Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/iNPNhqlXLeACNaczHjgurUsi-Ik.roa
File: iNPNhqlXLeACNaczHjgurUsi-Ik.roa (raw, json)
Hash identifier: ZICiOQbZhufkRppXhZFWK/Cp+orRldU7qyPg5arp6mg=
Subject key identifier: 88:D3:CD:86:A9:57:2D:E0:02:35:A7:33:1E:38:2E:AD:4B:22:F8:89
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 018CC2DAE921B16D18F1D0B38372DEC6A74C
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/iNPNhqlXLeACNaczHjgurUsi-Ik.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1293
IP address blocks: 195.160.96.0/19 maxlen: 19
195.160.0.0/18 maxlen: 18
195.160.149.0/24 maxlen: 24
195.160.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e9:21:b1:6d:18:f1:d0:b3:83:72:de:c6:a7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88d3cd86a9572de00235a7331e382ead4b22f889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:88:45:de:f0:0b:64:74:aa:3e:dc:8f:61:
82:93:83:71:dd:08:f2:93:f4:82:3e:34:41:ad:63:
8a:ef:59:c9:de:e0:15:85:72:fd:04:03:6c:01:cd:
af:1f:c4:25:aa:7e:d3:4f:0a:a1:21:a4:b1:45:ec:
cd:c3:f6:03:69:48:95:9f:06:64:ef:3f:d8:8f:32:
fe:22:a5:74:51:c2:dc:e8:fb:91:aa:44:07:ec:08:
42:20:8f:65:a2:8d:1a:8c:cf:54:ce:01:14:92:7a:
5c:88:65:1f:c8:b1:c4:88:d4:8a:05:97:e8:d2:f8:
33:6e:9f:e3:bc:0d:6a:4a:e9:d4:57:8d:ac:2e:48:
85:90:73:85:88:44:18:cd:48:22:83:59:6c:d0:6b:
2a:ea:e0:9c:84:84:a6:68:97:ec:2a:66:57:11:45:
7a:ad:3d:db:be:32:ea:a0:06:ba:a3:48:6d:85:c2:
8d:9e:80:e4:fe:62:ee:6b:c2:86:82:de:ea:fb:33:
8f:1e:84:79:b0:2c:64:e2:2d:31:a2:9c:13:7b:9d:
23:49:04:ea:b6:a6:98:33:97:79:f1:e7:2a:85:b4:
ec:5f:40:4c:2c:72:eb:1b:d4:90:97:01:91:d4:91:
dc:62:bc:ac:47:df:f7:a5:e6:c0:d4:63:2e:3e:d7:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D3:CD:86:A9:57:2D:E0:02:35:A7:33:1E:38:2E:AD:4B:22:F8:89
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/iNPNhqlXLeACNaczHjgurUsi-Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.0.0/18
195.160.96.0/19
195.160.148.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:25:8e:55:65:08:09:c9:34:c1:c5:16:3b:bc:86:7f:2a:79:
6f:30:b0:06:ab:b8:d1:7c:3e:6b:b3:53:96:ec:21:51:09:85:
0a:6d:27:f8:15:66:fa:6e:74:7c:c3:8b:88:e1:a7:3b:e6:7c:
24:bc:77:cd:16:75:e8:4b:80:74:c1:cf:d1:0a:8f:15:ee:ca:
cc:4a:98:5a:bd:5e:02:0e:c0:5f:24:5d:2d:cc:80:72:d7:3c:
2c:73:88:bd:43:6c:eb:8a:7f:91:ce:c6:e7:d4:ff:b9:15:ae:
b0:f4:20:37:a0:9e:53:34:8e:fe:c9:35:9b:fa:2f:30:06:2f:
33:55:ab:b6:a0:7e:b5:a7:fb:c0:6c:33:c8:11:0a:05:8f:8d:
8d:d8:2f:e7:7c:25:c4:73:c0:86:56:ff:b8:aa:b9:aa:22:39:
18:6c:14:1f:7a:61:7c:d7:7b:09:5a:b2:7b:c9:c5:ae:32:d2:
4a:48:7b:27:2c:b5:37:c8:dd:2c:50:d5:2a:2f:ed:10:d0:95:
1f:97:ee:87:ad:03:42:3c:7a:78:ba:81:ef:47:80:2c:cb:1b:
45:6a:87:36:8f:fd:03:5f:12:0b:bd:8d:8b:31:67:16:f0:21:
af:50:85:82:0e:4f:a5:e1:48:5e:34:ad:c9:9e:59:19:33:ff:
81:5f:2b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:29:51 2024 by rpki-client on console-ams.rpki-client.org