Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/SP8AgShzwYjEGMPSvDt3cdNDVi8.roa
File: SP8AgShzwYjEGMPSvDt3cdNDVi8.roa (raw, json)
Hash identifier: rHZFKTf74QNuT5bELYVma7un8SurP5bi6Ari8WD/2MQ=
Subject key identifier: 48:FF:00:81:28:73:C1:88:C4:18:C3:D2:BC:3B:77:71:D3:43:56:2F
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018CC94E03B3890A6C2246FBC9EAA12B4773
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/SP8AgShzwYjEGMPSvDt3cdNDVi8.roa
Signing time: Tue 02 Jan 2024 08:33:02 +0000
ROA not before: Tue 02 Jan 2024 08:33:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42614
IP address blocks: 89.43.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:03:b3:89:0a:6c:22:46:fb:c9:ea:a1:2b:47:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 2 08:33:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48ff00812873c188c418c3d2bc3b7771d343562f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:d3:17:c5:be:d9:0d:20:25:3e:15:39:00:
60:bf:d9:05:78:11:19:28:49:75:d8:0a:af:2b:8f:
9e:e3:92:14:99:4b:8e:d9:78:5b:0c:cd:47:bd:cb:
a4:eb:1a:c3:71:07:3a:89:48:86:b5:e3:82:94:14:
47:b3:81:1d:b9:0a:05:d0:73:c0:43:77:23:d7:2c:
d7:de:d4:28:cb:c1:5b:c9:7a:9a:fc:ca:89:8a:66:
f5:fb:2b:9f:7b:1c:fd:ae:3b:4c:74:98:f7:19:4a:
c4:75:92:e8:ce:81:28:1d:2a:35:29:df:6b:76:48:
7c:23:7a:87:25:8d:13:6e:f0:83:17:01:c4:cb:af:
f0:13:ca:87:ba:6e:a7:3b:eb:8c:29:a2:26:3c:a4:
1e:dd:fe:51:eb:74:3b:68:7c:1e:07:85:7c:a3:f7:
24:56:62:62:f8:2a:74:d6:67:ff:25:ef:11:61:93:
27:78:56:29:10:2b:9b:3d:c2:4b:fe:e0:58:8d:cb:
e4:a8:2c:e1:f1:7d:7a:11:9f:a8:16:f7:97:d2:18:
f6:0b:2f:50:71:a9:6e:0c:c8:90:7a:6f:93:7e:ff:
39:30:65:05:16:01:ae:1c:98:7a:8e:2c:02:d4:da:
d4:83:cd:64:66:5d:3c:fb:bd:fc:26:41:d9:1b:8b:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FF:00:81:28:73:C1:88:C4:18:C3:D2:BC:3B:77:71:D3:43:56:2F
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/SP8AgShzwYjEGMPSvDt3cdNDVi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.200.0/23
Signature Algorithm: sha256WithRSAEncryption
31:61:ca:93:4d:51:5d:6f:a4:a8:f4:e8:72:3e:fd:8d:d6:64:
96:16:1a:82:57:5b:c6:56:6f:7d:16:81:06:f4:86:5a:16:21:
d5:ad:34:8a:93:29:a4:7d:fe:73:21:60:3b:be:a8:ea:cf:63:
f2:44:a1:9e:04:e2:1b:72:40:00:02:7d:19:5f:ed:a0:bd:99:
57:34:93:71:31:02:39:33:c6:ce:27:99:16:e6:61:e2:6b:7a:
62:a4:92:bd:66:5b:70:0f:a7:46:51:84:90:2a:bf:ba:2a:d7:
04:29:99:0f:c7:89:01:06:1b:a0:4d:60:28:f0:ba:1f:ac:bc:
7e:e5:d3:71:11:00:7c:37:c1:18:11:70:44:df:58:83:32:c8:
20:0e:d2:e3:7b:97:59:5c:57:8c:3c:a8:48:8a:cc:d0:22:e8:
a8:62:3f:12:4f:0d:dc:59:94:1d:f4:15:16:73:3f:e7:6b:2a:
68:19:33:67:bc:6f:93:7c:26:43:a9:4e:28:11:5e:5a:97:34:
4b:22:21:00:9b:a5:0d:f5:23:25:4c:c7:3f:06:ad:df:e0:64:
98:16:db:ef:45:32:63:a6:55:cd:45:cf:3f:ef:a6:9b:12:eb:
ec:f9:37:79:ce:91:84:fa:3c:ec:f9:c4:4b:cf:aa:6f:d8:ec:
9c:a7:be:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:33:06 2024 by rpki-client on console-ams.rpki-client.org