Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/diR4VupYGYyRB3G6TjfVFPkbiwk.roa
File: diR4VupYGYyRB3G6TjfVFPkbiwk.roa (raw, json)
Hash identifier: IcZAFMT2jdIg4SabjYwq7JkRMTzM7xJLhoxs/PxyF1E=
Subject key identifier: 76:24:78:56:EA:58:19:8C:91:07:71:BA:4E:37:D5:14:F9:1B:8B:09
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01922A9A9DF7A46D3C625B528844EDD124EB
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/diR4VupYGYyRB3G6TjfVFPkbiwk.roa
Signing time: Wed 25 Sep 2024 19:13:48 +0000
ROA not before: Wed 25 Sep 2024 19:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 89.251.16.0/24 maxlen: 24
89.251.19.0/24 maxlen: 24
89.251.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2a:9a:9d:f7:a4:6d:3c:62:5b:52:88:44:ed:d1:24:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 25 19:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76247856ea58198c910771ba4e37d514f91b8b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:e7:8f:e0:64:24:af:84:f3:d7:70:cf:57:
ef:70:29:2a:7f:00:b3:97:8a:0a:e9:72:5a:c5:57:
7d:dd:e7:41:8e:48:76:d0:1b:58:2a:dc:2b:36:a5:
92:de:2a:4e:4c:d7:af:e2:c5:92:4a:d5:e8:7f:7c:
37:13:79:47:ad:96:ea:5b:bf:1a:4e:95:06:6e:a9:
95:e5:97:80:1b:7b:91:2e:d8:f7:97:e8:3c:27:b5:
e5:40:a4:9b:0a:0a:b5:d4:06:96:06:66:79:84:e2:
e8:91:c3:08:db:6e:43:f4:df:d4:94:d9:1c:f9:c4:
72:c8:08:a9:a2:ea:6f:13:f7:83:74:cd:50:45:8b:
b5:11:fc:6d:bc:23:01:4d:9b:09:25:11:01:14:54:
d8:1f:5d:02:fa:2b:ac:5a:5a:4e:f5:2b:e7:25:b2:
40:87:4f:3e:65:61:4c:6c:69:93:30:8b:f5:a2:8c:
80:e1:13:d5:9e:3d:90:af:8c:cf:1f:2b:e9:78:d8:
24:f9:20:2b:a4:95:65:91:8c:ef:1c:7a:45:4a:b3:
4a:7b:06:5e:e8:f5:92:4b:d6:21:87:1a:51:86:2c:
71:4a:55:54:13:d4:77:67:ae:e2:7b:22:03:b7:e7:
e9:a3:d9:1c:6b:13:8c:b9:58:63:f4:6b:3f:b7:06:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:24:78:56:EA:58:19:8C:91:07:71:BA:4E:37:D5:14:F9:1B:8B:09
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/diR4VupYGYyRB3G6TjfVFPkbiwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.16.0/24
89.251.19.0/24
89.251.23.0/24
Signature Algorithm: sha256WithRSAEncryption
36:0b:98:0c:25:16:69:5f:43:0a:83:cd:ec:d1:1c:ba:59:f0:
79:93:ae:12:04:86:83:12:b4:9a:92:1d:20:7b:9b:a4:3f:88:
e5:49:95:e0:28:86:e5:82:ab:9e:fe:a5:18:40:37:9e:fe:7f:
89:c1:27:fb:89:f8:ab:01:b0:fc:1b:8e:c3:20:d5:5c:4f:be:
db:06:0b:50:4b:51:19:7f:34:56:a7:39:4d:0d:94:27:93:aa:
05:82:3f:a1:fb:d4:b1:9d:aa:66:09:30:b4:66:d9:d4:c9:ab:
43:c3:80:ec:42:0a:76:f3:66:ba:da:f1:b5:7d:33:3d:f2:4f:
33:67:ad:6a:d1:3d:5f:99:75:40:6a:fb:09:75:29:a7:98:10:
0f:29:7f:4b:85:64:aa:02:ca:02:5c:0a:29:6e:ff:df:a1:ab:
28:7b:7e:eb:94:44:86:4d:d9:35:6f:66:40:0e:ec:5a:21:fb:
9d:80:b4:a7:84:b4:2a:25:ff:46:f5:84:53:40:dd:1b:2d:b9:
07:47:9b:ab:00:d8:43:6c:ac:ea:0f:b2:2c:f2:be:a1:99:e7:
cd:38:4e:78:f0:8c:b3:1c:12:f2:87:f2:36:c2:88:b9:14:1c:
33:e2:c9:5e:45:41:bd:f0:51:70:b6:d7:92:c9:e0:0f:5a:d4:
9c:fa:83:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:15:24 2024 by rpki-client on console-ams.rpki-client.org