Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/N7mTvxV80yScnFggsR9-HStnZDQ.roa
File: N7mTvxV80yScnFggsR9-HStnZDQ.roa (raw, json)
Hash identifier: w0CbjkqSOk2WQgda1COhH/vZn8/ftcrxmmgHwZARFro=
Subject key identifier: 37:B9:93:BF:15:7C:D3:24:9C:9C:58:20:B1:1F:7E:1D:2B:67:64:34
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 018CC2DAB48609E43FB3593ECE59F91E7B02
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/N7mTvxV80yScnFggsR9-HStnZDQ.roa
Signing time: Mon 01 Jan 2024 02:29:21 +0000
ROA not before: Mon 01 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216050
IP address blocks: 89.38.41.0/24 maxlen: 24
89.38.43.0/24 maxlen: 24
89.38.44.0/24 maxlen: 24
89.38.46.0/24 maxlen: 24
89.38.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b4:86:09:e4:3f:b3:59:3e:ce:59:f9:1e:7b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37b993bf157cd3249c9c5820b11f7e1d2b676434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:05:ba:87:67:45:1c:c0:27:37:27:ca:ad:2c:
24:22:90:d1:41:e5:e6:f3:ca:3c:9c:dd:88:7e:7b:
0a:0a:2a:38:99:11:71:59:62:6e:4c:2d:8c:05:b1:
4e:ee:ea:65:23:a5:92:06:8b:49:d4:a9:f1:90:01:
e4:33:da:c8:fd:38:e7:03:6e:85:4c:ca:5d:90:c4:
45:c8:fa:92:cd:e7:e5:1e:e2:bd:9b:96:26:14:69:
84:93:e3:24:bc:40:d7:a1:df:9a:86:e9:16:9b:b6:
a6:38:68:f9:e1:a4:62:8d:3a:c1:8e:49:4a:6c:67:
53:8a:d8:12:9e:c3:8d:b7:a7:50:f3:9d:64:7f:be:
e7:02:68:b1:8a:71:ba:66:bc:5c:70:70:35:b0:7d:
71:0f:db:10:5e:80:56:fe:24:b2:00:6f:16:d3:78:
49:5e:98:32:5f:e3:81:23:f3:17:8f:99:5d:fd:ed:
dc:d7:a5:89:55:8e:f0:e6:22:9f:67:4c:6a:7a:4f:
59:d4:dd:46:b0:5c:92:22:fb:d5:de:7e:55:6f:a6:
03:cc:57:51:13:61:d0:b1:82:fe:f8:c5:0b:33:2f:
ca:b7:a9:87:0e:8d:c6:8f:8a:14:cc:45:28:09:32:
7f:a6:fe:9a:46:7d:44:f9:d8:38:3c:97:43:7d:35:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B9:93:BF:15:7C:D3:24:9C:9C:58:20:B1:1F:7E:1D:2B:67:64:34
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/N7mTvxV80yScnFggsR9-HStnZDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.41.0/24
89.38.43.0-89.38.44.255
89.38.46.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:5f:ae:02:58:c7:7a:ce:e9:16:2b:78:42:67:03:3e:8b:6b:
4f:75:52:f5:37:14:bc:79:c4:35:98:f9:1c:29:a2:27:a8:d6:
17:3e:7d:ed:86:f4:5f:f0:37:ca:fe:aa:ca:b2:e3:7d:6f:36:
d4:83:fd:61:fc:4d:eb:24:ac:74:55:49:f9:54:a5:48:6a:6e:
9a:39:88:d2:b8:73:e7:88:5a:f3:42:0e:62:bd:55:4a:7c:a9:
fe:6e:71:37:99:fc:eb:57:77:42:2d:8d:71:f6:1e:95:ae:dd:
ea:cf:a1:6c:e1:ae:5f:72:cc:ba:0b:8d:94:fe:57:84:51:9b:
a6:09:3f:1f:0b:9b:1f:4b:f4:d1:f2:c2:4e:a0:75:a1:f6:0c:
0c:8a:3b:4f:74:d9:b7:dc:c1:11:01:32:9f:c6:4c:2d:d0:15:
a1:16:76:b9:bd:74:a5:73:b8:f1:08:0d:98:cc:49:bd:0b:1d:
71:c7:83:67:31:84:40:d5:0b:64:18:fa:db:53:fd:93:7c:4d:
8d:30:25:15:4e:99:45:0d:53:44:7f:a1:20:a7:8c:52:27:11:
93:fd:3c:95:d6:12:9c:24:2c:3f:ad:47:02:5d:3c:83:fb:31:
2f:34:c9:f7:0f:4c:1c:41:e2:7c:95:b2:da:1c:26:d3:c1:79:
9f:7a:10:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:46:27 2024 by rpki-client on console-ams.rpki-client.org