Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/URTKTaWZZWGWw5DHcNU2vdY-rwc.roa
File: URTKTaWZZWGWw5DHcNU2vdY-rwc.roa (raw, json)
Hash identifier: jmVVjygTtmdVmSwzeiup4UBLk+NB59MPEQmAIOWDo38=
Subject key identifier: 51:14:CA:4D:A5:99:65:61:96:C3:90:C7:70:D5:36:BD:D6:3E:AF:07
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 01900CB9B0D5F1E5716DD4E796A0276E8D3D
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/URTKTaWZZWGWw5DHcNU2vdY-rwc.roa
Signing time: Wed 12 Jun 2024 13:53:34 +0000
ROA not before: Wed 12 Jun 2024 13:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 89.42.136.0/22 maxlen: 24
89.42.136.0/23 maxlen: 24
89.42.136.0/24 maxlen: 24
89.42.137.0/24 maxlen: 24
89.42.138.0/23 maxlen: 24
89.42.138.0/24 maxlen: 24
89.42.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0c:b9:b0:d5:f1:e5:71:6d:d4:e7:96:a0:27:6e:8d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jun 12 13:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5114ca4da599656196c390c770d536bdd63eaf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fa:d2:0c:aa:0c:d2:ba:e8:6b:4b:cb:66:c3:
a8:7d:94:6d:11:84:3b:64:4b:70:ce:50:d7:f7:48:
24:16:f5:0a:b7:35:7e:5a:35:63:78:5b:42:c9:fd:
fc:e0:38:44:f8:29:ba:a0:d1:00:7d:87:8f:67:cd:
6f:82:af:4f:a0:32:3f:83:13:05:13:66:60:e5:91:
7f:4a:9d:91:7c:74:29:58:ff:77:8d:05:e9:52:d1:
62:8e:a7:0d:f6:21:d1:1c:c8:57:d3:35:93:25:45:
27:1b:9f:da:c5:2d:04:8c:72:0d:20:f9:f0:8b:fb:
6b:1f:40:ee:0e:de:5a:7b:e3:62:40:5d:db:da:f2:
d3:c6:fb:8b:21:20:8b:11:39:ad:bf:57:94:29:3f:
22:7a:e7:a5:9d:ef:f6:67:f8:70:dc:cd:06:e8:3b:
a3:37:f6:7f:ca:d9:d5:9c:07:ce:76:6e:fc:c4:3b:
ad:df:b7:93:78:96:fc:b6:b8:7f:e4:98:75:e7:d7:
90:21:0c:78:3f:45:80:76:1a:09:5b:cd:a9:bb:d4:
60:e2:98:65:46:9b:bb:90:9e:fe:51:85:34:fd:50:
1b:07:db:8f:99:27:52:2e:9e:d5:ae:8f:cd:fb:0a:
d9:29:f2:59:d3:ee:83:80:0a:4a:48:1f:b4:e2:30:
b8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:14:CA:4D:A5:99:65:61:96:C3:90:C7:70:D5:36:BD:D6:3E:AF:07
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/URTKTaWZZWGWw5DHcNU2vdY-rwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.136.0/22
Signature Algorithm: sha256WithRSAEncryption
29:78:81:8f:f4:71:ba:c1:26:15:84:e8:63:d0:68:6e:69:b6:
dd:26:0f:d0:1c:ec:8a:b5:14:54:7b:53:2f:f1:46:cc:46:9c:
f2:37:97:fb:24:17:fd:74:27:87:31:36:5e:6b:4a:e6:5f:20:
95:f2:76:be:62:0d:a1:4c:16:7d:19:a2:65:22:17:18:55:eb:
f0:f2:2a:b4:c0:de:39:37:0b:3b:3a:fe:a2:a2:6c:f4:9c:75:
fe:2e:4b:39:2c:29:6a:af:8e:09:8d:b7:eb:f9:11:6f:5e:e3:
f5:a6:de:92:e8:96:19:a0:06:3e:f1:e5:bc:42:76:79:73:d7:
a7:9d:3b:c2:ee:b9:27:67:7f:ce:88:30:a1:59:96:29:21:19:
29:5b:99:af:3e:01:e9:ac:8c:fd:d4:5b:c9:a8:f0:7c:3b:0b:
e3:97:d0:18:ed:87:18:12:82:c0:94:5c:d8:92:e5:3c:78:e3:
bb:b8:85:4f:d7:9e:bb:c9:e0:d7:7a:f7:05:7f:11:5f:0c:09:
ce:74:43:8b:c2:38:5b:4a:3a:6d:fb:2a:57:e2:7d:3f:28:0c:
35:21:b8:92:3a:31:cb:27:93:70:fa:af:94:40:5e:39:ca:9b:
10:97:0f:42:70:8c:b1:13:a2:bf:f1:4b:21:ed:d0:2c:f5:84:
d9:5c:31:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:16:42 2024 by rpki-client on console-fra.rpki-client.org