Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/fJdyxFyqKvL2S91bfx0aRBKKgO4.roa
File: fJdyxFyqKvL2S91bfx0aRBKKgO4.roa (raw, json)
Hash identifier: BD53t0TMfEf9l5eFAv+TtwMGig31sylI1rEzfaUfe+0=
Subject key identifier: 7C:97:72:C4:5C:AA:2A:F2:F6:4B:DD:5B:7F:1D:1A:44:12:8A:80:EE
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 018CC4249025AFE22FA036646F4BECB85921
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/fJdyxFyqKvL2S91bfx0aRBKKgO4.roa
Signing time: Mon 01 Jan 2024 08:29:39 +0000
ROA not before: Mon 01 Jan 2024 08:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50868
IP address blocks: 89.23.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:90:25:af:e2:2f:a0:36:64:6f:4b:ec:b8:59:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jan 1 08:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c9772c45caa2af2f64bdd5b7f1d1a44128a80ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:73:57:03:a1:9f:81:09:a9:9a:d9:5a:05:73:
cb:04:7d:8e:72:54:4c:29:4f:d7:25:89:f7:b5:88:
ad:55:30:c4:9f:2e:33:c3:61:b9:5c:91:79:64:4a:
4b:74:88:4a:ac:1d:75:43:d7:32:9b:14:cd:13:d6:
39:e7:a2:ab:e9:c5:97:92:09:9b:ec:88:22:2f:5b:
8d:5e:c7:50:5b:c9:55:5a:43:d3:b0:43:7d:7d:ff:
89:c8:b5:06:08:b5:65:28:57:fa:e5:2d:93:9e:fd:
5b:b3:1e:46:cf:fc:3e:99:ad:c2:4f:e0:24:3e:17:
b7:31:56:64:3e:a2:24:df:49:9e:19:5f:c4:55:d8:
ed:3d:a3:ec:c9:08:19:0a:67:57:1e:1c:2c:21:55:
8e:7b:9a:0d:03:88:e6:90:6e:bb:b2:24:2d:b5:fa:
bf:64:a7:7d:d4:ca:7d:b2:29:7c:4b:73:5f:b3:bd:
8d:dc:ad:50:c1:f0:4c:61:16:4e:87:65:93:36:a0:
4b:87:22:60:7a:c6:73:fe:70:c4:03:ed:98:a1:49:
48:d5:c4:9e:94:45:7a:af:95:97:42:56:92:23:57:
ab:93:b4:7b:e8:20:45:d3:9f:b3:f9:44:bb:a1:42:
9a:2e:7f:91:81:06:76:4c:f9:61:c0:20:d9:66:cb:
fa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:97:72:C4:5C:AA:2A:F2:F6:4B:DD:5B:7F:1D:1A:44:12:8A:80:EE
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/fJdyxFyqKvL2S91bfx0aRBKKgO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.89.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:67:e5:f8:74:2e:10:bb:b8:3b:b3:e6:94:0f:10:74:29:29:
d0:06:c6:dd:db:49:d3:7d:23:49:48:90:4b:c8:06:19:5d:78:
c1:d2:f1:74:a0:47:fc:90:da:e4:ab:f9:ef:58:97:26:33:fc:
28:04:1e:85:8c:08:b3:20:bf:a7:52:54:f5:d0:17:6c:96:ee:
f0:a5:c7:99:79:79:13:df:8d:55:db:d4:e2:c8:0d:8d:0a:0a:
f6:18:19:9f:bf:55:6c:fa:e1:d7:f0:39:e0:67:f3:f5:e7:02:
a5:4a:4b:22:ed:24:89:50:e7:fb:3f:e8:1f:1a:6b:88:11:d6:
53:50:13:28:3c:29:d6:67:2d:c4:6a:5e:3e:93:2b:a4:27:d0:
70:08:45:f9:b3:1a:86:be:52:70:34:7c:f1:ef:9c:41:ab:00:
f9:80:ad:3a:76:aa:31:91:e2:b4:73:12:b7:86:d9:6f:80:6a:
b1:52:bf:37:8c:ce:a4:eb:da:74:7c:96:69:f8:a0:5b:ca:d0:
35:6c:e4:ac:60:52:95:9c:27:8e:7a:af:21:e1:8a:3f:dd:b7:
a8:cf:17:b5:23:0a:3b:61:3a:26:1d:dc:4e:ec:49:4b:38:14:
3a:ec:c7:74:a2:91:07:5e:a8:95:62:d5:e9:73:4b:c0:70:0d:
7a:54:46:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJJAlr+IvoDZkb0vsuFkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk
OWNlMTYwHhcNMjQwMTAxMDgyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Yzk3NzJjNDVjYWEyYWYyZjY0YmRkNWI3ZjFkMWE0NDEyOGE4MGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3NXA6GfgQmpmtlaBXPLBH2OclRM
KU/XJYn3tYitVTDEny4zw2G5XJF5ZEpLdIhKrB11Q9cymxTNE9Y556Kr6cWXkgmb
7IgiL1uNXsdQW8lVWkPTsEN9ff+JyLUGCLVlKFf65S2Tnv1bsx5Gz/w+ma3CT+Ak
Phe3MVZkPqIk30meGV/EVdjtPaPsyQgZCmdXHhwsIVWOe5oNA4jmkG67siQttfq/
ZKd91Mp9sil8S3Nfs72N3K1QwfBMYRZOh2WTNqBLhyJgesZz/nDEA+2YoUlI1cSe
lEV6r5WXQlaSI1erk7R76CBF05+z+US7oUKaLn+RgQZ2TPlhwCDZZsv6ywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHyXcsRcqiry9kvdW38dGkQSioDuMB8GA1UdIwQY
MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt
MGY2NmMxODg3OTE2LzEvZkpkeXhGeXFLdkwyUzkxYmZ4MGFSQktLZ080LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2
LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdZMA0G
CSqGSIb3DQEBCwUAA4IBAQBOZ+X4dC4Qu7g7s+aUDxB0KSnQBsbd20nTfSNJSJBL
yAYZXXjB0vF0oEf8kNrkq/nvWJcmM/woBB6FjAizIL+nUlT10Bdslu7wpceZeXkT
341V29TiyA2NCgr2GBmfv1Vs+uHX8DngZ/P15wKlSksi7SSJUOf7P+gfGmuIEdZT
UBMoPCnWZy3Eal4+kyukJ9BwCEX5sxqGvlJwNHzx75xBqwD5gK06dqoxkeK0cxK3
htlvgGqxUr83jM6k69p0fJZp+KBbytA1bOSsYFKVnCeOeq8h4Yo/3beozxe1Iwo7
YTomHdxO7ElLOBQ67Md0opEHXqiVYtXpc0vAcA16VEbD
-----END CERTIFICATE-----
Generated at Sun Jun 2 07:07:33 2024 by rpki-client on console-fra.rpki-client.org