Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/6uGmIT7W9Wg7sBSoWczMa_sL5OA.roa
File: 6uGmIT7W9Wg7sBSoWczMa_sL5OA.roa (raw, json)
Hash identifier: Imb41uhM4QAUPwlqzwTJM1cL864G4illVyHURh92zyA=
Subject key identifier: EA:E1:A6:21:3E:D6:F5:68:3B:B0:14:A8:59:CC:CC:6B:FB:0B:E4:E0
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01933F014D2260EA7B297C984AA5E1B2C74D
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/6uGmIT7W9Wg7sBSoWczMa_sL5OA.roa
Signing time: Mon 18 Nov 2024 11:21:10 +0000
ROA not before: Mon 18 Nov 2024 11:21:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214637
IP address blocks: 89.43.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:01:4d:22:60:ea:7b:29:7c:98:4a:a5:e1:b2:c7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Nov 18 11:21:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eae1a6213ed6f5683bb014a859cccc6bfb0be4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:77:15:d8:01:0e:5f:9f:a4:05:b9:61:ec:
cc:06:84:74:02:f2:fe:30:05:90:dc:a9:b6:79:8f:
8d:2a:10:63:d6:12:e4:0b:4c:d4:57:19:43:41:6b:
fd:6d:66:5d:22:b5:7f:54:d5:a9:0d:f9:9e:74:d2:
f1:dd:91:3f:09:a1:95:6a:13:2f:7f:02:e9:01:a6:
68:6f:85:c1:a0:f5:d2:4f:45:1e:5f:b3:05:62:8a:
7b:cd:f8:35:ab:c6:c5:7a:51:cd:91:5e:30:84:0b:
40:9e:eb:26:4e:3b:8c:79:92:1a:cf:38:80:61:ea:
a6:1a:e1:99:89:3e:6e:44:9a:a7:af:a1:e3:ec:e1:
38:f8:00:80:ef:4e:b9:28:64:7f:4d:8e:3b:6f:01:
6c:18:9b:51:f5:80:82:2e:1a:c9:4a:fb:36:8f:c3:
d7:54:b6:82:90:fe:da:8a:86:73:07:1e:a0:3b:b2:
7b:cb:ad:84:1d:16:ea:9c:0e:22:af:fd:82:1d:2c:
0f:74:ef:32:19:e6:96:8e:b9:5e:80:89:c9:e3:29:
f8:c9:5e:cb:9b:18:be:4f:e0:5b:a3:8d:20:f4:1d:
8c:6f:2b:32:99:f9:53:3e:90:a3:38:14:e3:38:16:
ac:f5:55:a7:1c:52:84:e2:30:7b:97:68:35:b2:27:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E1:A6:21:3E:D6:F5:68:3B:B0:14:A8:59:CC:CC:6B:FB:0B:E4:E0
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/6uGmIT7W9Wg7sBSoWczMa_sL5OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.73.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e2:a5:22:5b:61:09:be:52:23:a2:0c:f0:89:1c:d3:16:aa:
72:54:44:e0:52:7b:53:f9:95:75:5d:f3:65:61:53:18:4b:76:
ab:13:5f:28:d8:ca:e8:94:ee:f6:e3:41:90:93:bc:c0:e6:65:
e3:27:ec:ae:a6:ea:3c:cc:05:6f:75:a2:fc:34:bc:88:bb:7a:
e1:bf:35:bc:63:66:8e:3b:df:57:61:5c:dd:e5:3f:a1:d6:ea:
b0:8a:53:35:7f:29:10:52:a2:e5:81:09:df:d7:4e:03:12:a2:
af:42:cf:be:c0:20:bb:1c:af:27:69:97:0e:3f:6d:d5:ec:7e:
a4:b9:72:41:9d:35:93:d5:a1:18:dc:82:04:37:7c:52:a9:93:
76:da:28:69:a0:16:c2:a5:fb:73:c6:88:2b:0e:42:49:c0:5b:
d0:c8:9b:e4:b6:ce:b7:26:07:a8:02:bd:39:ac:d1:3d:05:fe:
1b:ea:0d:2b:c2:99:d5:f0:9c:c4:75:08:35:06:cd:0d:62:38:
0f:df:be:8a:82:8f:fe:7f:0e:7a:72:29:d8:f2:0a:da:2b:a3:
c7:10:1d:4c:3d:71:4e:a2:6b:2b:70:38:19:49:94:f4:75:4c:
08:e4:0e:ce:d6:5b:70:13:71:97:f1:38:bb:f8:92:39:4b:d7:
8e:48:e1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:36:18 2024 by rpki-client on console-ams.rpki-client.org