Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/mWL4wsbt3j4ARlEOJhppMCJLn5c.roa
File: mWL4wsbt3j4ARlEOJhppMCJLn5c.roa (raw, json)
Hash identifier: x7x3occ4o/erUocFLXHwLCKbtbacRQeYzvcRiIdQTpU=
Subject key identifier: 99:62:F8:C2:C6:ED:DE:3E:00:46:51:0E:26:1A:69:30:22:4B:9F:97
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 018CC64AE9E0A5AF5CEC335D81C7BDCAB16B
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/mWL4wsbt3j4ARlEOJhppMCJLn5c.roa
Signing time: Mon 01 Jan 2024 18:30:47 +0000
ROA not before: Mon 01 Jan 2024 18:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206814
IP address blocks: 89.135.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e9:e0:a5:af:5c:ec:33:5d:81:c7:bd:ca:b1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Jan 1 18:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9962f8c2c6edde3e0046510e261a6930224b9f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:c8:59:4a:6a:72:b9:46:06:2e:79:28:22:
9c:3b:32:83:98:a4:19:54:bb:51:51:b5:27:df:41:
d1:fa:4b:21:8c:f0:1a:da:63:5b:af:31:16:07:d8:
98:f3:e4:f7:2d:d4:95:e6:4a:09:b8:88:a6:39:2f:
d0:ab:bd:b6:e6:56:57:4e:6f:44:02:1e:70:93:d7:
bd:75:cd:0d:76:c2:95:f9:21:3e:a2:51:d1:f4:38:
cc:07:cf:5d:df:3e:aa:f3:7a:0d:6e:7d:8e:74:9c:
4f:65:5a:82:9c:07:18:e4:df:df:62:36:d4:94:d9:
3b:ae:d6:4f:66:b1:63:c3:2d:fb:75:52:88:73:15:
99:b7:12:6b:02:cf:3d:cd:e5:49:4d:8d:24:38:e1:
9d:07:ec:59:6d:55:83:bd:25:98:d2:dc:fd:d7:52:
21:42:e1:88:ca:a7:b7:b3:52:d9:d0:e7:55:cd:d6:
24:45:a4:52:ab:c0:c4:b4:b7:88:76:c1:ef:f8:43:
1a:06:c3:bb:a8:74:65:5b:b2:72:39:8a:93:ff:c5:
98:f3:af:f9:e2:22:cc:59:30:db:db:ce:37:3d:f9:
2d:17:75:dc:e6:02:71:68:9a:ee:e9:79:9d:e2:b9:
ff:f5:24:7d:0f:5b:87:70:3c:ce:92:34:9a:ff:1c:
ef:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:62:F8:C2:C6:ED:DE:3E:00:46:51:0E:26:1A:69:30:22:4B:9F:97
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/mWL4wsbt3j4ARlEOJhppMCJLn5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.135.60.0/24
Signature Algorithm: sha256WithRSAEncryption
86:8e:0f:eb:32:63:bc:2b:54:1e:ed:f6:17:ca:5d:b2:8d:c6:
e1:01:0a:d5:22:23:66:0d:83:a0:76:04:f9:e0:ab:6b:0b:73:
71:81:94:d1:69:6c:84:19:b5:e6:4a:32:94:c1:68:1c:65:c4:
bc:b1:40:61:79:11:74:df:e4:7c:4c:8e:cc:8e:d1:f5:75:ae:
ce:b4:98:59:91:8e:90:37:a5:d3:e8:5c:66:bb:c0:05:81:49:
f1:65:66:e1:a0:71:d0:09:a8:2d:f3:98:12:0c:a1:7b:14:6c:
1b:d5:46:44:30:1d:81:ca:67:58:53:14:37:58:92:b1:67:ee:
78:37:b6:90:43:c3:3c:22:75:8c:be:fb:22:02:79:ac:9b:f2:
b4:0c:7f:98:ac:3e:71:fd:7d:57:68:ed:c1:a7:f6:72:8a:b7:
e7:a4:d4:06:77:a6:86:b2:15:18:c3:8e:bc:f5:32:a3:9b:4d:
99:05:5b:14:44:1b:67:98:2e:25:23:b9:8f:58:55:43:12:12:
08:54:4e:38:98:c0:78:7a:db:f4:7e:f7:a4:e6:a4:4d:e3:b8:
49:41:69:4a:6a:e0:44:e4:b9:3d:64:37:4e:bb:c6:40:5c:32:
a0:2c:85:70:ee:54:a6:a8:15:c3:41:c7:dd:cc:30:68:19:ac:
16:46:a0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:36:38 2024 by rpki-client on console-fra.rpki-client.org