Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/E4KQwiRAVC8fJrewjD8EG9jS0mw.roa
File: E4KQwiRAVC8fJrewjD8EG9jS0mw.roa (raw, json)
Hash identifier: +sOq+IjZCXb3hVq/gsP971LjR3MBtX6QkDVMpElgE+k=
Subject key identifier: 13:82:90:C2:24:40:54:2F:1F:26:B7:B0:8C:3F:04:1B:D8:D2:D2:6C
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018DC47A8C264BBDB409D59E49F63028D4FB
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/E4KQwiRAVC8fJrewjD8EG9jS0mw.roa
Signing time: Tue 20 Feb 2024 03:06:21 +0000
ROA not before: Tue 20 Feb 2024 03:06:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 89.251.21.0/24 maxlen: 24
89.251.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c4:7a:8c:26:4b:bd:b4:09:d5:9e:49:f6:30:28:d4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Feb 20 03:06:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=138290c22440542f1f26b7b08c3f041bd8d2d26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4e:8d:01:86:4b:8f:7d:af:d5:58:75:b0:5d:
81:6b:79:f2:25:ed:21:55:8f:0e:05:22:af:92:54:
a1:8f:b5:ce:f7:e5:61:73:8b:a8:cb:6d:bb:c1:e5:
5e:00:b1:03:30:ab:de:59:f5:2b:6b:0f:76:93:a3:
89:b5:53:a5:30:b3:33:9f:51:14:5d:9c:21:07:b7:
32:5f:bd:64:d1:69:a1:92:ad:e2:3e:e2:82:3a:96:
d3:b6:ad:c4:36:45:d8:c5:eb:af:01:59:de:8c:79:
02:40:b9:95:9d:67:c4:bd:e3:58:e4:2c:e8:1e:75:
5b:0c:09:9d:7e:83:ab:04:43:f1:71:91:67:1a:71:
3c:9f:8d:56:29:9f:cb:24:5a:73:49:fe:8e:52:c0:
b3:59:85:c3:31:3d:c7:2b:da:e9:bf:02:79:27:81:
07:94:20:a3:71:ae:47:b5:f8:68:07:8c:33:58:56:
63:91:97:c0:ae:3a:fe:42:14:d0:60:dc:38:36:00:
6e:78:87:45:66:b1:54:40:d7:b1:47:3e:69:21:93:
35:73:74:b3:d1:0e:92:1e:c9:2f:e4:c0:f4:7f:ad:
22:2e:d5:b6:48:21:bb:e5:51:92:60:3b:ff:b4:30:
93:49:0a:03:82:f8:ce:a1:85:3e:c5:d4:ae:17:15:
46:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:82:90:C2:24:40:54:2F:1F:26:B7:B0:8C:3F:04:1B:D8:D2:D2:6C
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/E4KQwiRAVC8fJrewjD8EG9jS0mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.21.0-89.251.22.255
Signature Algorithm: sha256WithRSAEncryption
5a:2f:3e:a4:8e:f0:d6:60:66:0a:bb:48:fa:f0:2e:62:a1:04:
72:32:bc:f6:80:fc:89:24:0f:d3:e4:f9:8c:40:7b:94:2e:3e:
7a:ab:27:87:9b:7b:84:8a:23:9c:26:88:92:d9:8b:84:c2:a9:
68:ed:06:c8:78:91:92:b7:6b:57:f9:38:17:c7:1c:f7:a8:ba:
53:fd:3e:dd:e7:a3:f0:60:3e:a6:70:a6:d7:46:70:7c:ab:b8:
70:80:b7:b1:51:cd:d9:8c:3f:1d:25:90:cb:8a:e4:16:57:d6:
14:8b:78:eb:ca:91:5b:c0:b2:04:e0:3c:03:ba:fe:04:ac:da:
04:67:98:11:a2:6f:64:ca:ef:10:19:3e:8a:98:d9:1b:92:1e:
91:32:fd:86:3f:e5:ad:d0:45:55:09:1d:59:84:f6:86:91:d9:
0b:80:73:c4:93:25:66:38:e3:5b:b3:72:57:db:ee:2f:87:d5:
2b:a0:83:97:20:1d:30:e3:43:f6:56:6a:70:82:5a:27:b6:07:
e4:5a:47:26:05:f8:8d:dc:46:32:d7:5f:9a:54:d6:43:4b:63:
eb:d7:17:17:8b:b9:0d:53:b1:ad:b4:e6:bd:d5:b2:f4:79:86:
fd:89:5d:f1:12:f0:25:cb:e0:1d:01:54:c5:ac:37:1d:dd:b2:
5d:84:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:43:37 2024 by rpki-client on console-fra.rpki-client.org