Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/t_ayQWq4lp4C38f_q4JbV8iS_pQ.roa
File: t_ayQWq4lp4C38f_q4JbV8iS_pQ.roa (raw, json)
Hash identifier: E9mzVqvTjqxDThzOP/SzWAZm+HMv11z+2xDm2C9aUhA=
Subject key identifier: B7:F6:B2:41:6A:B8:96:9E:02:DF:C7:FF:AB:82:5B:57:C8:92:FE:94
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018CC794D217BDEA912A776EF1F1F0CA6E45
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/t_ayQWq4lp4C38f_q4JbV8iS_pQ.roa
Signing time: Tue 02 Jan 2024 00:31:08 +0000
ROA not before: Tue 02 Jan 2024 00:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 89.251.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:d2:17:bd:ea:91:2a:77:6e:f1:f1:f0:ca:6e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 00:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7f6b2416ab8969e02dfc7ffab825b57c892fe94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:64:8d:27:35:92:1c:79:ee:9f:6b:20:be:
cf:b9:65:68:bf:b1:e6:65:80:92:98:1b:25:5a:cd:
2b:c8:07:d4:f5:be:87:5d:a5:7f:ba:72:04:d6:d6:
b8:f3:79:d1:c1:ca:14:91:bf:f4:70:d5:e5:db:2d:
3b:ff:7e:1a:c0:01:bd:ce:86:bf:cc:0f:64:2f:03:
d2:91:a6:0c:75:02:f0:17:48:d0:60:0e:bf:0e:90:
9b:29:ea:18:45:9d:c1:aa:7f:17:7c:67:01:a0:4a:
28:e9:22:28:93:f8:d8:b6:e7:dc:a2:ab:e9:26:22:
81:b6:8c:7c:17:53:f9:fd:a2:98:cb:bc:36:de:f4:
72:d6:ac:60:d3:82:b0:7e:8c:b2:cc:c4:41:85:0a:
42:e5:f3:77:66:0e:21:f8:9b:45:20:30:6a:02:e0:
d1:bd:63:ba:cb:c1:16:09:cc:2b:b7:26:b6:1e:4b:
35:80:f5:76:7d:7a:31:34:75:20:eb:92:ec:88:ed:
f0:79:d2:a7:a7:20:ba:09:3b:a6:94:76:dc:51:f7:
05:42:ec:b6:74:6a:3b:ab:a3:48:d8:46:44:b8:14:
8b:fd:6b:36:c0:d3:75:76:98:3f:0a:ad:f2:5e:c9:
39:dc:c6:82:01:46:d6:23:17:26:e0:93:01:82:41:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F6:B2:41:6A:B8:96:9E:02:DF:C7:FF:AB:82:5B:57:C8:92:FE:94
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/t_ayQWq4lp4C38f_q4JbV8iS_pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.17.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8d:b1:81:4b:ed:5e:d7:f2:d4:cc:09:59:b1:7a:ae:48:ed:
ed:2b:e1:69:87:67:30:68:87:52:e4:33:04:c8:00:ce:a3:86:
d3:a7:2a:d1:77:d7:a4:80:04:dc:c5:f2:75:f8:03:20:2f:08:
7e:78:c6:39:77:c4:33:a4:1e:b4:34:da:07:7a:71:2c:dc:bd:
98:9e:93:eb:10:95:4e:c0:8e:91:68:39:30:99:cb:83:76:98:
dd:12:12:dc:94:09:be:72:1f:c6:4e:09:b6:99:60:41:ff:1b:
67:09:e0:05:f8:cf:83:d3:de:96:fe:88:95:79:f1:f6:01:e2:
f8:03:2b:6b:27:46:56:2e:5e:e7:00:ad:e6:32:cd:56:ea:25:
9b:b2:b8:d1:4f:ff:d3:71:41:f3:4f:47:30:1d:f9:c2:66:2a:
b3:7e:eb:bd:c3:30:b1:00:04:9b:ac:d0:93:a9:1b:dd:c3:e1:
2b:4a:dc:11:a4:5a:55:0d:10:b6:e9:69:f7:40:cb:72:4a:b4:
97:3d:af:9f:27:cf:2d:df:1c:13:8e:17:d6:3b:ef:6d:fe:5b:
21:39:d3:51:e4:d7:5d:61:50:a1:a2:e4:f2:13:45:62:0a:98:
6b:99:78:b0:f0:69:15:ee:20:93:13:0f:66:b1:85:65:4c:2d:
4e:a4:ce:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:10:03 2024 by rpki-client on console-ams.rpki-client.org