Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_AQYWssKWNtdut_B-QSraNYSDnk.roa
File: _AQYWssKWNtdut_B-QSraNYSDnk.roa (raw, json)
Hash identifier: WR6/L29WgQ47/ZOM4jYO5s5qFPaa3hUIb8XecKoKXGw=
Subject key identifier: FC:04:18:5A:CB:0A:58:DB:5D:BA:DF:C1:F9:04:AB:68:D6:12:0E:79
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018D6AA72A3AA6ED9023BB4DFE269EF5D83C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_AQYWssKWNtdut_B-QSraNYSDnk.roa
Signing time: Fri 02 Feb 2024 16:29:16 +0000
ROA not before: Fri 02 Feb 2024 16:29:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61096
IP address blocks: 89.33.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:a7:2a:3a:a6:ed:90:23:bb:4d:fe:26:9e:f5:d8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 2 16:29:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc04185acb0a58db5dbadfc1f904ab68d6120e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:5a:c4:1d:fd:67:37:25:64:c4:03:da:c7:
15:9a:9c:64:5d:6a:62:cc:90:57:1a:9b:9e:4a:18:
b0:12:a6:3b:9d:c6:ec:66:76:cc:da:8f:9e:21:1d:
b6:09:57:1c:76:a2:eb:55:0d:10:2a:c2:3e:cf:53:
0f:25:dc:06:13:be:10:47:ff:57:c3:74:83:8c:2c:
4f:fb:16:52:9b:68:8a:7c:42:fb:9c:3d:1e:43:b7:
3e:cb:d6:e7:23:d5:13:00:d9:2d:b2:76:6d:cb:c3:
c7:42:bc:83:df:77:e8:d7:c5:a0:69:d7:78:bc:d0:
53:f0:7e:48:c9:12:15:0a:dd:09:40:36:5d:bc:78:
ee:76:de:7a:df:5f:f6:c1:88:43:b6:96:d6:8f:4e:
a0:29:38:fd:90:b3:72:ef:51:b1:5c:1d:f6:7c:05:
94:a8:30:4e:3c:46:46:34:c1:c9:14:ab:67:87:93:
6d:1f:84:2e:5a:af:43:5b:62:91:58:0c:07:e8:c3:
68:31:bd:67:f7:30:9b:84:b4:42:b2:32:7f:d3:ef:
ee:09:5b:65:1a:a4:2f:cb:05:e1:91:7b:84:d1:f2:
54:f5:da:54:d8:55:1b:e3:c0:19:50:5c:30:9d:1f:
fa:eb:33:03:f8:68:a0:97:3d:3e:e1:1c:8d:bd:03:
2c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:04:18:5A:CB:0A:58:DB:5D:BA:DF:C1:F9:04:AB:68:D6:12:0E:79
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_AQYWssKWNtdut_B-QSraNYSDnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.106.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:2a:1e:43:c7:46:0c:f8:cd:08:2c:fe:e3:38:36:68:22:b5:
5a:ab:14:d7:f5:fa:ff:dd:f2:dc:18:10:42:94:14:69:c8:b0:
f0:fc:0c:87:7c:fc:90:84:86:02:e5:df:7d:62:5d:54:a0:45:
d1:b0:2e:61:d3:40:c2:44:8b:4e:ee:e2:4e:77:8b:bf:eb:5a:
57:fc:44:34:d2:8e:4f:4f:f3:fc:9c:7f:28:e2:57:8f:2b:57:
d3:70:b9:33:cc:13:34:8e:9f:13:c7:c6:76:a0:d3:b0:de:e7:
e3:b3:33:4e:3d:4a:21:7c:30:a5:26:94:4d:73:42:80:07:65:
99:22:35:91:9a:48:cc:c1:d7:b9:e5:dc:f0:24:5b:4b:75:56:
09:4f:6d:cc:ef:85:0b:9f:d5:f0:35:d5:24:53:61:21:92:6d:
83:8d:27:07:24:52:7f:39:89:20:c2:d8:85:ee:7b:2b:4b:1d:
0a:8d:e5:68:00:d0:91:71:72:ae:60:77:48:ca:76:7c:33:bb:
dc:61:82:26:89:13:99:fc:e3:c3:78:f6:99:47:61:b7:da:91:
a0:46:1d:74:de:8d:be:de:0c:90:43:37:9f:46:98:52:5e:db:
13:71:e1:80:bf:c9:2c:0d:a9:72:27:26:b6:26:5a:f2:aa:77:
d5:f4:59:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:56:37 2024 by rpki-client on console-ams.rpki-client.org