Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/iATKWIkD06Xkwedl6oU4RGHzqmE.roa
File: iATKWIkD06Xkwedl6oU4RGHzqmE.roa (raw, json)
Hash identifier: wpwO0HlDIoPqWewjFbKP5Andzy3fEZl3THlYKaSIhf8=
Subject key identifier: 88:04:CA:58:89:03:D3:A5:E4:C1:E7:65:EA:85:38:44:61:F3:AA:61
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 018CC4248B9AF8ABA01695F79D78E5C422C4
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/iATKWIkD06Xkwedl6oU4RGHzqmE.roa
Signing time: Mon 01 Jan 2024 08:29:38 +0000
ROA not before: Mon 01 Jan 2024 08:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60609
IP address blocks: 45.67.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 01:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:8b:9a:f8:ab:a0:16:95:f7:9d:78:e5:c4:22:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Jan 1 08:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8804ca588903d3a5e4c1e765ea85384461f3aa61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:b2:35:3d:49:09:c4:62:0b:0e:13:c0:e9:
9f:35:a7:f1:19:f3:2a:d0:33:ef:0a:93:76:9c:bd:
b2:86:f3:97:21:ef:8d:e3:2c:5d:01:c7:17:6e:ac:
b7:33:da:09:44:99:23:1c:5d:7b:66:87:d2:a7:69:
77:78:dd:1f:cb:63:cf:a2:a6:aa:6a:16:e8:c4:1b:
be:0f:20:c0:24:0a:ee:22:79:8d:72:e6:04:36:ed:
e1:7b:52:5e:0b:7b:a8:9e:48:21:35:75:76:c1:f6:
ef:fa:b8:ae:c1:2a:a5:de:a2:f3:9f:48:a6:46:1b:
9c:cf:cf:97:01:28:56:ec:45:4b:bf:f6:4f:f4:20:
a1:59:92:29:96:b8:57:9f:dd:c0:40:93:8a:a5:7e:
c4:9b:8b:fb:94:af:81:2a:b4:da:83:65:b8:df:19:
42:4b:80:c0:d1:05:0a:3f:07:2e:e4:3c:67:a5:03:
30:1d:e7:66:5b:9e:7c:0b:21:59:40:b1:c0:2e:67:
cc:81:25:d5:5f:30:19:81:4c:d0:88:15:a6:3e:a4:
61:41:a0:03:d2:e9:ca:2d:26:92:a4:d0:0d:5a:8b:
4d:11:0e:39:ce:a4:93:eb:35:d6:cb:16:31:df:d0:
5e:62:92:ab:54:18:2b:03:4c:9a:cc:af:7a:df:dd:
a3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:04:CA:58:89:03:D3:A5:E4:C1:E7:65:EA:85:38:44:61:F3:AA:61
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/iATKWIkD06Xkwedl6oU4RGHzqmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.148.0/22
Signature Algorithm: sha256WithRSAEncryption
39:ca:52:18:fe:6f:f9:18:14:96:bd:76:a2:9f:2a:d2:ec:08:
f0:73:97:90:b5:f3:71:14:c9:f4:11:2f:2e:23:a3:34:9d:09:
a1:28:62:d3:b7:42:b2:4e:60:04:2e:60:e2:ca:0f:64:3f:90:
ca:d1:7e:66:f3:a7:c7:13:a5:34:8a:8c:da:08:18:f9:b7:aa:
cf:15:9c:e8:b5:85:2d:be:ba:04:43:df:5b:cf:b3:8d:62:ae:
6f:9b:1b:28:60:53:c9:57:ad:43:d7:fd:20:82:f8:96:4c:8b:
12:1d:91:83:87:e4:18:83:a5:0c:6e:e5:97:48:40:eb:52:03:
de:99:f8:83:c1:84:43:a3:52:c7:73:aa:1f:a9:c1:79:67:eb:
18:3d:3b:ac:91:04:db:9d:5b:fe:43:a6:a3:45:01:3b:30:16:
5c:01:2c:86:a7:3b:51:49:e7:7d:78:21:ce:bb:7e:ea:53:09:
3c:4d:2e:e4:20:e4:2e:67:8e:8e:dc:44:21:7d:06:64:e2:fe:
e6:9a:d0:fe:cc:a8:94:b8:17:5f:40:08:ae:39:51:af:8d:00:
ae:1d:27:ce:98:76:81:1b:7d:86:7f:b8:bf:91:fc:70:39:ae:
1d:42:c3:c8:8d:51:44:6a:8d:ba:82:ba:07:4b:45:5b:16:94:
19:e6:2c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 11:44:51 2024 by rpki-client on console-fra.rpki-client.org