Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/0FTv0TFzeSPB6XsWJ_1soEExa3k.roa
File: 0FTv0TFzeSPB6XsWJ_1soEExa3k.roa (raw, json)
Hash identifier: HN05YlBsenw1LPrpQRSb7zI9ERU6APzKx/NzUyZum34=
Subject key identifier: D0:54:EF:D1:31:73:79:23:C1:E9:7B:16:27:FD:6C:A0:41:31:6B:79
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 018CC26D37CB41F8AA97BBDDF7D438BAF149
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/0FTv0TFzeSPB6XsWJ_1soEExa3k.roa
Signing time: Mon 01 Jan 2024 00:29:46 +0000
ROA not before: Mon 01 Jan 2024 00:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60737
IP address blocks: 89.30.86.0/24 maxlen: 24
89.30.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:37:cb:41:f8:aa:97:bb:dd:f7:d4:38:ba:f1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: Jan 1 00:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d054efd131737923c1e97b1627fd6ca041316b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:a3:25:4f:cb:c1:ce:95:d9:10:0f:d1:71:
5c:8b:e0:57:28:f5:ba:77:c4:42:d0:93:c1:08:d8:
6e:18:ad:ae:5a:a7:a0:45:e7:b1:29:f5:7a:57:07:
a3:b5:f4:4e:22:88:95:e2:82:de:84:ef:a0:43:d8:
b5:6f:27:e7:c7:e6:bb:f3:70:28:82:62:5b:31:92:
83:fc:10:b6:24:ba:1c:42:fb:af:4d:7f:c0:ab:a5:
4d:ef:99:b0:96:a8:58:a6:ef:18:78:eb:85:94:0f:
2e:5d:0f:1a:9d:46:90:c7:cb:04:18:a7:08:d3:ef:
1d:e3:8a:cd:02:7a:9c:e8:db:2d:62:1b:ff:5f:64:
72:ac:99:3b:b3:90:16:90:40:d5:82:18:47:ca:45:
72:83:99:a6:f0:e1:cc:4f:d3:17:6d:32:3e:b2:f4:
17:86:01:b4:b7:d1:4a:46:d3:d5:e7:28:65:64:b8:
2a:ff:58:8b:55:2f:cd:11:88:f7:2b:51:2c:60:2b:
0d:ad:66:e3:14:27:82:a9:81:88:ad:eb:62:dc:67:
30:69:96:bd:95:6a:15:26:8c:21:ae:cc:cf:5e:fd:
1a:07:8b:04:cd:89:12:5c:ec:81:fe:37:c7:82:17:
f5:52:1e:36:96:c1:5b:3f:af:1b:66:c3:c9:4b:5c:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:54:EF:D1:31:73:79:23:C1:E9:7B:16:27:FD:6C:A0:41:31:6B:79
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/0FTv0TFzeSPB6XsWJ_1soEExa3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.86.0/24
89.30.95.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ce:b2:0d:12:54:ca:64:86:c0:0d:88:04:42:dc:e1:3e:e7:
19:4d:ec:9a:cd:61:e2:46:9d:de:ef:48:9c:9a:4b:27:fd:cb:
f3:f7:d7:65:af:b0:b1:bb:2f:7c:68:af:2c:95:13:20:6b:8d:
e2:0c:64:ad:45:ff:ef:eb:9d:1c:0e:8a:40:78:b1:48:99:45:
fd:c7:81:15:7d:b8:36:92:a4:8b:a9:da:a9:a3:5d:ef:95:1f:
63:e0:ef:47:a9:ef:66:7a:e7:3a:86:12:6e:cf:1c:82:98:e2:
dc:f4:ea:49:2c:62:c6:9d:6f:f7:de:70:41:87:16:77:f9:93:
46:39:11:7e:f0:99:86:d6:db:95:3a:ed:ca:38:8a:ed:9b:1f:
6e:29:f9:98:1d:22:cb:7c:07:fe:86:68:0b:0f:57:42:85:58:
50:ca:5e:4e:e9:2b:98:39:9e:14:ac:ef:76:fb:ea:62:eb:89:
0f:4e:f0:3b:4c:d6:5d:63:33:b8:ea:e6:6e:2e:42:cd:ad:66:
22:57:cb:41:03:a7:1c:48:be:1a:66:62:65:b1:ce:a4:8f:9b:
13:4c:c6:8e:ff:ba:8a:32:96:3c:04:34:37:72:12:e4:9d:c6:
e0:51:5d:17:74:bd:7b:f2:79:6d:87:aa:be:ea:71:ee:60:f8:
17:d6:a7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:53:45 2024 by rpki-client on console-ams.rpki-client.org