Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/dnw-XFg9UBFW6-RtfoFMtJsgxVs.roa
File: dnw-XFg9UBFW6-RtfoFMtJsgxVs.roa (raw, json)
Hash identifier: JuSnKO7iRsKL5pht6qEm/ZnsFvMVkbjbByv1ZTkvJ0A=
Subject key identifier: 76:7C:3E:5C:58:3D:50:11:56:EB:E4:6D:7E:81:4C:B4:9B:20:C5:5B
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018DD4B7717EF1B632C4642B13B31664468D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/dnw-XFg9UBFW6-RtfoFMtJsgxVs.roa
Signing time: Fri 23 Feb 2024 06:46:48 +0000
ROA not before: Fri 23 Feb 2024 06:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 89.40.83.0/24 maxlen: 24
89.42.87.0/24 maxlen: 24
93.113.183.0/24 maxlen: 24
93.119.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d4:b7:71:7e:f1:b6:32:c4:64:2b:13:b3:16:64:46:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 23 06:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=767c3e5c583d501156ebe46d7e814cb49b20c55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cb:8d:1c:7e:00:f5:df:3a:49:42:be:01:13:
8a:8a:46:ce:17:76:27:d5:c6:87:da:db:76:f4:8f:
5e:c1:03:17:17:1c:8d:f0:80:83:cb:1f:c6:4e:f0:
22:f5:60:56:cd:59:e2:f7:ed:00:b7:cd:f0:1a:65:
f2:8e:df:ef:03:b8:40:af:2e:a8:9b:e8:0c:af:a8:
51:c7:3f:ee:e7:16:13:15:5a:c8:7b:61:c3:55:e7:
88:0e:6e:08:7a:b0:2b:e7:8f:62:d5:df:cc:a7:02:
fb:14:f9:5d:f7:a2:f0:d7:ef:41:ee:3e:08:94:6e:
d6:72:c8:60:ae:50:8e:6a:f0:66:5f:c2:1b:7d:89:
14:5f:f0:f2:f0:10:e8:2e:63:ad:25:bf:d0:1a:67:
8f:99:ab:c9:ca:07:23:07:cd:0f:40:69:30:f6:6d:
ae:e8:97:bf:94:31:61:da:1b:59:60:2a:fb:72:c3:
d8:c3:17:14:19:d0:76:9d:25:81:78:45:06:11:55:
10:6a:e8:bc:48:0f:4c:87:48:74:0a:16:c5:ca:3b:
c5:6e:65:71:18:89:64:12:d5:52:98:da:25:53:a7:
06:fe:70:9b:06:f5:81:41:fa:b7:2e:40:ba:75:1a:
c4:e1:b3:18:e6:78:51:a3:3c:c2:33:91:97:da:ed:
bd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7C:3E:5C:58:3D:50:11:56:EB:E4:6D:7E:81:4C:B4:9B:20:C5:5B
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/dnw-XFg9UBFW6-RtfoFMtJsgxVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.83.0/24
89.42.87.0/24
93.113.183.0/24
93.119.106.0/24
Signature Algorithm: sha256WithRSAEncryption
80:62:e0:ef:ca:96:b8:63:b5:89:7f:38:ea:94:56:42:0d:42:
ec:5b:93:a9:d6:28:f3:00:5d:e0:45:46:d2:2f:9a:5c:31:36:
0a:66:fc:84:5f:58:a9:3c:f5:c3:ec:ce:df:f6:8c:8b:cc:71:
aa:73:0b:23:2b:bf:2c:25:46:0c:46:8e:de:3a:0d:53:59:18:
da:11:2b:c9:8d:d6:06:29:31:44:c9:d7:fc:27:39:5a:87:29:
ee:38:53:5f:48:b2:ff:77:f7:98:f6:85:f4:74:79:58:73:e7:
f6:89:e0:e4:b0:13:5c:2a:be:0b:4e:05:91:b6:93:6a:14:14:
60:a3:28:3a:c8:25:7c:72:cc:27:98:97:de:c9:eb:69:4e:5c:
c4:9f:d3:8f:a1:65:b3:b9:75:98:a6:30:f7:02:df:d9:64:5c:
65:ed:0c:d5:f2:2f:57:23:a0:00:8a:6d:60:b7:d4:3c:d0:b5:
a0:21:61:52:eb:45:a9:32:4b:04:6a:79:51:a4:25:a4:62:fb:
98:d2:3c:94:b9:d4:2c:35:cc:c0:77:21:34:5b:bc:48:b3:d5:
78:50:a2:90:0a:4e:82:fe:bc:c4:8d:61:bc:d4:f6:a0:d0:88:
c4:5b:61:aa:ab:37:12:e9:1a:c7:b2:bf:99:47:41:9e:e0:56:
aa:78:5b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:57:05 2024 by rpki-client on console-ams.rpki-client.org