Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/IiFOsA2-R5aEbUJNVJlZ5z_3rE4.roa
File: IiFOsA2-R5aEbUJNVJlZ5z_3rE4.roa (raw, json)
Hash identifier: MlZBPwkaNircIcDNcD8e2s2yi/ZAfpxT7ikG71iXhZA=
Subject key identifier: 22:21:4E:B0:0D:BE:47:96:84:6D:42:4D:54:99:59:E7:3F:F7:AC:4E
Certificate issuer: /CN=560805b7301871169bd09b886569d1f69dc19b57
Certificate serial: 018CC64AB85562878E5A5EC8F5E10177A05C
Authority key identifier: 56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/IiFOsA2-R5aEbUJNVJlZ5z_3rE4.roa
Signing time: Mon 01 Jan 2024 18:30:34 +0000
ROA not before: Mon 01 Jan 2024 18:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20681
IP address blocks: 185.16.140.0/22 maxlen: 24
193.178.175.0/24 maxlen: 24
193.219.31.0/24 maxlen: 24
46.19.248.0/21 maxlen: 24
2a01:8300::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:b8:55:62:87:8e:5a:5e:c8:f5:e1:01:77:a0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560805b7301871169bd09b886569d1f69dc19b57
Validity
Not Before: Jan 1 18:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22214eb00dbe4796846d424d549959e73ff7ac4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:e2:81:9c:88:c2:dc:d5:27:9c:f6:07:1f:
61:fc:f2:6a:16:20:88:c1:9d:da:8d:5b:5b:b6:f3:
a3:f5:f9:95:92:d1:eb:6e:96:dd:25:3e:34:49:f3:
bd:7b:3e:ea:c2:15:7b:fc:b1:e8:2b:79:b4:24:4b:
0d:d0:0d:a5:fd:06:8b:e8:9f:f3:ad:bf:4a:ad:1e:
ca:90:ee:74:f4:6c:99:7e:e9:c3:e3:97:dd:95:d0:
c4:bb:b5:3c:85:5f:e6:9b:32:c1:f5:fd:33:e8:6c:
67:97:0c:2e:5d:00:0e:31:50:fd:7f:0e:bd:b4:c8:
4d:87:03:a3:3f:f5:63:60:13:cb:c4:e1:4e:56:31:
b1:69:0c:0f:b1:89:cf:7c:7f:87:6b:95:8b:59:2e:
cd:ac:07:85:27:51:fd:b6:ef:2d:74:f0:c2:c4:b8:
c3:e3:c3:ee:f0:3e:3a:5e:e7:0d:dc:4d:d2:83:10:
6c:d8:8b:ed:c2:cc:6b:35:85:4b:71:04:df:ac:0d:
7e:af:0e:cf:33:17:d4:ae:43:a8:5e:cd:24:89:94:
2a:f4:4a:bb:71:1e:bd:9e:78:ac:ca:1a:36:d4:9b:
4e:7e:a9:03:a3:09:0a:0a:e9:16:49:2e:37:23:bf:
58:d3:d5:70:81:1b:72:e9:7a:3e:bf:10:f3:aa:db:
bf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:21:4E:B0:0D:BE:47:96:84:6D:42:4D:54:99:59:E7:3F:F7:AC:4E
X509v3 Authority Key Identifier:
keyid:56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/IiFOsA2-R5aEbUJNVJlZ5z_3rE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.248.0/21
185.16.140.0/22
193.178.175.0/24
193.219.31.0/24
IPv6:
2a01:8300::/32
Signature Algorithm: sha256WithRSAEncryption
1f:30:76:66:4d:12:39:56:95:18:c5:ed:04:a6:1a:ea:5a:1d:
53:12:48:20:1b:69:32:bb:df:40:31:28:55:28:29:88:a9:31:
95:8d:65:15:03:ac:5a:37:a9:88:bf:78:64:c4:5c:d5:bc:90:
3a:ca:4d:50:15:d4:3b:cc:9c:f7:94:b2:82:cd:8b:85:22:9f:
9c:0f:8d:ae:84:0d:bd:fc:2f:3f:fa:83:28:eb:30:e0:61:a7:
0b:93:59:4b:85:d9:47:cf:6c:75:2d:38:26:bd:39:f3:58:f6:
58:42:de:17:6f:47:53:c2:ad:f1:6e:75:14:68:a8:1b:7f:09:
c2:4e:86:fb:67:99:25:45:34:3b:00:39:c2:c0:a7:10:c4:bd:
74:36:84:3a:e7:37:68:36:f0:dc:2a:fc:18:ef:3c:71:9e:b7:
d7:51:46:50:dd:f4:7b:47:35:95:30:72:c7:fd:c0:d6:64:40:
6b:73:62:61:00:a8:25:31:94:a2:e6:d0:f0:30:a9:39:aa:60:
58:05:29:5c:2c:9e:73:9b:58:d8:a0:88:77:5a:e6:0d:ad:8f:
e9:9d:4e:ba:62:37:bf:ed:3e:9d:27:43:31:bf:ea:04:e7:a0:
3b:dd:ee:56:2c:e3:95:08:ce:43:75:a9:4e:26:f5:a1:3e:92:
de:40:af:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:20:50 2024 by rpki-client on console-fra.rpki-client.org