Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/AivhLtL8dPeipnUPqOfI2f9GrY0.roa
File: AivhLtL8dPeipnUPqOfI2f9GrY0.roa (raw, json)
Hash identifier: cNc6GLTnWVeU+fRSuSSA05Is0ftTHOHDLRQGrtnWHa4=
Subject key identifier: 02:2B:E1:2E:D2:FC:74:F7:A2:A6:75:0F:A8:E7:C8:D9:FF:46:AD:8D
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 018CC7934659B05D8D0471EE51BD24E09B96
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/AivhLtL8dPeipnUPqOfI2f9GrY0.roa
Signing time: Tue 02 Jan 2024 00:29:26 +0000
ROA not before: Tue 02 Jan 2024 00:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 147.189.216.0/22 maxlen: 32
147.189.220.0/22 maxlen: 32
193.5.16.0/23 maxlen: 32
193.5.18.0/23 maxlen: 32
2a0d:3dc0::/30 maxlen: 128
2a0d:3dc4::/30 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:46:59:b0:5d:8d:04:71:ee:51:bd:24:e0:9b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Jan 2 00:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=022be12ed2fc74f7a2a6750fa8e7c8d9ff46ad8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:a2:39:d3:d7:c1:5e:f7:99:cf:5f:e3:eb:
a1:0e:e7:8a:63:ee:dd:fd:9c:a2:91:4e:11:83:f8:
f6:4f:8c:db:3c:cb:aa:4f:e0:a4:93:43:ec:43:e3:
0b:f9:61:e2:e9:db:6d:88:9e:1e:ff:5b:8c:d0:bd:
d8:e1:8d:a1:43:d5:79:cf:d0:c9:78:b5:bf:27:ea:
06:d3:3e:b7:f2:79:6d:69:db:46:af:4c:7c:e3:e0:
25:f6:5e:09:a5:6f:b4:15:04:f4:d2:5e:f7:92:bb:
01:c6:71:02:8d:cf:b6:7d:6f:35:83:07:62:84:ca:
74:51:54:51:0e:5d:87:e2:ad:e0:bc:c0:e1:c2:02:
d7:e4:33:a2:64:d3:b3:e6:2a:f7:5e:fe:9a:22:8a:
39:6f:7d:4a:68:e9:f6:24:e9:ae:d6:77:f3:b8:30:
6d:32:ae:ae:f3:45:7e:3e:85:56:aa:b9:bf:c2:27:
c2:18:36:e2:3f:45:bd:c8:90:88:fd:10:0b:83:9c:
63:fe:bd:55:60:cf:51:66:0d:f2:94:bf:83:57:d6:
d1:30:21:f7:be:a6:f0:45:75:0a:76:0e:79:30:13:
46:ba:85:23:ca:f2:f4:e5:f4:53:22:20:88:a3:17:
48:63:49:37:e1:d0:fc:e4:64:6d:b3:54:16:05:f4:
05:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2B:E1:2E:D2:FC:74:F7:A2:A6:75:0F:A8:E7:C8:D9:FF:46:AD:8D
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/AivhLtL8dPeipnUPqOfI2f9GrY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.216.0/21
193.5.16.0/22
IPv6:
2a0d:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
04:3a:a2:e3:f4:7c:26:01:b7:06:61:fc:18:32:9f:15:54:6a:
e8:81:8a:8c:10:91:7a:3f:63:20:9d:c0:3e:3c:82:06:81:61:
16:4e:d9:3b:61:4e:8b:d7:1c:2c:fb:e8:9d:4b:fe:94:d8:41:
2a:93:e6:0d:f1:c4:e4:a5:38:ae:e4:5c:a2:d4:a8:b3:3c:49:
29:29:92:c3:f8:66:dd:9a:01:bd:cb:bd:e3:37:63:7d:b0:9c:
6a:57:b5:2e:fe:d3:1c:aa:1a:cc:4f:b4:96:c6:5b:f7:08:7c:
c1:1a:62:d1:3b:6a:66:33:a6:29:d9:60:8d:5f:96:30:38:d4:
eb:75:72:ad:40:e5:24:25:46:45:5b:44:18:3a:15:bb:82:fa:
e9:9c:03:76:0b:6c:5c:9c:eb:4b:ce:7c:ff:a4:99:69:e5:ec:
21:cd:84:a7:9c:fc:de:f6:c1:50:2d:47:e8:69:9b:e3:3b:21:
22:90:cd:22:60:8f:97:3a:60:3a:3d:ab:9b:2a:10:f2:46:ec:
67:d8:ea:ba:87:ca:00:1c:a7:23:88:5b:33:69:f2:40:fc:dd:
2b:a4:6d:ad:99:62:b3:b1:e4:78:c6:c2:38:10:5e:29:8e:f9:
1e:41:67:36:a0:2f:dc:c3:1f:8e:a2:5d:a8:c9:31:a7:18:be:
99:ad:82:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 12:24:22 2024 by rpki-client on console-ams.rpki-client.org