Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/h0DTKf4P8Lt86sF7JZfinvW1UI4.roa
File: h0DTKf4P8Lt86sF7JZfinvW1UI4.roa (raw, json)
Hash identifier: 8/CaOBmhl0w22Rp6wAAvt5kimUDXo3Zr5BGj9YQ9OWQ=
Subject key identifier: 87:40:D3:29:FE:0F:F0:BB:7C:EA:C1:7B:25:97:E2:9E:F5:B5:50:8E
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0190BD6ED2190C0663DE605B5FC948F36D02
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/h0DTKf4P8Lt86sF7JZfinvW1UI4.roa
Signing time: Tue 16 Jul 2024 21:24:34 +0000
ROA not before: Tue 16 Jul 2024 21:24:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152179
IP address blocks: 89.251.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bd:6e:d2:19:0c:06:63:de:60:5b:5f:c9:48:f3:6d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 16 21:24:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8740d329fe0ff0bb7ceac17b2597e29ef5b5508e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:7a:f3:1d:74:90:1d:a6:4e:0e:ea:01:9d:
06:15:9c:eb:20:ee:20:bd:ac:ec:9a:76:7a:8c:7d:
79:3b:4a:de:df:f1:d3:d5:b1:c3:95:a5:19:d8:ee:
3e:c1:4a:f3:7a:67:54:04:39:4c:2b:b2:94:b2:fb:
ff:9f:47:67:cf:59:8f:51:9f:38:84:cc:3a:b4:84:
61:9d:aa:d8:6e:d8:8e:0a:a5:54:f0:a6:a4:5c:27:
eb:33:ce:67:ac:e6:7e:b4:2d:57:3e:6a:51:18:4b:
6c:7d:52:d0:a3:26:1e:95:7e:89:56:cb:bc:0c:31:
d1:4d:a6:a6:07:c4:50:11:33:8d:6c:81:92:d0:a7:
89:8c:d9:42:8e:3b:c9:d0:df:55:5a:16:5a:5d:d2:
c3:a8:64:02:f0:6f:77:73:1f:c0:a1:ce:0e:5d:38:
ff:6d:bc:3b:e1:be:27:25:0b:39:72:a7:6e:5b:e1:
74:dc:d1:30:df:24:95:52:18:17:7c:b0:50:7b:71:
48:a2:86:cd:61:a8:81:41:0e:fc:1a:2c:9f:94:24:
e0:a1:ba:d4:1f:61:70:35:42:7b:f9:eb:0b:ca:38:
85:b3:ff:c9:9e:1f:67:1c:c3:5c:70:dd:eb:3a:a3:
12:57:a8:ff:ba:25:b4:13:7b:db:4d:3c:a0:53:8b:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:40:D3:29:FE:0F:F0:BB:7C:EA:C1:7B:25:97:E2:9E:F5:B5:50:8E
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/h0DTKf4P8Lt86sF7JZfinvW1UI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.26.0/24
Signature Algorithm: sha256WithRSAEncryption
01:32:9c:4c:7c:45:c5:32:7f:6d:b9:d6:5e:44:9d:4e:00:68:
eb:ee:80:a9:5c:0f:08:8e:36:1d:ec:fc:fe:dd:ac:55:b0:8f:
21:ff:5d:71:cc:f0:c7:8a:c7:53:e7:4d:ee:3e:61:06:97:df:
cf:14:6a:0f:57:eb:34:e6:3f:c1:be:43:d0:17:5c:5b:49:b0:
be:43:21:e2:cb:1d:ad:55:57:27:5c:8f:25:d9:cb:7d:8c:c6:
91:4c:71:63:d0:e8:d3:1d:72:04:2c:4a:65:5d:c5:9d:74:e5:
e2:43:61:15:21:9a:b1:62:ed:f0:96:4c:36:cd:9e:15:10:78:
fd:98:76:d3:48:9e:d0:96:1d:f4:1b:f5:df:11:48:d3:16:eb:
ab:e3:35:c6:dd:58:1a:19:23:54:29:98:a2:5c:4f:8a:ac:ed:
42:9d:fc:64:ad:28:6f:9b:09:8f:4c:f6:c8:3c:7e:b6:9e:10:
ef:68:c6:a2:97:dc:74:f1:d8:86:b4:1d:b6:e1:d7:19:cd:d5:
4c:53:6c:11:bf:1d:09:86:ea:e8:74:4a:12:4c:7d:e5:51:50:
bf:65:79:22:d1:63:dc:ff:49:5d:34:6e:55:c8:ce:d7:fe:75:
ce:11:fc:f7:63:f9:de:85:4a:a4:21:eb:18:fe:6a:99:37:8a:
e1:dc:08:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:34:12 2024 by rpki-client on console-ams.rpki-client.org