Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/a9KSxppTdYKgG4emIPb-HEIT_9U.roa
File: a9KSxppTdYKgG4emIPb-HEIT_9U.roa (raw, json)
Hash identifier: un3HTHR6zaF5nfxWUMHHEiuCAzbkMxQXivzrsf0d6zQ=
Subject key identifier: 6B:D2:92:C6:9A:53:75:82:A0:1B:87:A6:20:F6:FE:1C:42:13:FF:D5
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 018CC86FB7725FC66008FBCF6A496A5035DB
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/a9KSxppTdYKgG4emIPb-HEIT_9U.roa
Signing time: Tue 02 Jan 2024 04:30:13 +0000
ROA not before: Tue 02 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212271
IP address blocks: 152.89.171.0/24 maxlen: 24
152.89.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b7:72:5f:c6:60:08:fb:cf:6a:49:6a:50:35:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 2 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bd292c69a537582a01b87a620f6fe1c4213ffd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:eb:75:93:0e:56:4e:55:86:9e:6f:02:d2:c0:
e3:69:b3:8a:01:78:1f:30:1d:47:10:5a:73:55:dd:
38:5c:2b:78:0a:49:f6:69:6e:41:4e:91:e3:7b:d6:
c5:9b:da:1f:a5:b8:b1:f6:f1:d1:77:c9:3b:da:73:
89:e5:77:69:55:38:78:a1:90:8f:70:46:f9:0b:1b:
23:d2:0e:a2:b4:9b:ad:f5:2e:a5:d8:23:c5:a9:aa:
e9:81:f3:a2:64:fc:c3:d8:29:ab:c7:18:5f:24:bf:
fd:70:70:c5:1d:0c:29:34:21:c5:51:1f:f1:9f:25:
bb:1e:4d:1b:a0:0a:52:27:4e:43:c7:60:c7:6a:a5:
3f:69:76:ca:56:9b:75:09:97:5e:d1:f1:91:07:b4:
09:f5:7a:03:ea:41:17:d6:3e:8b:c3:cf:7d:82:aa:
a5:28:55:cd:e7:8c:b5:61:d8:32:50:87:05:55:61:
b1:6f:93:ef:f8:2a:eb:78:28:7b:03:93:e6:42:0b:
14:9e:f4:0a:f6:65:62:b9:64:33:4c:fd:88:4c:f0:
29:df:40:87:00:b7:47:7b:28:cd:d8:90:d6:67:72:
18:9f:64:44:05:a9:5c:83:3f:dd:5c:a7:43:5c:6e:
18:c2:88:70:d5:25:87:62:bb:b4:e7:5b:93:3e:ab:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D2:92:C6:9A:53:75:82:A0:1B:87:A6:20:F6:FE:1C:42:13:FF:D5
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/a9KSxppTdYKgG4emIPb-HEIT_9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.170.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:5a:64:26:c0:78:3b:37:4a:e0:e4:2c:f1:d5:52:0a:5b:2f:
0c:27:0e:d6:5c:3a:6f:b6:55:29:36:b7:81:8b:18:7d:22:20:
0f:23:6a:51:e6:e6:9b:14:3b:3e:0b:8f:d9:fb:38:42:ef:1f:
f7:b2:ef:59:d9:ea:ed:30:21:10:90:74:ed:30:fb:13:2f:60:
7d:c3:da:9e:5a:59:a7:c9:0d:61:fa:38:74:d2:eb:ae:59:0c:
af:8a:0d:cf:8c:11:9e:62:6e:26:c4:27:06:08:46:30:74:61:
6b:4a:6e:fd:52:68:93:ec:0b:bc:d3:48:84:b1:3d:83:53:29:
3c:58:03:13:06:ad:76:aa:32:ef:6b:d6:7d:19:02:54:3e:e1:
97:6b:08:64:8f:d8:73:4f:33:6e:63:30:27:7a:5b:5d:6f:b8:
b1:7f:87:e2:36:03:3b:e4:e9:bc:1e:74:14:dd:c5:d8:57:c3:
f8:cc:59:db:68:66:e7:01:01:d0:61:1f:6c:3f:10:95:cf:4d:
46:f9:13:1c:82:c7:87:fc:6e:75:54:ac:59:af:6a:a8:08:c9:
bd:c2:90:bf:a7:cf:34:05:b3:df:a3:8b:39:4a:df:99:3a:97:
1a:fa:26:57:0a:c9:21:e3:69:b7:49:ce:b3:14:4d:32:65:d6:
8f:ea:15:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:44:56 2024 by rpki-client on console-fra.rpki-client.org