Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/fd7CAoPRAiiEQg5rRNt8SfZn8UY.roa
File: fd7CAoPRAiiEQg5rRNt8SfZn8UY.roa (raw, json)
Hash identifier: 5AISExqKrhwx7ntk4TDYNV/UjyUx+xGFyjY+w+QtbtQ=
Subject key identifier: 7D:DE:C2:02:83:D1:02:28:84:42:0E:6B:44:DB:7C:49:F6:67:F1:46
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018CC86FC1DE46631FD57CE1C71996830D98
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/fd7CAoPRAiiEQg5rRNt8SfZn8UY.roa
Signing time: Tue 02 Jan 2024 04:30:16 +0000
ROA not before: Tue 02 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203120
IP address blocks: 89.34.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:c1:de:46:63:1f:d5:7c:e1:c7:19:96:83:0d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ddec20283d1022884420e6b44db7c49f667f146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:da:6a:ee:fb:ba:f7:0e:58:f8:2a:09:af:f3:
f7:2c:b2:0a:02:a6:ad:b1:fc:51:72:a0:37:0a:61:
2c:98:e8:39:3a:0b:88:22:da:2a:6a:a9:37:9d:d4:
d4:9f:9f:3a:6e:ab:22:a2:4a:2b:0c:ca:82:60:1d:
93:19:51:38:c3:75:5d:d6:a9:4f:ea:4f:d9:75:ee:
b2:96:59:78:53:c5:5c:56:32:cd:f0:09:17:18:0e:
62:db:29:50:26:24:17:43:7e:ec:31:1a:79:45:94:
82:f9:a7:3e:73:41:2d:fa:ce:b2:7b:fe:3b:d7:c6:
a3:07:b7:87:40:d0:07:14:2b:b0:f2:6d:a7:76:37:
2b:ea:d9:3f:12:91:11:ee:ee:54:bd:9a:4c:9a:0a:
85:1d:9b:84:52:fd:5e:04:07:83:c5:a0:a2:8f:20:
1e:6a:ae:0d:30:b2:cc:ce:c4:4b:43:4d:7e:0e:4c:
2c:9b:ce:a2:50:e9:bf:3f:05:54:8a:55:b0:af:73:
4e:58:f6:37:50:2c:b5:b9:f1:3b:4a:b1:41:28:04:
2a:ae:4f:44:8f:67:4b:25:0d:ce:c5:76:ad:14:f6:
59:76:5b:55:b3:d2:6b:e4:9f:0b:a9:24:2f:85:50:
89:aa:7d:66:9e:e8:ed:a7:fb:8d:61:95:6b:b9:e8:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DE:C2:02:83:D1:02:28:84:42:0E:6B:44:DB:7C:49:F6:67:F1:46
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/fd7CAoPRAiiEQg5rRNt8SfZn8UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.74.0/23
Signature Algorithm: sha256WithRSAEncryption
23:fa:df:49:48:9a:c1:51:1d:2b:87:2d:24:7f:3d:63:bb:1b:
8b:bb:d1:bc:dd:5e:01:53:c3:84:a3:8c:b8:94:e2:8e:e2:6f:
2b:38:7a:f9:0e:e5:9c:3f:17:f4:f1:35:bc:e2:5f:ae:58:8f:
ee:c9:4c:96:15:72:3b:03:39:2b:bc:1a:d8:d9:26:f0:23:4f:
24:14:6d:6c:a2:a8:2f:7f:33:e9:24:87:9c:e3:2a:35:27:af:
91:82:a3:b9:7e:ac:b7:8e:f2:f3:40:eb:9e:47:6d:a7:56:ed:
92:e4:c5:fa:5a:e0:7c:fd:01:e1:6a:37:26:9c:3f:f0:a1:9c:
11:43:7d:b7:a4:2f:92:c5:b7:15:21:29:a0:4b:c4:39:02:03:
e5:f8:a6:4b:c9:ab:ff:fe:df:f7:ac:27:58:fb:12:38:4e:9b:
4a:39:4f:54:b5:51:27:a9:dc:85:3f:eb:d5:6e:88:86:b5:fa:
09:4f:9c:1a:d6:c6:b2:5e:6f:85:45:ae:24:0b:e4:30:35:6e:
ae:e9:11:a4:50:a8:c4:8b:41:7e:1a:ae:c8:76:f8:33:97:5a:
8d:69:c7:c6:45:bc:32:71:1a:c3:c8:0a:6b:80:24:ae:f3:81:
23:83:47:bb:9e:e9:e0:13:7d:23:13:f9:f1:dc:0d:12:c5:98:
c3:89:94:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb8HeRmMf1XzhxxmWgw2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy
MjRkYWEwHhcNMjQwMTAyMDQzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGRlYzIwMjgzZDEwMjI4ODQ0MjBlNmI0NGRiN2M0OWY2NjdmMTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNpq7vu69w5Y+CoJr/P3LLIKAqat
sfxRcqA3CmEsmOg5OguIItoqaqk3ndTUn586bqsiokorDMqCYB2TGVE4w3Vd1qlP
6k/Zde6ylll4U8VcVjLN8AkXGA5i2ylQJiQXQ37sMRp5RZSC+ac+c0Et+s6ye/47
18ajB7eHQNAHFCuw8m2ndjcr6tk/EpER7u5UvZpMmgqFHZuEUv1eBAeDxaCijyAe
aq4NMLLMzsRLQ01+Dkwsm86iUOm/PwVUilWwr3NOWPY3UCy1ufE7SrFBKAQqrk9E
j2dLJQ3OxXatFPZZdltVs9Jr5J8LqSQvhVCJqn1mnujtp/uNYZVruegQVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH3ewgKD0QIohEIOa0TbfEn2Z/FGMB8GA1UdIwQY
MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvZmQ3Q0FvUFJBaWlFUWc1clJOdDhTZlpuOFVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWSJKMA0G
CSqGSIb3DQEBCwUAA4IBAQAj+t9JSJrBUR0rhy0kfz1juxuLu9G83V4BU8OEo4y4
lOKO4m8rOHr5DuWcPxf08TW84l+uWI/uyUyWFXI7AzkrvBrY2SbwI08kFG1soqgv
fzPpJIec4yo1J6+RgqO5fqy3jvLzQOueR22nVu2S5MX6WuB8/QHhajcmnD/woZwR
Q323pC+SxbcVISmgS8Q5AgPl+KZLyav//t/3rCdY+xI4TptKOU9UtVEnqdyFP+vV
boiGtfoJT5wa1sayXm+FRa4kC+QwNW6u6RGkUKjEi0F+Gq7Idvgzl1qNacfGRbwy
cRrDyAprgCSu84Ejg0e7nungE30jE/nx3A0SxZjDiZSQ
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:49:25 2024 by rpki-client on console-fra.rpki-client.org