Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rONUE38B8_ZLMNWrs9YR7w235-Y.roa
File: rONUE38B8_ZLMNWrs9YR7w235-Y.roa (raw, json)
Hash identifier: ZKqW7UA5cfM2snpuJqZdYq0h9g0vZj2/2t5gManTMEc=
Subject key identifier: AC:E3:54:13:7F:01:F3:F6:4B:30:D5:AB:B3:D6:11:EF:0D:B7:E7:E6
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC795625C1D8DA1F1A79CBFF5C282E2D2
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rONUE38B8_ZLMNWrs9YR7w235-Y.roa
Signing time: Tue 02 Jan 2024 00:31:45 +0000
ROA not before: Tue 02 Jan 2024 00:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61279
IP address blocks: 89.40.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:62:5c:1d:8d:a1:f1:a7:9c:bf:f5:c2:82:e2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ace354137f01f3f64b30d5abb3d611ef0db7e7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:28:33:51:4c:f1:0b:5f:bf:52:2a:61:80:0c:
dd:ae:d2:72:89:00:ad:14:10:7b:ae:ae:37:b3:e3:
31:d3:fd:74:89:0e:c7:d6:31:c2:40:e4:f9:ce:f0:
a2:e2:da:c4:e7:f5:c9:95:1c:9b:73:f0:56:f3:ea:
ee:0e:b5:d2:84:49:1a:73:0c:0e:db:bc:81:06:1e:
a9:b5:f2:fc:72:b0:8c:2d:68:01:f2:7c:77:80:a9:
a9:44:b6:80:6b:14:8b:d9:1d:cd:13:52:c5:5e:c3:
3b:56:2c:2c:c6:1d:a5:7b:94:8a:35:53:6e:54:e4:
5c:67:56:53:57:f1:44:a6:3a:e6:66:d9:7b:df:ee:
2f:7c:0a:88:bb:f1:ec:c1:d0:94:72:ea:d1:f9:48:
da:65:5e:45:7f:d1:70:20:b5:03:be:35:32:87:41:
0c:0e:0d:1a:05:de:08:d1:83:e2:b4:17:3f:90:d4:
0f:50:34:bc:e5:0f:fb:15:3e:5a:09:30:1e:6f:91:
08:93:77:fa:79:bb:64:bb:26:0c:02:7c:af:c7:f6:
6d:be:d8:c2:93:45:03:6b:73:8e:b5:86:78:fe:3d:
f6:13:92:ff:49:ba:b6:a0:25:5e:2a:9e:46:94:7f:
1d:b7:32:58:55:7c:67:30:85:29:c0:5b:5e:6f:c7:
81:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E3:54:13:7F:01:F3:F6:4B:30:D5:AB:B3:D6:11:EF:0D:B7:E7:E6
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/rONUE38B8_ZLMNWrs9YR7w235-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a5:36:d0:fb:56:09:5e:7b:b4:e1:17:95:db:60:5b:b0:9c:
f7:55:79:21:a0:e9:84:5d:c1:22:73:42:03:d8:6e:1b:ba:e4:
21:47:13:ce:31:97:2b:f3:45:f7:11:f0:d1:4f:de:e1:61:53:
4b:9d:1c:7a:e7:e1:2c:1e:c8:49:ed:8d:58:7f:8b:49:88:d0:
52:91:1f:a0:27:8d:1d:6c:93:ce:12:49:df:6b:4b:b4:9b:80:
6b:43:66:0c:d7:06:9b:22:4d:14:1f:92:32:13:30:6a:e8:c1:
4e:ab:77:9f:be:68:a8:70:a2:d5:46:90:19:d8:02:90:e6:55:
f7:20:bf:56:7b:2b:7e:a4:07:e9:7e:b2:e3:d0:6e:af:03:84:
81:bd:00:c6:32:a6:c4:c5:63:27:bd:d1:00:d9:98:17:04:84:
85:fa:04:44:bf:8f:ae:1b:ce:69:30:2d:2a:11:c9:e7:96:95:
ae:08:e8:fc:06:ca:a4:c8:c2:3d:74:c3:c6:0c:7b:ff:3b:5d:
bd:6b:d2:71:cb:76:21:28:38:cb:d7:5e:d1:de:9c:e2:29:8a:
55:75:c3:ea:ae:c7:d4:a6:e5:ba:dd:07:0d:02:d9:d2:d0:e9:
88:dc:a9:7e:b2:69:bd:d5:6b:a9:db:a6:2c:90:36:86:9d:42:
e9:23:01:75
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzHlWJcHY2h8aecv/XCguLSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjQwMTAyMDAzMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2UzNTQxMzdmMDFmM2Y2NGIzMGQ1YWJiM2Q2MTFlZjBkYjdlN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlygzUUzxC1+/UiphgAzdrtJyiQCt
FBB7rq43s+Mx0/10iQ7H1jHCQOT5zvCi4trE5/XJlRybc/BW8+ruDrXShEkacwwO
27yBBh6ptfL8crCMLWgB8nx3gKmpRLaAaxSL2R3NE1LFXsM7Viwsxh2le5SKNVNu
VORcZ1ZTV/FEpjrmZtl73+4vfAqIu/HswdCUcurR+UjaZV5Ff9FwILUDvjUyh0EM
Dg0aBd4I0YPitBc/kNQPUDS85Q/7FT5aCTAeb5EIk3f6ebtkuyYMAnyvx/ZtvtjC
k0UDa3OOtYZ4/j32E5L/Sbq2oCVeKp5GlH8dtzJYVXxnMIUpwFteb8eB8QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFKzjVBN/AfP2SzDVq7PWEe8Nt+fmMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL3JPTlVFMzhCOF9aTE1OV3JzOVlSN3cyMzUtWS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZKBQw
DQYJKoZIhvcNAQELBQADggEBACqlNtD7Vglee7ThF5XbYFuwnPdVeSGg6YRdwSJz
QgPYbhu65CFHE84xlyvzRfcR8NFP3uFhU0udHHrn4SweyEntjVh/i0mI0FKRH6An
jR1sk84SSd9rS7SbgGtDZgzXBpsiTRQfkjITMGrowU6rd5++aKhwotVGkBnYApDm
Vfcgv1Z7K36kB+l+suPQbq8DhIG9AMYypsTFYye90QDZmBcEhIX6BES/j64bzmkw
LSoRyeeWla4I6PwGyqTIwj10w8YMe/87Xb1r0nHLdiEoOMvXXtHenOIpilV1w+qu
x9Sm5brdBw0C2dLQ6YjcqX6yab3Va6nbpiyQNoadQukjAXU=
-----END CERTIFICATE-----
Generated at Thu Jun 20 10:56:37 2024 by rpki-client on console-ams.rpki-client.org