Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ixr1pJwCZf1uKVWup9X2DngQupM.roa
File: Ixr1pJwCZf1uKVWup9X2DngQupM.roa (raw, json)
Hash identifier: /y6GSiu4LvB1OfA1F3FN5fBbUb92nC0AjK3nKEOMHrw=
Subject key identifier: 23:1A:F5:A4:9C:02:65:FD:6E:29:55:AE:A7:D5:F6:0E:78:10:BA:93
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B519CFDB9B487D6F9508CB5FDB98A
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ixr1pJwCZf1uKVWup9X2DngQupM.roa
Signing time: Tue 02 Jan 2024 12:34:45 +0000
ROA not before: Tue 02 Jan 2024 12:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41653
IP address blocks: 185.119.254.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:51:9c:fd:b9:b4:87:d6:f9:50:8c:b5:fd:b9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=231af5a49c0265fd6e2955aea7d5f60e7810ba93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:67:e1:de:02:20:20:83:9d:87:f4:2f:68:fc:
a4:ec:5f:ed:da:9c:ed:41:fc:fe:f0:20:12:48:39:
49:30:4c:07:e0:89:5f:cb:c8:d4:72:4b:eb:bd:81:
f0:19:84:c0:67:ba:d2:5f:a4:0e:36:85:05:ad:20:
d6:1a:23:1b:ec:e5:08:56:fd:21:e7:0e:e1:0d:a1:
b8:ca:11:aa:2f:99:d3:bc:81:e8:81:34:dd:d2:04:
a8:79:84:a5:c8:f1:65:dc:e1:5f:8d:35:94:35:fb:
0e:04:45:85:4a:b2:9f:a6:94:4d:ae:44:65:82:97:
e0:f0:16:59:88:42:01:81:63:62:4b:ab:39:72:14:
11:6d:ab:1d:b7:38:18:e0:4f:a9:c1:f7:54:d9:b9:
18:b2:4e:cb:e3:51:96:91:f5:98:0a:51:43:54:61:
d7:14:be:1a:49:26:48:ea:7c:48:09:1c:2f:a0:ea:
95:3f:6f:45:b3:84:a6:1d:5a:1d:e1:1d:68:56:fc:
b6:21:c0:92:49:ea:1d:ad:6c:a1:f0:7c:6d:28:db:
75:5a:a3:56:94:b9:f0:bd:8b:30:1c:01:02:74:54:
4e:3d:cb:3a:4f:45:c2:ea:31:b1:ef:8e:d4:b4:36:
2e:15:28:f7:5f:c1:ad:14:7b:8e:0c:cf:c8:dc:7e:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1A:F5:A4:9C:02:65:FD:6E:29:55:AE:A7:D5:F6:0E:78:10:BA:93
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ixr1pJwCZf1uKVWup9X2DngQupM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.254.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:69:94:6a:bb:9e:f8:28:83:db:5e:fa:f6:44:aa:49:4b:ba:
63:70:db:bd:ae:ea:24:f5:b6:04:e2:af:e9:bb:87:2c:b0:bf:
83:14:d4:2d:d2:d3:87:d5:31:c0:c0:3f:54:9a:fa:29:8c:94:
c4:15:40:1c:17:5a:80:74:5c:e3:6a:a4:62:94:13:da:93:3a:
e6:ff:27:9d:36:8f:58:b8:18:cd:a6:c3:3b:92:08:1f:93:c6:
1e:55:12:39:05:8d:69:01:b2:c9:7d:46:00:aa:01:74:21:db:
d0:c8:c3:ee:cc:dc:b3:e0:4c:0b:6f:fe:a5:5d:c0:d3:56:41:
ba:c8:25:8f:40:69:0f:a4:61:9a:ee:26:d7:7b:c3:d8:79:0d:
b2:c4:5f:a6:94:1e:39:c4:e6:a4:38:8c:63:ab:63:9e:fa:d1:
73:60:33:4b:c6:04:69:2a:32:57:ff:6b:3e:4b:b1:3b:2a:5f:
91:24:20:ab:8a:44:c4:37:f7:25:ef:4b:f9:79:da:c5:ee:ad:
37:30:f5:42:89:b4:9f:35:af:df:47:e7:93:63:36:3d:45:ea:
5a:ab:c5:78:f3:fd:85:18:ea:a8:2a:9f:dd:43:62:e2:70:de:
58:43:d4:49:68:63:9d:1d:cd:82:cf:b8:21:be:61:ca:d5:6b:
a2:e0:0c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:35:57 2024 by rpki-client on console-fra.rpki-client.org