Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/mXqfj6tO33IAPCxebiMmuWqoND8.roa
File: mXqfj6tO33IAPCxebiMmuWqoND8.roa (raw, json)
Hash identifier: +K9cu6ctTqiywDEmrYMB+AGc82p0PBxVdt3xH6uIwLE=
Subject key identifier: 99:7A:9F:8F:AB:4E:DF:72:00:3C:2C:5E:6E:23:26:B9:6A:A8:34:3F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D2135F8F25ED83E2A42C58B3EF412
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/mXqfj6tO33IAPCxebiMmuWqoND8.roa
Signing time: Mon 01 Jan 2024 00:29:40 +0000
ROA not before: Mon 01 Jan 2024 00:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35711
IP address blocks: 89.37.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 04:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:21:35:f8:f2:5e:d8:3e:2a:42:c5:8b:3e:f4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=997a9f8fab4edf72003c2c5e6e2326b96aa8343f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:be:4a:49:d3:7e:63:9b:1e:ce:c8:0d:e5:
0b:f6:94:11:95:3a:be:07:37:40:d6:ad:0a:53:cc:
d5:b7:a2:7c:d6:8c:14:98:bf:30:50:0c:f8:4e:fa:
61:45:6e:10:7a:db:e1:cc:d1:41:ab:7b:aa:8e:ee:
5f:eb:7f:a2:14:1a:e0:83:f3:d3:95:9b:1a:dc:2e:
3a:80:41:07:4b:a4:cb:53:f0:f6:f7:38:8c:6b:8c:
7e:a2:ca:57:89:8e:41:1c:a5:c6:d0:b4:51:14:c5:
88:08:1a:d7:64:91:a8:58:29:9f:2b:b4:dd:fa:d1:
36:c7:54:9a:d5:76:d9:bc:11:e4:03:ec:46:67:2f:
45:c5:99:69:ec:02:fb:eb:1a:4f:c9:1f:14:d9:07:
ea:93:09:c3:0f:2c:ea:69:14:74:b7:16:50:9f:ab:
9a:e8:6e:25:75:a0:5b:81:ec:37:6c:41:65:e7:e4:
b7:7a:0c:1d:30:4c:b1:6d:a2:58:c8:18:13:65:17:
25:5d:6d:3b:63:cd:b8:30:6c:78:a9:38:e2:dd:90:
e9:9c:c6:4d:84:e0:aa:7d:8f:2d:6d:55:b9:5f:14:
27:66:6e:b2:57:c0:ec:d0:2b:55:e9:27:d7:d9:dc:
81:10:32:8e:94:62:58:fa:b9:70:68:ec:a9:ab:ea:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7A:9F:8F:AB:4E:DF:72:00:3C:2C:5E:6E:23:26:B9:6A:A8:34:3F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/mXqfj6tO33IAPCxebiMmuWqoND8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.118.0/24
Signature Algorithm: sha256WithRSAEncryption
03:fc:37:47:7c:28:f2:48:c2:eb:d3:5f:c6:34:b6:61:cf:2e:
d1:23:8e:8f:25:fe:df:01:6d:39:bd:36:dd:c6:2e:92:6c:06:
10:5d:df:3e:af:76:e7:9a:9c:be:41:92:62:c0:29:07:74:3b:
ed:8e:33:04:a6:06:e7:b7:ae:ea:28:fe:fa:29:d0:e1:d7:0a:
82:db:5e:04:cd:f3:c7:97:93:52:2a:8f:50:95:15:29:5f:72:
a3:35:09:c5:57:38:2a:4f:d9:40:39:30:34:fe:d1:b6:65:92:
ce:c0:9c:73:e3:b4:e0:c4:0e:94:b2:f5:b8:a0:10:77:1f:b5:
b0:c3:5b:76:1d:b6:b0:27:fe:72:0c:8b:2a:42:d5:03:d3:cb:
e2:51:3f:cf:06:93:b7:86:11:2c:ca:5b:be:a6:63:53:06:2b:
97:a2:23:09:12:70:0f:4e:03:f1:7b:4b:16:52:8a:44:26:4b:
d2:ad:4e:19:ac:53:7e:75:0e:00:13:87:d2:30:ef:e2:49:47:
cc:55:e4:39:35:bb:3f:b4:50:55:f8:ac:cf:fa:ff:0b:6c:bc:
70:24:38:2e:3b:b1:4c:19:ae:62:6b:33:b5:12:4d:f3:85:27:
53:7b:2c:b7:5d:7f:bb:c3:6e:b7:ad:3b:38:5f:7a:d9:92:30:
23:52:d9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 09:45:40 2024 by rpki-client on console-fra.rpki-client.org