Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I9SZ8nr-j6Pa_AaCUES05H7WEXY.roa
File: I9SZ8nr-j6Pa_AaCUES05H7WEXY.roa (raw, json)
Hash identifier: JEuGCQWN02tCZjYINVTfI9U4OGs6SsuAW+WqrBgUG6Q=
Subject key identifier: 23:D4:99:F2:7A:FE:8F:A3:DA:FC:06:82:50:44:B4:E4:7E:D6:11:76
Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial: 018CC6B91FEF0FABB10F9D0E887716662A51
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I9SZ8nr-j6Pa_AaCUES05H7WEXY.roa
Signing time: Mon 01 Jan 2024 20:31:10 +0000
ROA not before: Mon 01 Jan 2024 20:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47232
IP address blocks: 147.161.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:1f:ef:0f:ab:b1:0f:9d:0e:88:77:16:66:2a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Validity
Not Before: Jan 1 20:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23d499f27afe8fa3dafc06825044b4e47ed61176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5f:88:1c:16:83:74:8f:70:34:a1:fe:ba:0a:
d0:2b:ba:a9:05:ce:34:13:ff:fb:3c:9e:8d:d3:0a:
03:ee:e6:c9:8a:73:39:71:c7:07:0b:a1:c8:e8:c0:
44:8f:99:e7:a0:d4:ea:3a:04:d9:6b:b2:55:35:53:
0d:26:91:d5:ac:ab:8e:a0:ca:9c:5d:00:82:e3:e3:
7c:47:dc:49:45:e9:d8:72:02:c0:e2:99:ea:a5:dc:
c3:e7:03:9e:65:92:50:aa:ad:37:45:34:b4:93:e2:
5d:3a:79:a8:89:96:f5:d3:d7:74:52:ef:46:d5:2c:
b1:8c:fb:69:77:e1:9c:6d:40:1d:56:ef:01:76:17:
a1:8f:c9:78:87:23:da:c6:c6:cd:b3:06:54:d7:5f:
85:5c:25:7e:9d:ec:49:79:7b:e6:35:0a:2c:45:60:
30:f0:fc:1f:45:2e:c0:eb:24:1f:a3:f3:22:4e:77:
ef:ef:79:18:f0:89:39:7c:9c:2e:78:02:b7:b1:b0:
a1:3b:2b:13:da:40:70:0e:f3:94:ec:c4:e1:78:68:
1d:57:9f:cc:a9:1d:ad:58:77:bc:e0:85:8c:0f:09:
72:ef:99:0a:2f:e6:7c:6d:20:cc:86:b8:62:3a:34:
95:45:ff:02:ba:82:df:d2:05:31:c2:a2:8f:4a:f5:
ef:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D4:99:F2:7A:FE:8F:A3:DA:FC:06:82:50:44:B4:E4:7E:D6:11:76
X509v3 Authority Key Identifier:
keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I9SZ8nr-j6Pa_AaCUES05H7WEXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.28.0/22
Signature Algorithm: sha256WithRSAEncryption
81:69:c2:98:2c:67:53:6d:c8:3a:3f:40:f9:93:3d:f6:0f:36:
02:5d:de:88:ac:32:05:bb:23:d8:d1:1e:ed:48:b0:7b:c9:61:
30:fa:02:79:c4:4f:0f:f8:83:e1:3e:22:15:70:b4:f0:9b:0f:
bc:80:7c:a5:79:fb:74:5e:ae:be:b2:5f:76:a4:0c:e1:7d:e7:
e0:d0:fc:44:27:9a:5a:ce:74:03:40:a6:cc:c0:17:f8:98:23:
04:a7:9e:09:f4:22:21:2a:68:ae:8a:8d:19:c4:62:3e:0a:c2:
b5:75:d5:22:e5:10:4c:00:e3:7d:fc:84:c3:f5:1d:79:1e:c0:
84:b8:2d:83:dc:ab:98:23:2c:c9:57:3c:c2:b5:4f:39:ac:e2:
8a:d2:84:bf:de:e8:52:03:05:ef:ad:99:f0:b3:2f:e0:8a:e7:
e4:3b:6f:af:6e:62:c5:c5:7d:07:90:02:24:33:85:45:66:49:
9f:be:65:bd:05:f0:e6:6f:55:3d:be:27:ad:29:05:ed:2b:4a:
51:98:21:14:11:2c:eb:32:56:50:39:9f:3e:12:af:2c:1c:1d:
b7:f2:0d:38:56:09:1e:69:fe:b2:fb:82:9e:b9:74:f9:d5:b9:
44:f5:64:c7:c9:46:d3:53:9f:12:5f:96:dd:6a:bf:3e:ce:b8:
da:85:6e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:19 2024 by rpki-client on console-ams.rpki-client.org