Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/i5tcN0wINtPntcKE99CAitvnCP0.roa
File: i5tcN0wINtPntcKE99CAitvnCP0.roa (raw, json)
Hash identifier: 6ZzsKJlf9VidRQsmrKmmLD0XkrNB8JLUn7Rf8agzoOs=
Subject key identifier: 8B:9B:5C:37:4C:08:36:D3:E7:B5:C2:84:F7:D0:80:8A:DB:E7:08:FD
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 018CC802C6BE04C6CC9F8800046B9B9D5638
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/i5tcN0wINtPntcKE99CAitvnCP0.roa
Signing time: Tue 02 Jan 2024 02:31:14 +0000
ROA not before: Tue 02 Jan 2024 02:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41043
IP address blocks: 89.45.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:c6:be:04:c6:cc:9f:88:00:04:6b:9b:9d:56:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 2 02:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b9b5c374c0836d3e7b5c284f7d0808adbe708fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fe:3e:aa:94:c5:df:68:e6:c5:6a:1e:dc:29:
29:99:00:d9:9a:24:83:83:17:c9:a3:c9:49:63:89:
04:97:e0:91:f3:cf:a3:60:f3:5b:64:5d:26:a3:6e:
8a:f7:43:67:4c:69:34:72:e7:5e:54:19:c5:3d:21:
0f:d6:b0:59:74:39:65:ec:d2:13:ee:9f:87:74:79:
9f:c7:4c:04:6c:9b:cf:73:15:97:30:5f:3b:48:41:
8a:f2:2d:f3:eb:87:a4:c4:93:60:c8:4c:c4:ab:08:
fb:e2:5c:6d:89:a8:17:e9:70:07:e7:fb:c8:24:b9:
98:51:4a:1a:ec:88:cf:56:df:32:57:ec:4d:eb:e0:
61:46:7d:c5:9c:06:54:7e:d0:c2:cf:c5:04:f7:0d:
f5:5c:62:7a:b7:08:bf:cd:da:f3:aa:82:af:03:ed:
b2:f1:65:87:e1:ab:80:86:6f:e8:e8:86:4b:d5:ca:
55:e3:f9:ec:68:1a:9a:b4:d6:4b:d6:69:f5:e5:ad:
2a:be:01:bb:0b:2b:3e:22:f2:1a:c3:fa:6f:f3:ce:
00:34:4c:48:49:02:7e:18:2d:41:5c:91:19:10:ce:
e0:4b:15:e8:5c:20:80:09:a8:e0:2f:c4:8a:de:92:
ce:73:cf:40:94:33:e3:76:d9:1f:7c:71:fa:13:99:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9B:5C:37:4C:08:36:D3:E7:B5:C2:84:F7:D0:80:8A:DB:E7:08:FD
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/i5tcN0wINtPntcKE99CAitvnCP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:3d:be:b6:de:0b:57:e3:d6:0b:32:be:c0:1c:0c:d5:84:df:
11:cd:a6:55:9b:c5:7e:26:08:07:fb:0b:ec:a6:1f:a0:da:b7:
ad:e4:0a:6f:00:06:43:69:ad:e6:b6:f3:28:89:ee:6a:75:05:
46:d2:45:74:f4:c5:10:1c:f4:a6:0b:c5:df:c6:10:b5:5a:32:
26:83:90:e0:c8:40:30:67:46:6a:2d:d3:89:f4:cb:8a:98:9e:
51:f0:5e:9e:1b:4f:5f:74:c9:5d:9e:2d:58:91:10:42:bd:8f:
d0:d8:27:04:71:d2:85:5b:26:5f:bd:7a:bc:75:6a:80:e8:e5:
8e:d0:b4:17:7d:8b:f7:05:3e:a8:74:0b:d5:5c:79:d7:84:3f:
77:40:6b:09:e2:b5:bb:dd:46:8d:c9:6e:dc:20:00:53:01:8e:
dd:71:e9:e1:4a:7d:17:ef:d6:cb:59:f6:1e:19:66:81:d5:31:
02:4b:81:55:cd:58:c4:d2:a6:58:2b:7e:a0:b5:6a:36:0d:49:
5a:22:58:ba:39:d3:97:fb:01:44:2c:ff:e0:4d:ce:e1:73:75:
df:95:27:32:73:8c:cd:b1:2b:3a:a7:36:a1:47:ec:f1:85:a6:
15:7d:dd:f0:bd:95:92:23:5f:f1:6b:19:7e:be:8e:a2:84:e1:
cc:65:b1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:28:01 2024 by rpki-client on console-fra.rpki-client.org