Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e5965a-0a27-4587-8ac6-5cc28426c588/1/8VZHDzCAm0VnYWEtdtggdEsno74.roa
File: 8VZHDzCAm0VnYWEtdtggdEsno74.roa (raw, json)
Hash identifier: hc1zeO1ruMKR+1q/zN/frv65RqJevjJsy8qBmP0xjSg=
Subject key identifier: F1:56:47:0F:30:80:9B:45:67:61:61:2D:76:D8:20:74:4B:27:A3:BE
Certificate issuer: /CN=50b49fa114a0ec3553c72132dbc56a2ebbef79df
Certificate serial: 018CC8DEC57C1E01C9B75DAB0E19B19CCB39
Authority key identifier: 50:B4:9F:A1:14:A0:EC:35:53:C7:21:32:DB:C5:6A:2E:BB:EF:79:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULSfoRSg7DVTxyEy28VqLrvved8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e5965a-0a27-4587-8ac6-5cc28426c588/1/8VZHDzCAm0VnYWEtdtggdEsno74.roa
Signing time: Tue 02 Jan 2024 06:31:31 +0000
ROA not before: Tue 02 Jan 2024 06:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 89.106.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e5965a-0a27-4587-8ac6-5cc28426c588/1/ULSfoRSg7DVTxyEy28VqLrvved8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e5965a-0a27-4587-8ac6-5cc28426c588/1/ULSfoRSg7DVTxyEy28VqLrvved8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULSfoRSg7DVTxyEy28VqLrvved8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:c5:7c:1e:01:c9:b7:5d:ab:0e:19:b1:9c:cb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b49fa114a0ec3553c72132dbc56a2ebbef79df
Validity
Not Before: Jan 2 06:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f156470f30809b456761612d76d820744b27a3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8c:e9:43:a3:9c:ef:fa:cd:04:06:44:03:00:
8d:cc:e1:fd:1d:f9:40:a2:a3:1a:69:1b:37:e5:08:
10:2f:40:ff:b8:76:e3:d4:a5:fb:84:0d:4b:9b:bd:
55:7c:5d:60:ca:f3:bf:de:63:d7:90:62:57:05:d3:
4b:3a:34:b4:62:72:5b:56:b9:33:24:ba:5d:75:2e:
eb:94:a6:c4:10:dc:fe:c8:ac:e9:05:e2:cc:7b:09:
c0:cb:ff:cc:6a:ed:89:64:ae:a5:cb:75:4f:4f:71:
3d:7d:3a:67:d6:db:ac:ae:c4:0b:21:a4:60:09:ee:
d0:4f:9a:fb:9b:46:12:6f:9b:e1:34:33:1a:96:51:
b1:0a:b6:e7:72:e9:77:a4:af:d2:e5:2a:9b:03:8d:
76:90:db:45:2a:d0:a6:96:a1:24:bb:45:be:13:07:
e2:98:db:9a:8f:d2:27:da:0a:ac:00:0b:88:9d:00:
bf:90:85:ca:37:9b:7a:5c:dd:ac:a3:c2:1d:2c:31:
91:e3:fe:eb:85:cb:20:04:cd:9e:57:b7:41:a2:ff:
34:b9:d8:b8:e3:87:0a:6a:99:d0:67:e9:44:96:d6:
be:6a:b7:4e:1f:81:b3:85:e6:5f:dc:75:cd:53:9f:
39:fc:a7:21:15:b5:99:c8:ae:84:1f:9a:85:88:3d:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:56:47:0F:30:80:9B:45:67:61:61:2D:76:D8:20:74:4B:27:A3:BE
X509v3 Authority Key Identifier:
keyid:50:B4:9F:A1:14:A0:EC:35:53:C7:21:32:DB:C5:6A:2E:BB:EF:79:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULSfoRSg7DVTxyEy28VqLrvved8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5965a-0a27-4587-8ac6-5cc28426c588/1/8VZHDzCAm0VnYWEtdtggdEsno74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5965a-0a27-4587-8ac6-5cc28426c588/1/ULSfoRSg7DVTxyEy28VqLrvved8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.205.0/24
Signature Algorithm: sha256WithRSAEncryption
33:79:81:a7:e5:18:00:6c:59:b0:13:3b:a7:d5:0a:4a:bf:7e:
db:26:27:05:21:5c:ad:fd:4e:36:18:17:5c:10:3c:61:6f:c3:
b4:74:73:b8:35:62:b4:4a:30:15:9b:57:1a:4c:fc:4f:ae:33:
5d:65:f9:ff:c2:62:6e:24:fc:de:91:e8:b7:94:45:a1:7a:75:
19:ca:03:90:7d:3c:7f:ae:b6:4d:9c:14:5d:1d:1d:e9:a0:6b:
67:41:ec:83:4e:5a:dd:3a:3b:73:2e:69:c0:0d:86:10:61:5c:
5c:aa:61:49:d6:23:a8:aa:e7:be:f7:cf:3c:0d:c6:53:b5:2b:
87:aa:34:00:e1:f7:d1:cc:1d:22:9f:0d:85:d4:57:28:7a:f9:
d5:c2:bf:f9:01:8f:f7:1b:35:df:83:31:a8:48:df:61:7e:d5:
85:15:bd:99:d9:00:d4:38:d4:7b:d9:ea:a5:6d:d8:5b:1a:ea:
97:3f:35:d6:1a:f0:3d:f1:9b:37:18:29:55:6f:aa:19:99:01:
16:57:cf:6d:54:df:86:fa:c1:06:48:5d:22:42:6e:23:30:a3:
fa:a4:89:18:d4:ae:86:f5:48:7b:04:4a:01:f4:d8:da:a8:d3:
b9:9c:f0:5b:e5:4c:f9:f0:6e:a6:32:89:6d:7d:0f:08:8f:9d:
90:76:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 05:23:35 2024 by rpki-client on console-ams.rpki-client.org