Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/gH-AnmUu2J0sSjm7MCMsyYQ9jik.roa
File: gH-AnmUu2J0sSjm7MCMsyYQ9jik.roa (raw, json)
Hash identifier: uSkw+UyplBeItOTuy1YkdqtiSzfnh7uK0J/Fq9IderQ=
Subject key identifier: 80:7F:80:9E:65:2E:D8:9D:2C:4A:39:BB:30:23:2C:C9:84:3D:8E:29
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018E39DF158108088CDA536117992A16FB23
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/gH-AnmUu2J0sSjm7MCMsyYQ9jik.roa
Signing time: Wed 13 Mar 2024 22:11:45 +0000
ROA not before: Wed 13 Mar 2024 22:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 89.46.8.0/24 maxlen: 24
91.243.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:39:df:15:81:08:08:8c:da:53:61:17:99:2a:16:fb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Mar 13 22:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=807f809e652ed89d2c4a39bb30232cc9843d8e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:79:c5:b8:c3:ae:1a:83:b1:46:c6:5e:dd:c9:
98:e2:40:83:25:a3:be:48:5f:cf:a0:f7:9c:fb:d5:
78:a6:1c:47:5d:02:fa:5d:e9:0d:c9:4d:90:c1:e4:
0f:3f:3f:2c:1a:32:3a:25:dd:d5:eb:35:07:b9:ce:
3e:f8:f7:ef:7a:d6:50:02:61:bb:28:b0:eb:4a:80:
98:0d:77:83:e2:19:1b:61:82:a0:c5:22:81:17:e3:
4e:bb:af:f8:2c:52:47:01:ea:61:b4:3c:c0:b2:03:
20:dd:45:be:c1:9e:18:2c:06:0e:a8:17:77:5b:35:
5f:03:a3:3e:cf:5d:b9:c7:62:0b:10:9a:7b:4d:cf:
ab:62:86:6d:75:21:ae:23:ba:6e:dd:b9:9c:87:98:
cd:c5:be:11:af:08:59:e6:d5:43:e1:a7:2a:e7:8b:
a5:bb:17:14:bf:b1:b2:e2:1b:1c:6b:a4:29:d5:8a:
74:de:a2:8e:84:57:3b:20:c7:75:0d:6a:8b:16:dc:
14:21:fd:ab:3d:9c:cd:9d:31:87:45:b9:41:aa:ef:
c6:10:b3:da:a2:67:08:b7:b6:3d:f7:41:d8:aa:8c:
03:c4:30:b7:c9:dd:8c:87:8c:b3:27:55:af:7a:d3:
3b:74:93:36:09:7e:69:be:5e:35:d9:2e:f2:8d:44:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7F:80:9E:65:2E:D8:9D:2C:4A:39:BB:30:23:2C:C9:84:3D:8E:29
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/gH-AnmUu2J0sSjm7MCMsyYQ9jik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.8.0/24
91.243.176.0/24
Signature Algorithm: sha256WithRSAEncryption
11:2a:0e:57:5d:43:cd:45:00:c5:32:0a:69:ed:c3:a0:04:87:
77:c8:92:a3:19:61:5b:a9:f5:5c:80:c2:10:e2:93:10:3d:3e:
68:a4:16:7e:a3:c0:1e:07:46:ed:b7:c4:7c:4f:a5:9e:94:4c:
23:d5:2c:45:5e:3e:e5:e3:49:e5:14:60:20:c2:f8:2a:98:3c:
c4:3c:2f:49:af:0f:bd:ca:e7:bd:7b:4a:d8:0d:54:26:85:f6:
ad:e4:c1:52:73:fc:a7:f2:a6:0a:ba:20:a5:69:90:79:a4:11:
6c:03:28:3b:29:b1:19:2a:89:70:0b:f6:7f:93:33:9e:51:dc:
f6:54:90:c3:f9:55:67:df:1a:e4:8d:35:05:cc:24:1e:0e:66:
c6:d9:5d:74:d5:36:06:12:7c:a1:71:94:cc:35:29:0e:11:45:
76:9a:66:dd:80:9a:de:ea:e0:87:c6:bc:b7:1b:7c:1d:58:9c:
13:cb:a9:15:85:06:be:9c:1e:15:f4:0e:46:78:89:76:2d:35:
9a:9a:8e:0a:58:0e:25:d4:90:6a:f4:ac:b7:e8:e3:7b:74:59:
16:62:d3:33:9a:b6:bf:01:fa:44:e2:38:fa:b1:cf:c8:f5:44:
38:d0:a7:42:a7:ec:2c:d2:85:e9:29:77:78:03:08:a4:f4:3b:
46:be:62:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:14:07 2024 by rpki-client on console-ams.rpki-client.org