Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gB0WZZWpHOQBmqeUBtihamHlNPQ.roa
File: gB0WZZWpHOQBmqeUBtihamHlNPQ.roa (raw, json)
Hash identifier: Qf+NgKsxoT+0i1FlyUL9qq09e93vCMD/SaRsutnf1T4=
Subject key identifier: 80:1D:16:65:95:A9:1C:E4:01:9A:A7:94:06:D8:A1:6A:61:E5:34:F4
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0192F194EBB29C7FE9BBC72EBF336CCFC840
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gB0WZZWpHOQBmqeUBtihamHlNPQ.roa
Signing time: Sun 03 Nov 2024 10:32:01 +0000
ROA not before: Sun 03 Nov 2024 10:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215931
IP address blocks: 89.190.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f1:94:eb:b2:9c:7f:e9:bb:c7:2e:bf:33:6c:cf:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Nov 3 10:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=801d166595a91ce4019aa79406d8a16a61e534f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:f4:f6:2b:7a:e9:b0:51:e7:01:11:4a:e2:
80:83:c5:0e:25:c8:a4:ff:88:91:30:7d:38:9b:9c:
62:a8:b0:3a:f4:e9:57:f4:d9:35:f0:ef:05:82:8a:
92:83:25:55:6c:f1:ca:57:68:c0:0e:26:6c:e0:2d:
47:7b:8b:23:ad:ec:f9:c1:57:83:5d:cb:bf:16:b1:
5e:d4:95:24:cf:33:ef:18:fc:e0:ab:f3:53:d5:85:
10:09:77:66:81:96:16:c0:ad:87:fc:04:d1:8c:d4:
4a:9e:1e:0e:e8:87:1c:84:3f:19:73:be:77:fd:8f:
0e:a7:93:cc:ef:0a:64:e1:a7:d0:26:52:94:42:da:
33:29:5c:d6:96:42:6e:c0:9b:62:df:50:b5:47:de:
85:e1:83:17:61:da:6e:b5:fb:66:34:32:ca:d0:96:
c6:8a:dc:6f:99:6a:bb:0d:ea:2d:a7:de:94:8b:9c:
85:9c:3d:fc:d9:4d:a1:4a:46:44:c5:34:16:9c:f0:
34:25:58:fc:4c:b9:39:86:07:9d:48:e3:cd:01:bf:
17:65:0d:5c:d2:73:fd:43:ce:ca:39:ae:67:a4:6f:
b4:50:58:58:77:11:c5:eb:d3:df:22:71:fe:f9:37:
f5:31:d0:20:55:d1:fb:c3:00:c3:11:04:79:26:7a:
14:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1D:16:65:95:A9:1C:E4:01:9A:A7:94:06:D8:A1:6A:61:E5:34:F4
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/gB0WZZWpHOQBmqeUBtihamHlNPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.157.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:c2:85:89:19:cc:3c:61:f9:1c:57:38:25:52:f8:5d:21:be:
7a:d0:7a:5b:b4:04:e0:dc:a4:c6:2d:b5:e0:5b:2b:48:7d:8f:
97:c9:85:c3:23:97:12:c4:30:0d:7c:76:21:47:e1:55:db:dd:
7f:76:26:9d:d9:90:bf:e6:2b:ed:a0:a0:13:48:5d:bb:32:13:
06:42:27:73:ec:d2:0a:7b:4d:67:cd:b4:6c:21:9c:a7:b1:81:
49:4f:24:e6:0c:8b:d1:67:ac:ba:af:0d:53:e5:c5:cb:cd:63:
09:6c:88:ba:6a:4f:22:b3:df:fa:65:6f:6d:d1:72:64:fc:ec:
ef:b1:e8:bb:52:cb:36:d9:8a:50:f6:bd:c0:f2:ad:39:90:26:
c4:5e:3f:8f:87:b2:8e:6d:97:9b:e3:5a:7c:57:58:74:6f:8f:
12:53:23:39:88:b2:84:e7:a9:22:e9:1b:f2:d9:c4:70:74:e8:
4f:37:e0:69:6b:a4:64:a6:dc:c3:a2:cf:2e:a4:d1:ed:87:7a:
73:d0:5e:54:14:0c:9a:66:27:58:09:96:3e:5a:d9:ec:df:b6:
b9:a6:26:86:ee:05:e3:1e:b6:17:d6:a4:11:f3:de:7f:f3:d8:
0f:b8:94:ab:6d:53:9f:d6:d4:35:1f:e5:c1:72:1e:ed:13:43:
46:9e:1d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:18:58 2024 by rpki-client on console-ams.rpki-client.org