Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/IOCyNRAqqupowxQG8VQGpGieXJo.roa
File: IOCyNRAqqupowxQG8VQGpGieXJo.roa (raw, json)
Hash identifier: zeA9uyGPk54yciAVsVC3j4gEvUaz9YTpFEjijtLmO1I=
Subject key identifier: 20:E0:B2:35:10:2A:AA:EA:68:C3:14:06:F1:54:06:A4:68:9E:5C:9A
Certificate issuer: /CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Certificate serial: 0190E79B2BEF9CFAFD4EBDD4FBEA88B5DADB
Authority key identifier: 70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/IOCyNRAqqupowxQG8VQGpGieXJo.roa
Signing time: Thu 25 Jul 2024 01:57:04 +0000
ROA not before: Thu 25 Jul 2024 01:57:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39310
IP address blocks: 79.98.144.0/21 maxlen: 21
195.90.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e7:9b:2b:ef:9c:fa:fd:4e:bd:d4:fb:ea:88:b5:da:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70480858fdeea1924ab8c62ec3fc732d34020a9d
Validity
Not Before: Jul 25 01:57:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20e0b235102aaaea68c31406f15406a4689e5c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:16:39:db:15:29:d8:47:09:86:dc:d6:29:fa:
62:97:22:89:04:e5:26:3b:6a:b2:89:c6:f9:72:01:
39:f7:48:0e:ff:ac:9d:69:39:b6:71:3b:67:8b:cc:
61:f0:5e:26:5d:c4:80:81:23:99:4b:b1:8e:a9:8b:
88:44:a4:d7:49:0b:80:aa:69:77:7c:f2:67:e4:48:
60:0d:d2:2e:18:f5:a7:51:44:64:35:00:d2:14:85:
2a:fe:aa:1d:4e:66:fa:4b:d3:af:78:91:2d:a2:4b:
19:b0:5d:a5:8a:b7:cf:cf:e8:e0:34:07:a7:d5:a9:
54:e5:c1:04:0a:a4:0b:05:dd:46:cc:17:12:ec:cf:
e5:a0:08:e1:23:64:d1:3b:9b:45:49:22:4a:ce:33:
41:4e:5e:d5:69:c8:03:67:aa:33:a5:c7:09:f7:1b:
49:df:62:65:9f:63:53:97:a4:75:08:bb:f1:78:70:
e4:c1:cd:81:e2:6c:9b:c8:0a:ef:ec:37:06:cb:62:
5d:ec:ca:5c:54:c8:93:d9:d6:b1:ed:fa:40:21:96:
04:40:19:71:3a:67:d3:92:19:e3:3c:41:3b:23:c0:
37:3d:21:ef:24:e7:db:31:90:16:78:41:20:df:f0:
7e:09:b9:50:92:d3:1d:cc:6e:07:c2:a4:5f:43:bb:
9e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E0:B2:35:10:2A:AA:EA:68:C3:14:06:F1:54:06:A4:68:9E:5C:9A
X509v3 Authority Key Identifier:
keyid:70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/IOCyNRAqqupowxQG8VQGpGieXJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.144.0/21
195.90.106.0/23
Signature Algorithm: sha256WithRSAEncryption
18:c1:e4:a9:00:d3:1c:98:80:28:66:98:85:5e:0d:b7:de:20:
0b:26:59:c6:23:a9:d4:7f:ed:c9:a7:6c:c0:2e:10:55:2d:aa:
fb:39:f5:8b:9a:27:25:1e:c9:f1:49:d3:2a:47:80:b8:8f:70:
23:54:87:d8:c1:9e:84:ab:53:c0:bc:26:2b:94:97:11:80:ea:
b9:27:49:fa:57:6d:0a:fb:12:24:4b:86:42:de:38:63:d1:6c:
77:2e:04:6b:2a:2d:d3:92:89:39:97:11:78:19:13:b8:bd:31:
74:65:a5:fd:ac:87:62:fc:ad:fa:3f:3d:31:bc:93:d6:1b:f1:
48:15:89:18:a7:62:64:c2:4d:c1:ac:ab:db:10:1e:19:2b:79:
7a:04:ea:38:87:c9:f1:69:96:15:36:bd:38:b6:3a:fb:0e:84:
1c:06:3d:ba:c2:63:77:c3:9a:01:20:c5:1b:d7:2e:88:75:c6:
51:19:56:14:fc:c0:93:73:e7:08:ed:63:c4:1b:9b:39:62:ec:
11:d9:cf:6a:2b:37:23:e9:41:39:c1:03:6a:d4:ab:e6:54:f2:
cc:97:78:91:94:36:42:fc:cf:12:05:a8:69:6b:cc:4d:de:c6:
40:9b:d4:3d:d2:90:7d:ac:e9:88:96:f0:1f:a4:05:cb:25:4b:
60:be:28:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:42:33 2024 by rpki-client on console-ams.rpki-client.org