Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/txAR4T8R2gIPB9XnV2YvXl7u1wg.roa
File: txAR4T8R2gIPB9XnV2YvXl7u1wg.roa (raw, json)
Hash identifier: 4PFK/2NKV1X+LaW1lik3pZ99CB/LoK2F8Tgji625fGY=
Subject key identifier: B7:10:11:E1:3F:11:DA:02:0F:07:D5:E7:57:66:2F:5E:5E:EE:D7:08
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 018CC56E30994753543307E215A647342795
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/txAR4T8R2gIPB9XnV2YvXl7u1wg.roa
Signing time: Mon 01 Jan 2024 14:29:42 +0000
ROA not before: Mon 01 Jan 2024 14:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47860
IP address blocks: 89.188.160.0/24 maxlen: 24
89.188.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:30:99:47:53:54:33:07:e2:15:a6:47:34:27:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jan 1 14:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b71011e13f11da020f07d5e757662f5e5eeed708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:4b:89:13:79:b6:5b:a1:ec:a4:ba:c8:a1:
2c:34:c1:a5:0c:eb:0e:4b:f9:a9:a2:c4:28:cd:af:
69:e8:35:d3:6a:d1:9c:74:72:51:b1:9f:22:00:99:
ca:28:93:3b:c2:25:52:db:f8:d3:44:05:e9:b1:4c:
71:7c:10:28:20:21:63:41:11:8f:d0:ff:02:cb:1b:
e5:c1:3d:ad:85:1a:d9:3c:07:62:36:9f:87:2a:c6:
d2:6e:2a:a5:d4:42:25:fd:ed:63:d4:97:83:97:23:
49:f1:b2:0f:ce:f5:5d:82:0e:f3:1d:9c:20:7a:87:
89:a4:25:15:55:b9:68:71:7f:e1:18:91:27:7c:39:
73:46:6b:08:69:57:15:37:cf:47:f5:30:38:b2:db:
76:6f:2a:ce:17:a9:49:ba:c1:55:31:64:33:af:b2:
dd:e5:c1:50:e1:d5:d8:b8:9f:70:45:68:b8:2f:d0:
e1:a2:a3:73:8b:69:33:dc:37:98:d1:9b:b6:31:ad:
eb:e3:ea:16:02:5b:19:0a:76:93:ae:cf:97:f7:4e:
87:50:6e:0b:d4:92:87:c2:3a:ff:b1:86:f1:b1:79:
d6:50:1c:44:e1:6a:88:af:dd:7d:41:4a:d3:e9:53:
d1:18:97:40:5c:01:e7:ce:04:2a:30:27:f5:e1:67:
8a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:10:11:E1:3F:11:DA:02:0F:07:D5:E7:57:66:2F:5E:5E:EE:D7:08
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/txAR4T8R2gIPB9XnV2YvXl7u1wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.188.160.0/24
89.188.180.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a0:bc:4f:4e:29:05:4b:b0:31:1f:f8:78:82:87:ea:b8:2e:
3f:65:00:8f:5c:fd:27:8c:df:e2:28:e1:97:36:68:18:74:d5:
56:7c:ec:1a:5f:ba:26:01:49:2d:c6:98:6c:9d:39:7e:9d:34:
16:d8:20:9d:6d:27:b3:c1:c0:7a:30:67:98:29:c4:14:06:f1:
42:67:3a:64:99:04:92:16:09:a9:96:e3:3d:d2:21:04:5b:9e:
ea:4e:07:8c:21:30:8d:15:99:f9:e9:cf:ef:7b:c5:ba:6a:23:
f3:05:8b:40:81:f7:33:f5:44:2a:94:f4:e5:91:d7:21:22:a7:
6d:82:b7:74:2a:02:4f:ee:ed:9a:3e:d1:d6:ae:f7:91:85:46:
2e:3d:b5:f9:95:03:36:b3:c7:bb:e1:32:7a:92:f0:b1:f0:19:
5e:ee:86:a3:78:cd:95:ec:91:a3:86:fe:ea:73:78:2d:fa:02:
6e:aa:6c:91:e6:48:56:80:68:e3:28:5b:3f:8f:fc:b4:9c:1a:
17:cd:74:16:37:cc:32:4e:0f:51:09:11:fa:f3:27:36:d6:b3:
5e:87:11:c5:a3:b5:fc:3b:27:5f:43:a9:dd:ae:67:e7:24:60:
46:d9:a7:32:f0:08:95:c5:b0:2f:90:a9:a9:07:9b:db:58:58:
a6:e3:e4:a1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzFbjCZR1NUMwfiFaZHNCeVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj
YTBjNDcwHhcNMjQwMTAxMTQyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzEwMTFlMTNmMTFkYTAyMGYwN2Q1ZTc1NzY2MmY1ZTVlZWVkNzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPtLiRN5tluh7KS6yKEsNMGlDOsO
S/mposQoza9p6DXTatGcdHJRsZ8iAJnKKJM7wiVS2/jTRAXpsUxxfBAoICFjQRGP
0P8CyxvlwT2thRrZPAdiNp+HKsbSbiql1EIl/e1j1JeDlyNJ8bIPzvVdgg7zHZwg
eoeJpCUVVblocX/hGJEnfDlzRmsIaVcVN89H9TA4stt2byrOF6lJusFVMWQzr7Ld
5cFQ4dXYuJ9wRWi4L9DhoqNzi2kz3DeY0Zu2Ma3r4+oWAlsZCnaTrs+X906HUG4L
1JKHwjr/sYbxsXnWUBxE4WqIr919QUrT6VPRGJdAXAHnzgQqMCf14WeKpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLcQEeE/EdoCDwfV51dmL15e7tcIMB8GA1UdIwQY
MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt
ZjFiZjBjMzNhOTA4LzEvdHhBUjRUOFIyZ0lQQjlYblYyWXZYbDd1MXdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4
LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWbygAwQA
Wby0MA0GCSqGSIb3DQEBCwUAA4IBAQAAoLxPTikFS7AxH/h4gofquC4/ZQCPXP0n
jN/iKOGXNmgYdNVWfOwaX7omAUktxphsnTl+nTQW2CCdbSezwcB6MGeYKcQUBvFC
ZzpkmQSSFgmpluM90iEEW57qTgeMITCNFZn56c/ve8W6aiPzBYtAgfcz9UQqlPTl
kdchIqdtgrd0KgJP7u2aPtHWrveRhUYuPbX5lQM2s8e74TJ6kvCx8Ble7oajeM2V
7JGjhv7qc3gt+gJuqmyR5khWgGjjKFs/j/y0nBoXzXQWN8wyTg9RCRH68yc21rNe
hxHFo7X8OydfQ6ndrmfnJGBG2acy8AiVxbAvkKmpB5vbWFim4+Sh
-----END CERTIFICATE-----
Generated at Fri Jun 21 03:20:02 2024 by rpki-client on console-ams.rpki-client.org