:35:5d:
e8:c9:70:47:bb:00:8e:9f:2d:30:92:06:82:32:7a:ce:9e:11:
c8:f5:ed:12:52:23:b3:c5:3f:b7:b2:d6:f2:6c:70:f4:99:0d:
b0:08:8c:82:20:44:d7:06:8c:eb:02:77:c8:04:a5:62:24:5f:
c2:df:04:4b:1d:5e:23:1a:5f:f5:e9:9c:f6:6f:c3:88:39:9f:
b6:3d:7d:11:c4:5e:7a:41:9f:e5:29:76:05:92:68:0b:19:e7:
dc:27:84:a5:b8:14:99:1a:f5:da:a3:05:f3:3a:e1:2a:09:60:
7b:df:5e:71:b7:4f:86:55:43:e7:d2:92:7d:7a:0d:f1:0a:30:
8d:a8:0b:05:2c:d5:e7:1c:44:31:12:ca:03:59:30:84:cc:c3:
ff:04:ed:f9:5e:3f:12:59:d1:76:61:3f:67:08:f5:23:3b:d8:
e9:52:fb:7e:94:f7:68:cd:0c:e6:c0:eb:3e:dc:0d:1f:ff:0a:
6e:ec:37:f1:99:36:d3:ed:b2:da:d5:44:37:63:b6:d0:ae:ff:
ae:21:28:c6:11:12:31:1d:85:c5:c2:44:f6:c3:dc:5a:42:0d:
dc:ab:9e:2c:74:b3:91:7c:55:60:0d:d2:91:67:d3:e3:2e:db:
ed:20:9f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:48:32 2024 by rpki-client on console-ams.rpki-client.org