Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/eWCPhVCeknyzgsBqFkIkD9PAoDo.roa
File: eWCPhVCeknyzgsBqFkIkD9PAoDo.roa (raw, json)
Hash identifier: bm0pqrbVASDfhYEG3h5fqA4xSaa9WcXHryeUvU01KqI=
Subject key identifier: 79:60:8F:85:50:9E:92:7C:B3:82:C0:6A:16:42:24:0F:D3:C0:A0:3A
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018FDE7E90DBE6B20E9AB7F817C07C98A525
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/eWCPhVCeknyzgsBqFkIkD9PAoDo.roa
Signing time: Mon 03 Jun 2024 14:26:27 +0000
ROA not before: Mon 03 Jun 2024 14:26:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61330
IP address blocks: 89.39.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:de:7e:90:db:e6:b2:0e:9a:b7:f8:17:c0:7c:98:a5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jun 3 14:26:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79608f85509e927cb382c06a1642240fd3c0a03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:d7:1d:ba:20:42:1d:d9:69:30:ce:04:95:
8a:3d:02:ad:3a:25:85:d3:c5:b6:cc:c4:e8:ce:28:
01:9e:22:3e:99:ce:e6:68:84:e1:9b:fe:9a:1f:84:
c8:d4:01:ef:d0:0f:c8:ec:d4:f6:49:ce:73:f6:bd:
1b:b2:0a:6d:1d:92:8a:76:fe:0f:be:61:de:3d:c0:
fa:d7:3d:84:11:29:46:dc:b4:b0:da:48:09:7d:03:
fd:dd:15:3d:54:33:0b:c4:35:a4:ff:e1:18:ac:29:
af:a5:be:a6:02:6b:15:28:b0:93:55:8b:3b:20:38:
5a:16:37:57:0c:58:f6:33:c0:d3:0a:c9:02:bc:be:
73:4a:70:82:98:d6:7c:66:1f:f8:a0:87:3d:91:76:
e0:6f:3b:cf:7d:e7:f9:15:6d:24:83:59:b5:bd:11:
4f:90:bf:6e:65:86:21:8d:b6:bb:3d:4d:63:79:9f:
ce:b3:4e:ce:64:cf:d0:fa:1b:f0:d5:e0:39:0b:30:
b6:4c:f7:ae:3f:81:43:8e:8e:90:85:7b:fc:03:53:
fe:98:9e:79:e7:6f:5c:4a:c0:a4:aa:a2:68:ea:5d:
81:93:9b:64:99:62:7e:5e:9d:60:dd:82:b1:9e:ea:
2e:f6:80:ff:e7:3b:85:6f:fe:58:31:c4:a6:af:8f:
2d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:60:8F:85:50:9E:92:7C:B3:82:C0:6A:16:42:24:0F:D3:C0:A0:3A
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/eWCPhVCeknyzgsBqFkIkD9PAoDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.252.0/24
Signature Algorithm: sha256WithRSAEncryption
06:09:f4:48:78:57:ed:c1:55:a8:42:2d:37:3e:d4:af:97:20:
35:d6:b8:45:cd:d5:bd:40:ee:61:41:02:b1:8b:cf:28:bb:7f:
61:5b:c8:3d:88:16:28:f0:97:13:2f:c8:b8:4b:f7:45:bb:6a:
94:a3:ff:7f:c0:67:8b:7f:3d:a9:66:e8:6f:d0:38:14:85:10:
ff:64:2f:c7:8b:82:0d:36:f5:fb:a3:af:9a:7e:de:d0:b4:42:
61:48:ab:bf:df:51:36:ff:dd:bf:96:c7:80:62:c5:f3:18:88:
c4:45:9f:93:fb:94:1f:66:2d:c4:ae:b7:1c:d7:34:d6:de:31:
a8:1d:93:2d:fa:b6:34:f5:a8:56:e7:e4:ca:bd:10:61:58:4d:
1a:3c:7c:3c:64:ca:1d:2d:c9:69:ce:d3:0c:09:68:71:63:6f:
47:c7:ef:74:4c:02:f3:6e:e2:64:73:32:a6:b8:0d:bf:44:0c:
c8:e2:ca:e0:9a:93:31:da:60:7c:49:40:de:7f:de:d3:b0:8b:
b5:74:61:c7:09:87:f7:5b:f5:a4:70:3b:84:f9:0f:b9:c8:80:
53:60:50:e6:df:21:96:d0:9f:e9:d8:54:8c:8d:f8:93:e6:75:
38:59:8c:06:c2:05:81:c5:f0:f5:98:03:95:27:b4:b6:1b:5f:
a0:75:04:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:29:03 2024 by rpki-client on console-fra.rpki-client.org