Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/1-XCqISZJPfKDpFkpalYSd6LpAoY.roa
File: 1-XCqISZJPfKDpFkpalYSd6LpAoY.roa (raw, json)
Hash identifier: qUtLSGTTd9gqoQAspn2hpA3niynFE7ux4oURcpo7Ujo=
Subject key identifier: F9:70:AA:21:26:49:3D:F2:83:A4:59:29:6A:56:12:77:A2:E9:02:86
Certificate issuer: /CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Certificate serial: 018CC8DF07D51A388EE13BFC0712BA9D3C58
Authority key identifier: 8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/1-XCqISZJPfKDpFkpalYSd6LpAoY.roa
Signing time: Tue 02 Jan 2024 06:31:48 +0000
ROA not before: Tue 02 Jan 2024 06:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51394
IP address blocks: 178.212.120.0/21 maxlen: 21
91.239.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:07:d5:1a:38:8e:e1:3b:fc:07:12:ba:9d:3c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Validity
Not Before: Jan 2 06:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f970aa2126493df283a459296a561277a2e90286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:f0:5b:ab:61:88:10:63:15:d3:ab:89:ab:
32:47:80:af:eb:e4:8f:56:0b:8e:65:76:6e:2f:22:
c2:b2:2b:6d:24:92:fe:20:29:41:20:48:3f:9f:63:
48:e5:1d:68:da:90:bb:dd:6a:a5:cd:48:6c:c6:f7:
e7:89:af:7e:28:16:98:f6:71:a9:bf:40:c9:fb:63:
ff:ad:88:6b:12:b6:cd:cc:0f:01:71:25:16:ac:65:
ec:ca:39:bf:a8:d8:60:17:ab:79:fa:95:2e:ef:a1:
c5:98:2d:b9:9c:43:7b:3d:00:70:ec:b0:31:dc:aa:
df:9c:b1:53:a6:92:f0:7b:ef:79:19:07:56:a4:c2:
2e:fd:12:11:34:af:4c:72:a7:4a:b8:d1:4d:c8:1a:
ab:05:63:4a:11:af:02:8a:6d:10:64:d5:cd:39:bd:
73:dd:18:d8:31:f1:b6:6c:d2:09:d0:8c:f1:df:3a:
69:2e:ed:fd:a4:f9:e6:88:9b:6f:1b:cf:42:d7:5c:
8b:1e:97:a6:72:a3:21:79:62:41:44:2e:d4:bd:1e:
28:fa:32:e7:a8:de:85:f5:32:1f:67:90:38:fc:f4:
1c:f8:df:8c:98:15:39:56:7d:44:52:07:f3:88:39:
3b:08:2c:38:e4:1c:8d:ec:c5:10:bd:c2:fe:60:8f:
9e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:70:AA:21:26:49:3D:F2:83:A4:59:29:6A:56:12:77:A2:E9:02:86
X509v3 Authority Key Identifier:
keyid:8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/1-XCqISZJPfKDpFkpalYSd6LpAoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.244.0/22
178.212.120.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:8c:08:52:f1:25:88:46:ee:71:3a:f7:38:84:6b:82:fc:cf:
83:4e:2e:3a:77:48:94:66:ea:98:61:5f:99:08:70:5f:ab:e7:
9c:c4:b4:53:01:33:94:47:8d:24:ca:9f:97:aa:7b:88:4f:c1:
8e:ee:a4:93:78:e0:08:56:97:eb:37:b1:c8:e1:e9:29:dd:fb:
b1:b7:ba:49:04:33:40:3a:91:1a:44:34:0f:c1:fc:db:a1:df:
e3:30:3c:7c:c0:99:0f:bf:4c:13:cc:c6:ab:c6:0b:3d:16:cb:
45:03:53:09:7b:48:d4:1a:ab:05:29:a7:a4:c1:8d:b5:04:a0:
57:ae:f7:2e:53:03:7a:15:02:8f:a3:f0:59:dc:77:d2:2b:bc:
cc:e6:ed:22:d6:b6:16:6f:b4:b8:fa:09:f8:ef:7e:ed:25:b9:
fb:28:cd:f1:16:5a:fd:a1:85:df:a1:38:3f:a5:f4:b9:7d:32:
8b:b1:2d:ad:ad:8d:2c:b4:d2:48:f4:fb:23:1a:d7:46:e6:cf:
74:25:51:32:1f:ff:6e:01:0b:d9:2c:bf:fe:40:aa:4e:e2:73:
04:9d:87:f8:ba:9f:1a:7a:10:90:92:47:65:fe:03:0e:74:e8:
72:02:3b:30:a7:e9:40:6d:00:00:a7:d2:86:95:42:9a:48:40:
1c:98:94:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:23:03 2024 by rpki-client on console-ams.rpki-client.org