Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/IVCYRK8VNo3Tx7wryOwTvqqlVGs.roa
File: IVCYRK8VNo3Tx7wryOwTvqqlVGs.roa (raw, json)
Hash identifier: qTOE8qJE4UiLx1vVrfQMOaRluQdI2SJpdV1l7c98PPk=
Subject key identifier: 21:50:98:44:AF:15:36:8D:D3:C7:BC:2B:C8:EC:13:BE:AA:A5:54:6B
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 019016671E77A5A101651C73F3E0DC7000F5
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/IVCYRK8VNo3Tx7wryOwTvqqlVGs.roa
Signing time: Fri 14 Jun 2024 10:59:34 +0000
ROA not before: Fri 14 Jun 2024 10:59:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203963
IP address blocks: 89.191.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:16:67:1e:77:a5:a1:01:65:1c:73:f3:e0:dc:70:00:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Jun 14 10:59:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21509844af15368dd3c7bc2bc8ec13beaaa5546b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:76:be:6f:93:9e:d6:88:b9:df:c5:52:4f:
a9:45:6b:66:c9:89:e9:f5:c8:a6:5a:ad:f9:56:f3:
35:6f:93:25:d8:e4:86:46:3b:9a:66:a3:37:00:06:
3a:d6:f3:6d:49:79:48:8d:33:d9:e4:15:a4:53:9f:
fe:df:6f:73:bc:a9:09:e3:7a:4d:e6:83:ee:cb:e0:
aa:db:5c:f6:cb:f5:ca:40:04:4e:b8:79:01:1d:c8:
de:16:3f:9d:23:46:4d:18:39:56:19:86:21:5f:62:
02:d4:e2:25:c7:2c:d7:2e:11:c1:03:a3:c3:82:8d:
5f:54:a3:3d:cf:6a:d3:46:43:5c:45:95:9e:52:eb:
c4:52:27:c3:d7:1a:1e:4c:09:b8:3e:9c:09:23:46:
2f:25:dd:b8:7f:33:a1:11:6d:fb:1b:53:56:f9:cb:
0e:e7:d0:31:ec:22:d1:14:b3:a9:b4:e9:04:b6:bf:
1b:fa:04:00:64:ad:c3:ee:07:e4:c5:be:98:fa:58:
97:d6:3d:7b:7c:28:9d:47:ca:02:08:6f:ce:cd:d1:
de:08:f9:1d:fe:de:de:69:cc:f6:cf:5d:f2:53:80:
d5:7a:68:c1:d1:73:82:aa:20:d2:6d:45:d1:56:e2:
fd:74:ca:29:ee:d2:1e:8b:c5:79:4f:96:46:06:17:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:50:98:44:AF:15:36:8D:D3:C7:BC:2B:C8:EC:13:BE:AA:A5:54:6B
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/IVCYRK8VNo3Tx7wryOwTvqqlVGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.191.112.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:ee:e1:28:19:97:a4:6b:83:83:73:4d:18:46:6d:a3:5a:4b:
ae:5b:a4:76:f8:78:5c:f9:ca:7e:3a:4d:4f:c1:c1:4a:3e:8f:
d6:9e:69:c9:95:21:bf:3f:3d:0b:f2:25:6b:8c:1f:35:8b:35:
4f:a3:2f:e9:90:61:1d:17:bf:0e:87:3b:14:ec:2f:07:9b:4d:
0e:cb:8e:7d:83:53:42:b2:de:07:6f:d1:0b:d5:5e:d4:2b:11:
5d:a2:cf:cd:95:d8:3e:c4:bd:08:7f:17:e8:72:09:f3:dd:41:
19:7b:7a:01:9d:21:d5:fc:20:bc:c7:88:6d:5d:1a:c8:ab:8d:
22:5f:e8:b5:d8:12:95:13:a7:03:05:a6:d3:3f:02:43:19:d9:
bb:d8:fa:2f:c1:85:ea:e7:89:8f:95:cd:83:ee:9c:c8:01:f2:
81:2e:3b:de:e5:e5:17:70:25:40:f0:df:68:21:9b:68:95:e7:
c7:74:39:1f:b1:9e:ff:22:12:ae:89:4a:c8:bc:c6:e5:95:67:
2b:e9:5a:6f:7b:13:6b:ae:5e:35:22:52:24:77:e3:61:bb:e0:
40:bd:1d:74:19:b5:9a:23:e5:0d:82:1e:9e:44:c3:77:ff:ba:
81:a8:b2:ab:2f:fd:a0:b9:9f:91:62:c1:64:a0:7e:23:5b:72:
e1:df:ee:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 19:55:40 2024 by rpki-client on console-fra.rpki-client.org