Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/Itnoy6Vp0a4bucYpo8kK90GJ26s.roa
File: Itnoy6Vp0a4bucYpo8kK90GJ26s.roa (raw, json)
Hash identifier: 26rp01zkdsLcdbJCNHO64+gL6accujOBiOfxivH5MY0=
Subject key identifier: 22:D9:E8:CB:A5:69:D1:AE:1B:B9:C6:29:A3:C9:0A:F7:41:89:DB:AB
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 018CC64B13D437ED68AEC5D6900438EA1845
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/Itnoy6Vp0a4bucYpo8kK90GJ26s.roa
Signing time: Mon 01 Jan 2024 18:30:58 +0000
ROA not before: Mon 01 Jan 2024 18:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5626
IP address blocks: 213.146.192.0/19 maxlen: 24
89.26.128.0/17 maxlen: 24
194.38.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:13:d4:37:ed:68:ae:c5:d6:90:04:38:ea:18:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Jan 1 18:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22d9e8cba569d1ae1bb9c629a3c90af74189dbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8d:7f:3a:fc:82:d9:2c:69:37:87:f7:b6:6d:
20:59:b7:08:ba:3e:f2:b4:6e:dc:ae:d3:77:35:ee:
37:0c:37:11:c3:8c:78:59:df:58:d3:de:9f:5f:0b:
6f:f2:3e:15:5f:7a:f7:ec:00:0b:31:98:99:e6:96:
dc:ac:f4:0f:84:86:52:7c:ba:f8:9d:4b:34:15:8d:
8b:fa:44:ad:cd:df:72:12:17:ec:43:91:c3:d2:b1:
02:34:60:3f:41:b3:59:22:6f:a1:e0:23:04:8e:7b:
e5:b5:82:dd:c9:9c:10:2a:af:a8:0a:43:c1:03:f2:
36:e6:42:ae:fa:42:39:b9:96:73:3f:67:bb:0b:76:
8d:2a:2e:d2:c4:f8:a9:f6:4f:33:bd:87:c9:c3:e6:
48:24:51:31:63:1b:ba:59:ba:09:a9:2d:78:08:67:
59:ba:f4:ba:20:8c:7c:81:70:5c:31:48:62:ef:a9:
64:ca:93:89:ca:dd:7a:f3:90:61:b5:5a:98:7d:5c:
a7:2c:da:f4:44:42:fd:da:90:bf:2e:2a:99:d1:28:
fa:6b:a4:aa:5b:c5:a8:26:76:3a:a7:44:6e:02:56:
96:96:00:87:83:c5:5e:95:98:f1:70:4c:99:3d:5f:
03:d4:43:75:d1:e1:6f:4e:d1:3f:6b:7e:23:38:9c:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D9:E8:CB:A5:69:D1:AE:1B:B9:C6:29:A3:C9:0A:F7:41:89:DB:AB
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/Itnoy6Vp0a4bucYpo8kK90GJ26s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.26.128.0/17
194.38.128.0/19
213.146.192.0/19
Signature Algorithm: sha256WithRSAEncryption
17:51:67:41:73:a3:7a:ee:c2:c9:f5:ab:e7:f8:ec:27:f2:3b:
81:30:9d:b8:58:5c:dc:05:1f:36:cd:b0:86:d2:40:6d:4a:00:
03:77:1a:53:3b:f8:91:02:b2:ab:d0:a9:7a:de:90:d3:d0:d4:
f4:cf:00:50:b4:ab:8a:16:50:ae:35:7c:29:c2:5f:81:25:09:
87:8f:21:c8:99:4d:73:c9:b1:3e:3e:e8:c3:64:de:49:0d:e0:
db:14:e2:22:f0:6e:ff:17:65:f1:cc:c1:7d:fe:2e:fa:fb:37:
c7:44:15:6a:bc:c2:c0:c8:18:20:38:87:76:09:bb:05:d2:51:
ef:8f:40:5b:e9:02:ef:e8:f3:a9:b1:2f:b2:49:65:31:fa:66:
07:64:61:6c:31:ef:af:cb:dc:55:90:66:5c:55:69:0f:b1:52:
d2:ad:d7:56:65:44:41:7d:2e:00:58:83:d5:e9:3e:5e:0b:e3:
dc:b0:5a:7d:40:e9:3f:b7:9f:39:a6:45:04:38:37:c8:5f:d9:
18:ce:2e:97:ce:61:03:d9:c8:10:69:18:71:d9:bf:72:79:34:
11:52:54:1c:cb:1e:f5:fc:1a:25:1a:94:35:19:ca:63:1d:97:
04:45:7c:11:54:f2:41:40:2a:a3:84:f6:90:89:12:2a:63:d8:
8e:3c:24:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:22:54 2024 by rpki-client on console-fra.rpki-client.org