Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/8Mq_EPcpfqC3iah3BE4HJiKP74Q.roa
File: 8Mq_EPcpfqC3iah3BE4HJiKP74Q.roa (raw, json)
Hash identifier: x8vx3nkSinNAVj5rF1RdX5QVNZwXzwtalAJjFCRYAlI=
Subject key identifier: F0:CA:BF:10:F7:29:7E:A0:B7:89:A8:77:04:4E:07:26:22:8F:EF:84
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018E28378213E0917D14321F38A3CAEA9193
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/8Mq_EPcpfqC3iah3BE4HJiKP74Q.roa
Signing time: Sun 10 Mar 2024 11:55:10 +0000
ROA not before: Sun 10 Mar 2024 11:55:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 89.249.192.0/21 maxlen: 21
185.21.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:28:37:82:13:e0:91:7d:14:32:1f:38:a3:ca:ea:91:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Mar 10 11:55:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0cabf10f7297ea0b789a877044e0726228fef84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:c8:b3:3f:81:25:fc:e8:e1:be:50:e2:e2:
d8:17:3a:d4:1e:1e:4d:a8:9e:b7:75:6a:6e:55:c8:
2b:61:c9:8c:26:bf:a6:1c:4b:af:62:f7:6f:a5:05:
f0:b4:e3:36:ac:9c:59:27:54:c4:2d:80:d7:a9:8c:
d6:9f:fa:e0:2d:ad:75:41:5c:2e:11:35:d0:79:6d:
c5:af:84:31:76:14:d8:32:f7:83:c1:12:63:66:1d:
14:cc:2f:10:be:48:e7:34:e7:15:9d:76:20:07:32:
98:73:6b:60:3a:b7:ca:7a:43:4c:c5:b0:f6:ca:6c:
a9:a0:0a:4c:09:ea:db:e4:66:2c:ca:cb:6e:a4:32:
02:c6:56:59:4b:f0:89:d7:ad:07:05:e1:b0:5a:f2:
39:1c:da:88:82:95:a1:46:be:60:12:8b:30:51:9e:
14:f6:6d:d5:be:10:69:de:55:6c:22:5f:58:fc:05:
f3:0c:4e:38:14:ba:bc:ab:b2:6f:6e:ee:b1:02:92:
d7:74:ba:1c:07:e8:36:07:9d:07:70:cf:6f:aa:2c:
d0:bc:a0:69:9f:47:d6:f0:84:b4:91:9b:d0:ac:4d:
66:21:43:e6:8f:82:36:4f:71:79:1c:53:5b:f4:a6:
fa:f9:01:80:87:e5:50:fb:b6:48:91:bf:bd:03:ce:
b4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CA:BF:10:F7:29:7E:A0:B7:89:A8:77:04:4E:07:26:22:8F:EF:84
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/8Mq_EPcpfqC3iah3BE4HJiKP74Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0/21
185.21.253.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:72:d9:4e:cb:8e:2f:86:15:bf:4c:8c:f4:93:58:15:42:16:
46:14:90:1d:92:00:e8:1e:a7:c8:23:9d:18:a0:cf:17:bd:60:
9e:c7:db:b4:12:d4:0e:a9:da:4d:ed:24:ef:d9:45:4e:a2:c4:
60:60:fe:87:f4:17:5b:68:ee:fc:f2:34:0b:70:a0:fb:9c:95:
b4:39:8a:66:17:86:17:10:0d:c5:19:26:f7:5b:a9:fb:ba:2c:
29:fd:9b:99:52:14:09:5b:e0:62:d1:2a:71:9a:cb:7d:26:c2:
07:e3:05:2d:7a:32:4b:0e:06:c2:c6:37:bc:8c:e8:38:2b:81:
a6:17:c2:d1:7f:19:5a:80:ba:ac:72:64:b3:94:38:71:93:a3:
d3:ba:81:1a:bd:41:56:2f:97:f0:b8:bf:7d:c2:c8:ea:ae:d0:
b3:7f:fb:6f:40:1a:03:0e:d3:37:da:5f:5a:cf:d5:f0:ea:53:
20:b4:97:85:76:17:9a:0a:1e:96:90:8f:10:51:0b:9a:52:d0:
88:ea:e2:f2:4b:8f:f7:b7:b6:70:a5:5a:e7:86:02:99:86:09:
55:bd:a1:bd:30:de:05:f8:c2:96:59:dc:5c:77:ae:87:b5:14:
40:b1:65:94:be:cd:0e:61:55:f1:05:d6:5a:74:77:c7:10:97:
e8:48:37:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:45:23 2024 by rpki-client on console-ams.rpki-client.org