Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/aBqddUiFpIHiNrfbNgOSmBlO85w.roa
File: aBqddUiFpIHiNrfbNgOSmBlO85w.roa (raw, json)
Hash identifier: l8JLxGJuuBMPuIVWI5ayhz/xa7yzNmG9uAEOBLiBWA8=
Subject key identifier: 68:1A:9D:75:48:85:A4:81:E2:36:B7:DB:36:03:92:98:19:4E:F3:9C
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018CC794D36B53EFAA94200617F8AF4A36C4
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/aBqddUiFpIHiNrfbNgOSmBlO85w.roa
Signing time: Tue 02 Jan 2024 00:31:08 +0000
ROA not before: Tue 02 Jan 2024 00:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 89.251.17.0/24 maxlen: 24
193.93.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:d3:6b:53:ef:aa:94:20:06:17:f8:af:4a:36:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 00:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=681a9d754885a481e236b7db36039298194ef39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:ec:72:d2:83:1b:90:ea:03:b3:94:24:11:
ee:fd:59:b1:9c:84:cd:d1:02:95:5a:c8:87:1f:80:
c3:07:0e:37:4a:f5:98:4b:00:69:f4:59:ea:ac:21:
72:55:c0:4c:f8:6d:bb:0e:d9:86:f6:93:3e:3d:31:
17:71:22:89:3b:45:b8:b2:be:e7:26:1e:94:e3:f8:
71:9c:68:5a:60:c2:d6:2a:37:6b:75:8d:31:54:b8:
5f:94:93:1a:44:49:e3:34:c5:e6:08:ea:33:ea:03:
0c:77:85:21:8d:9e:d2:89:2d:61:0d:76:22:37:27:
7f:c7:ac:b2:ae:d8:26:07:82:3a:e7:f8:30:ec:31:
7f:62:64:95:da:85:19:f2:6e:4d:96:e4:ea:a8:41:
0a:0d:5d:a0:c3:34:ef:17:44:e9:cf:fc:77:26:bf:
ff:d1:7c:99:1d:6a:ab:be:0d:50:31:cb:4c:78:9c:
d6:6f:2b:b4:df:6d:2a:c7:95:76:55:21:a5:bd:4c:
de:e0:f9:ad:4c:d0:45:5f:0b:bb:6a:c7:cf:2b:93:
90:a3:56:a1:e4:88:3c:cd:50:5f:04:bf:c9:59:39:
12:ee:17:dd:de:04:94:4f:51:60:57:36:f2:ca:fb:
b8:59:6f:f4:3e:56:9f:5f:b6:7f:84:79:8f:ed:10:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1A:9D:75:48:85:A4:81:E2:36:B7:DB:36:03:92:98:19:4E:F3:9C
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/aBqddUiFpIHiNrfbNgOSmBlO85w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.17.0/24
193.93.53.0/24
Signature Algorithm: sha256WithRSAEncryption
72:5a:05:69:30:98:4d:aa:bc:8c:9a:19:e6:d4:83:67:dc:90:
40:13:49:d9:a4:01:f7:59:bd:ef:bf:80:ad:53:f8:bd:0a:e6:
1f:62:f5:bd:f9:68:d6:09:28:08:b8:9c:ba:99:b6:9f:07:6d:
04:4f:19:3e:a4:ff:f3:d4:d2:89:29:f7:d3:6b:a0:a7:b6:99:
b1:ef:a1:c7:f7:f4:da:42:95:27:cf:4e:10:c5:2d:3c:3f:6a:
23:c4:ba:de:b6:1d:c6:8d:a0:ac:6b:4b:da:f3:82:95:9a:df:
21:b8:78:13:ff:86:1f:42:d5:70:5d:40:68:eb:13:f6:ae:92:
42:8c:24:07:0f:2a:c8:05:4e:4d:9b:e7:45:f4:19:3f:d0:63:
a5:11:58:da:82:ab:cf:55:9b:7b:4b:4b:05:78:69:81:31:3f:
5f:f5:fd:d1:00:6c:26:a2:7e:a0:28:e0:16:e3:bf:02:2a:9e:
9e:c4:ab:30:a7:31:f8:a8:3b:1c:77:4b:ff:89:d0:42:0a:b1:
4e:ad:f6:78:7f:ba:36:63:14:5a:ce:f5:a0:f1:12:ac:85:40:
69:f7:8a:5a:8d:b1:11:f6:f8:51:a9:e6:52:c7:60:5d:d1:7f:
77:f2:d8:e9:b3:35:d2:d2:7a:7d:39:ed:c1:7f:d0:60:b6:af:
73:df:aa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:25:56 2024 by rpki-client on console-fra.rpki-client.org