Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/AECAOWfysKbwKLYYP4alEFpN2rY.roa
File: AECAOWfysKbwKLYYP4alEFpN2rY.roa (raw, json)
Hash identifier: Mjnv74L+XTS0URAUvp0S+cdupvbViuG8YlLMrm9zhKA=
Subject key identifier: 00:40:80:39:67:F2:B0:A6:F0:28:B6:18:3F:86:A5:10:5A:4D:DA:B6
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018F6BB729845393CDF9820734B55F1E9DB9
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/AECAOWfysKbwKLYYP4alEFpN2rY.roa
Signing time: Sun 12 May 2024 07:31:56 +0000
ROA not before: Sun 12 May 2024 07:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51099
IP address blocks: 89.47.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6b:b7:29:84:53:93:cd:f9:82:07:34:b5:5f:1e:9d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: May 12 07:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0040803967f2b0a6f028b6183f86a5105a4ddab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:d0:94:1a:b9:3d:9e:d1:32:13:0e:f0:82:
c7:dc:4b:d5:d5:f9:7a:8f:fe:50:61:db:f8:8d:33:
90:d3:8e:42:51:83:b8:79:5f:6e:f6:46:78:54:24:
99:35:c6:c3:9d:26:5c:ae:1c:e3:55:79:b0:07:33:
d0:7f:0d:9d:03:9e:e8:25:78:c1:15:5e:63:59:b0:
4b:00:bf:bb:9c:42:d5:27:b9:05:60:b3:ea:be:8c:
04:bd:9c:b6:1a:dc:b6:76:d7:64:e4:47:d3:18:d9:
d1:fc:41:9a:aa:db:77:69:a7:a7:03:9a:ce:18:8b:
f9:9e:5b:aa:10:58:2b:84:61:24:d6:36:a6:5d:e1:
ad:df:1a:01:f8:87:0a:13:41:66:be:24:04:6a:59:
59:94:fa:bd:2f:2e:61:05:c9:fc:e6:75:df:e7:2f:
07:bc:7c:d0:8b:a3:ec:e0:18:ce:d3:3f:7d:85:a4:
ad:15:53:8e:62:39:5b:64:5f:6c:2b:e1:01:ba:24:
a3:90:20:80:06:b5:00:9b:0f:c4:cf:e6:aa:7b:f4:
de:63:3f:00:1d:3b:e3:ab:53:85:35:2b:66:53:29:
86:23:3c:e1:38:a4:f7:25:a0:01:2c:d8:39:86:77:
1c:f9:98:bf:2b:56:5e:bc:a1:05:77:85:f0:45:24:
de:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:40:80:39:67:F2:B0:A6:F0:28:B6:18:3F:86:A5:10:5A:4D:DA:B6
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/AECAOWfysKbwKLYYP4alEFpN2rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.254.0/24
Signature Algorithm: sha256WithRSAEncryption
50:3f:b1:be:20:1e:ab:3a:02:66:a2:d4:4b:ed:0a:65:0c:38:
28:b3:d1:ba:16:51:a8:d3:e4:c1:9c:c6:1e:1d:58:5e:52:aa:
06:f1:27:5a:19:a4:da:d2:bd:1f:d4:d0:88:b6:df:91:e7:46:
53:8e:c9:d7:2c:fd:37:66:0e:08:f9:45:b3:fb:c2:41:2e:3b:
be:e0:51:b9:b2:e5:e9:8d:49:0c:1e:5e:f4:d7:d8:01:c1:a6:
b3:46:0d:eb:a9:e9:27:5a:3a:e4:61:6f:3b:d7:c9:88:57:e0:
ad:6b:6d:fc:f2:bf:46:7a:de:be:d7:07:21:06:0e:92:0e:d6:
4e:56:06:c4:3a:04:9b:bc:cd:8a:13:40:72:4c:b1:d8:ec:bd:
de:a0:60:e7:77:3d:98:e4:32:96:5a:32:21:9e:e2:ad:30:bb:
57:1c:1a:83:fa:b0:86:0a:c0:eb:38:90:12:1a:85:68:6e:5b:
5b:0e:2e:10:54:61:9f:ae:45:35:63:d7:a7:a6:2b:d6:f6:54:
74:2d:9a:67:74:5c:22:5e:bc:c6:fe:f6:31:ca:99:fd:ec:ee:
ad:e1:a8:a7:24:cc:95:e9:a6:a9:44:b2:57:0e:bc:b1:ee:fd:
89:4b:4e:b9:5a:8d:30:53:00:f6:80:72:95:a4:e5:a8:48:2e:
94:63:cd:db
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAY9rtymEU5PN+YIHNLVfHp25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjQwNTEyMDczMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDQwODAzOTY3ZjJiMGE2ZjAyOGI2MTgzZjg2YTUxMDVhNGRkYWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmjQlBq5PZ7RMhMO8ILH3EvV1fl6
j/5QYdv4jTOQ045CUYO4eV9u9kZ4VCSZNcbDnSZcrhzjVXmwBzPQfw2dA57oJXjB
FV5jWbBLAL+7nELVJ7kFYLPqvowEvZy2Gty2dtdk5EfTGNnR/EGaqtt3aaenA5rO
GIv5nluqEFgrhGEk1jamXeGt3xoB+IcKE0FmviQEallZlPq9Ly5hBcn85nXf5y8H
vHzQi6Ps4BjO0z99haStFVOOYjlbZF9sK+EBuiSjkCCABrUAmw/Ez+aqe/TeYz8A
HTvjq1OFNStmUymGIzzhOKT3JaABLNg5hncc+Zi/K1ZevKEFd4XwRSTeHwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFABAgDln8rCm8Ci2GD+GpRBaTdq2MB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL0FFQ0FPV2Z5c0tid0tMWVlQNGFsRUZwTjJyWS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZL/4w
DQYJKoZIhvcNAQELBQADggEBAFA/sb4gHqs6Amai1EvtCmUMOCiz0boWUajT5MGc
xh4dWF5SqgbxJ1oZpNrSvR/U0Ii235HnRlOOydcs/TdmDgj5RbP7wkEuO77gUbmy
5emNSQweXvTX2AHBprNGDeup6SdaOuRhbzvXyYhX4K1rbfzyv0Z63r7XByEGDpIO
1k5WBsQ6BJu8zYoTQHJMsdjsvd6gYOd3PZjkMpZaMiGe4q0wu1ccGoP6sIYKwOs4
kBIahWhuW1sOLhBUYZ+uRTVj16emK9b2VHQtmmd0XCJevMb+9jHKmf3s7q3hqKck
zJXppqlEslcOvLHu/YlLTrlajTBTAPaAcpWk5ahILpRjzds=
-----END CERTIFICATE-----
Generated at Thu Jun 20 09:22:20 2024 by rpki-client on console-fra.rpki-client.org