Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/ivpHAhe9DK-W1wLPVCSZnxsdX88.roa
File: ivpHAhe9DK-W1wLPVCSZnxsdX88.roa (raw, json)
Hash identifier: Z7bKvuN42Sb/1aYv1/5RiYISxaIu/1k9tGgN4pk+wvQ=
Subject key identifier: 8A:FA:47:02:17:BD:0C:AF:96:D7:02:CF:54:24:99:9F:1B:1D:5F:CF
Certificate issuer: /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Certificate serial: 018DC693A31CDE2849958F3C04E8E6BC3BF7
Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/ivpHAhe9DK-W1wLPVCSZnxsdX88.roa
Signing time: Tue 20 Feb 2024 12:53:00 +0000
ROA not before: Tue 20 Feb 2024 12:53:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210147
IP address blocks: 213.109.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c6:93:a3:1c:de:28:49:95:8f:3c:04:e8:e6:bc:3b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Validity
Not Before: Feb 20 12:53:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8afa470217bd0caf96d702cf5424999f1b1d5fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:61:df:11:41:0f:6d:e0:a6:bd:07:d9:77:
86:2e:4c:89:d2:bb:73:78:63:ce:60:a3:d6:33:6d:
95:1b:c2:ce:49:20:c5:44:25:f6:5d:79:3d:12:b9:
b9:85:94:bf:2e:34:30:31:46:d9:d5:9f:9e:c8:6b:
de:d2:16:4a:f3:96:9e:d6:1d:8d:2d:2c:99:27:2b:
c2:db:ce:e4:dd:d3:63:28:d4:23:60:51:b3:6c:77:
ca:03:3a:98:43:8d:ee:d6:5d:31:4f:25:39:00:88:
b1:00:b6:df:c4:cd:ea:60:e4:85:67:68:48:94:e0:
21:64:36:a8:82:fa:f2:36:3d:b9:f8:c2:71:0b:38:
17:f1:fa:c2:a9:be:e4:bb:19:7a:3a:b5:a0:55:39:
00:06:5e:53:bb:25:95:2b:82:f2:24:e4:8d:eb:1f:
4f:98:07:b1:77:6d:b8:52:1f:0f:c4:05:6a:20:8f:
19:ef:15:b7:08:cd:ba:fd:26:7e:d8:5d:02:8f:55:
21:69:ad:87:c6:4e:a4:94:58:3d:2f:11:26:e2:1e:
0d:10:eb:65:2a:2c:c9:b9:aa:00:b8:fc:d8:67:29:
7a:9c:81:e2:f2:60:72:86:97:ce:2c:9f:92:0d:f1:
a5:d8:ea:27:49:2e:60:e5:b2:23:8a:e6:f2:b2:39:
03:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FA:47:02:17:BD:0C:AF:96:D7:02:CF:54:24:99:9F:1B:1D:5F:CF
X509v3 Authority Key Identifier:
keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/ivpHAhe9DK-W1wLPVCSZnxsdX88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.197.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e3:37:24:8e:61:22:9f:36:a0:86:b0:e0:5d:d3:cb:f3:ae:
b8:bc:10:8d:7c:3b:92:43:ff:ed:a9:5e:18:2f:39:84:7e:1f:
0a:a2:dc:39:1c:31:f7:e5:f9:2b:bb:a8:33:b9:59:19:d3:c6:
86:d8:15:01:7e:6a:c2:9d:67:ae:1a:de:e5:08:ab:a5:25:85:
ec:82:3d:5c:26:e3:b9:8d:61:f7:9c:bc:8f:6f:64:4c:7e:97:
d3:68:e7:52:08:45:4b:ec:c3:9c:64:4f:f6:df:f6:d9:f3:c9:
a5:7d:05:24:8b:f1:1a:5c:90:cc:8f:52:03:78:0b:fe:23:ef:
01:4e:16:0f:bf:e0:01:46:7f:fc:52:ab:1c:da:d5:20:5f:0f:
1d:a8:6b:b9:16:b7:9e:80:73:28:ca:cb:a5:d6:68:b7:2a:73:
55:3c:53:c8:19:bf:f9:3d:2b:6e:f3:e5:5d:1e:a8:da:1b:1c:
27:1d:fe:25:8d:0f:f1:d9:a4:a6:80:48:f9:d3:22:8b:02:20:
d1:d9:13:61:88:2e:ec:ed:93:62:cc:18:ca:25:a2:fa:13:bc:
94:52:e2:6e:e6:a3:7c:9f:aa:40:24:ce:16:c1:20:32:8a:be:
b1:0a:b0:29:9a:42:52:ea:71:19:4a:34:1a:4c:85:1b:d7:4a:
34:7d:5a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:16:17 2024 by rpki-client on console-ams.rpki-client.org