Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/0iwEXWEtQYK7D_wbAhy_g6-umGQ.roa
File: 0iwEXWEtQYK7D_wbAhy_g6-umGQ.roa (raw, json)
Hash identifier: 3eUj/VWztPg//6wmOag0zXKR4J+cCUbs1/BtEytZdiQ=
Subject key identifier: D2:2C:04:5D:61:2D:41:82:BB:0F:FC:1B:02:1C:BF:83:AF:AE:98:64
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 018CC5DC6EED6D1C067A7DA65D74B34DF2F1
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/0iwEXWEtQYK7D_wbAhy_g6-umGQ.roa
Signing time: Mon 01 Jan 2024 16:30:07 +0000
ROA not before: Mon 01 Jan 2024 16:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197995
IP address blocks: 45.89.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:6e:ed:6d:1c:06:7a:7d:a6:5d:74:b3:4d:f2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Jan 1 16:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d22c045d612d4182bb0ffc1b021cbf83afae9864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:75:74:54:cd:df:b0:fc:a9:22:0f:e0:7a:
d3:83:c2:7d:04:0a:92:b5:a2:70:3f:b8:eb:41:fc:
c9:5b:02:8f:87:d4:40:7c:be:c9:57:3e:ea:f9:f7:
25:bf:47:11:a4:90:67:93:c6:a2:84:35:cc:5e:38:
b5:46:77:43:1d:10:34:cc:4f:b4:9b:d5:59:cd:99:
3e:9f:8f:f9:10:48:31:dc:f2:18:7d:32:f0:f4:8c:
02:55:93:3c:3b:97:81:44:88:c9:5c:9b:92:94:8b:
f1:bb:a6:22:2e:91:8b:0c:70:ef:b9:5f:da:44:be:
6a:be:9a:a3:d8:6a:24:12:88:0a:19:f7:cd:bc:e6:
0e:66:40:3f:b3:d2:26:87:98:e2:d9:d9:95:59:22:
5c:9c:8d:3b:d3:fa:bd:5e:1e:a5:0b:8e:dc:87:66:
fe:db:e4:91:a5:6b:af:db:8e:b1:e9:0a:39:97:a5:
51:94:10:42:91:f7:fa:45:5e:32:2e:76:a8:de:a3:
4a:26:c8:65:5a:e0:10:a7:80:0a:8b:e1:45:df:b0:
9d:ef:9b:b8:1c:01:a5:90:a5:63:b3:d1:e2:0d:ee:
85:54:23:b0:b4:81:1a:e7:f5:9f:b1:2b:09:e9:9d:
5d:e4:d0:e3:2c:25:b9:d4:1b:22:65:37:7b:69:8f:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2C:04:5D:61:2D:41:82:BB:0F:FC:1B:02:1C:BF:83:AF:AE:98:64
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/0iwEXWEtQYK7D_wbAhy_g6-umGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.9.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e2:6e:c0:ea:b9:65:29:c3:4a:7e:3a:26:46:a0:69:ab:f1:
91:80:3b:39:20:99:4c:8e:7b:fe:af:bf:e7:21:60:17:a0:35:
b8:9b:a6:87:a7:5d:a5:6d:48:77:2d:66:e6:f1:8d:c6:67:f9:
68:e9:64:6d:f8:27:34:9b:74:38:55:3a:5f:1b:c2:3a:7a:ce:
ab:c5:90:90:ae:41:3d:ce:d4:b1:a4:60:2f:d3:1d:df:78:43:
c7:a4:82:19:36:af:a1:95:76:65:aa:8c:85:1f:ae:d3:1e:ab:
55:cb:dc:c1:05:c0:cc:64:1c:3e:cf:a0:14:cc:ee:5f:77:85:
11:84:8f:7e:f9:12:e8:f2:39:56:d7:36:c5:09:b1:3a:a2:88:
03:8a:e2:3c:db:4b:b3:f8:81:29:1f:7a:79:6d:f1:6e:61:9c:
d2:c8:18:75:ee:e7:05:83:58:c3:f8:b4:7a:14:14:79:34:bd:
f8:5d:61:36:88:9c:b7:c6:73:5e:be:2a:9f:a7:cc:fc:0a:7b:
c9:fd:13:d1:d1:44:2d:c3:f4:4b:ab:75:a4:8f:71:d0:5c:9e:
dc:aa:2b:d8:b2:1d:af:03:4a:bb:3a:43:c9:6c:d3:22:41:5b:
e6:7c:97:62:4a:71:9a:50:93:45:a5:11:c0:f8:b6:cf:f1:9d:
7d:86:4e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:16:13 2024 by rpki-client on console-ams.rpki-client.org