Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1qjwdXQNMnvUpcPFUk1-LH5Gmqw.roa
File: 1qjwdXQNMnvUpcPFUk1-LH5Gmqw.roa (raw, json)
Hash identifier: FtILzvzsMbAlBDW0S66enKakGl0+pDtzIsAefXYwouE=
Subject key identifier: D6:A8:F0:75:74:0D:32:7B:D4:A5:C3:C5:52:4D:7E:2C:7E:46:9A:AC
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018CC794D2C833A8E9A480E37DDBD92045F8
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1qjwdXQNMnvUpcPFUk1-LH5Gmqw.roa
Signing time: Tue 02 Jan 2024 00:31:08 +0000
ROA not before: Tue 02 Jan 2024 00:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 89.251.17.0/24 maxlen: 24
193.93.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:d2:c8:33:a8:e9:a4:80:e3:7d:db:d9:20:45:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 00:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6a8f075740d327bd4a5c3c5524d7e2c7e469aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:38:76:ca:f6:a8:7f:8b:67:96:6d:f9:80:
68:7f:22:36:1a:10:09:fe:c9:e0:24:40:5c:e9:18:
e8:87:a2:10:e9:48:22:91:f4:be:74:b5:ca:f7:6c:
80:49:3e:32:be:fc:08:b9:3d:f6:af:9c:1c:b8:43:
78:1d:d2:15:22:31:40:32:2b:20:bf:29:ea:f0:0f:
09:75:63:e9:da:94:2b:7d:2f:82:db:6d:13:6e:3f:
e8:cf:df:09:70:fd:f5:06:46:92:f4:f5:7e:1e:ef:
e1:96:93:23:48:e8:d5:22:c6:e9:7f:d1:36:bc:76:
4b:84:99:3b:df:a6:75:45:c0:ec:c3:c8:3a:67:8f:
c9:7e:54:be:bc:7e:8d:76:a2:e5:52:3b:a6:d2:3a:
59:6d:fd:97:84:48:d3:2f:ee:76:8a:bf:2f:92:7a:
a3:32:d1:d0:90:ed:23:3c:45:01:e9:40:d3:da:a4:
5b:31:69:90:ff:a7:ef:85:f6:d9:eb:e8:65:db:83:
90:b4:5d:a2:a8:3b:e2:db:c4:27:c7:e3:32:58:98:
c1:c0:a3:12:c0:8e:26:55:3c:d6:0b:8f:21:3c:05:
da:85:81:5c:6a:b8:09:8a:44:12:b7:07:de:3b:90:
b8:b2:2b:e7:3d:20:6f:69:4d:7c:ec:ad:ab:cf:6e:
8c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A8:F0:75:74:0D:32:7B:D4:A5:C3:C5:52:4D:7E:2C:7E:46:9A:AC
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1qjwdXQNMnvUpcPFUk1-LH5Gmqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.17.0/24
193.93.53.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f2:5c:a6:28:f1:83:e0:ab:4d:4b:e4:d3:ca:36:0f:4b:58:
ce:a7:65:81:7f:d3:2c:9e:79:cd:60:e2:6a:15:55:1d:e3:b7:
4f:33:5a:2a:bb:33:96:8f:76:8f:ef:19:43:8e:31:8b:5d:1d:
cc:62:19:46:ad:c2:1d:cf:bc:6f:52:4c:d1:40:2a:84:55:ee:
39:73:38:eb:ab:84:99:e1:33:8c:e0:2f:90:89:6d:4c:53:24:
f2:ec:b6:2c:37:eb:0b:42:62:d4:1c:01:c1:a3:cf:78:ac:60:
8d:1e:81:0d:8f:fa:cb:66:f0:d8:a0:dd:4d:a3:2a:f5:f9:b1:
5d:6e:cf:a3:7d:38:08:bd:5b:50:8f:16:a1:d9:58:a1:87:1c:
38:6d:21:52:94:65:dd:ff:97:80:97:45:f3:c9:a2:75:6b:5d:
a9:49:7f:d7:43:24:51:a6:6a:39:70:a8:a9:a1:e2:0c:85:13:
80:b0:65:1b:57:53:7b:7d:d2:3b:a3:3c:45:ce:4f:ef:00:96:
13:4e:45:47:20:77:bf:15:1f:cc:c9:68:9e:e5:6e:21:bc:b6:
d4:a6:0c:98:58:87:2d:c1:d7:2b:e0:c0:19:67:59:c5:e6:9b:
6a:f5:68:31:dc:8d:85:84:99:9a:dd:6c:5b:86:6e:76:d7:14:
87:e9:65:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 05:13:42 2024 by rpki-client on console-fra.rpki-client.org