Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/haty20VXglqB-vYvsy0iZ35w8mg.roa
File: haty20VXglqB-vYvsy0iZ35w8mg.roa (raw, json)
Hash identifier: M/IVBBV6LGZY42Rv1MKh7PHX+3GFvIs5U2COapr6JXw=
Subject key identifier: 85:AB:72:DB:45:57:82:5A:81:FA:F6:2F:B3:2D:22:67:7E:70:F2:68
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019053CBF8497493F6422B49F4800397BAAA
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/haty20VXglqB-vYvsy0iZ35w8mg.roa
Signing time: Wed 26 Jun 2024 09:06:34 +0000
ROA not before: Wed 26 Jun 2024 09:06:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215817
IP address blocks: 89.249.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:cb:f8:49:74:93:f6:42:2b:49:f4:80:03:97:ba:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jun 26 09:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85ab72db4557825a81faf62fb32d22677e70f268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:44:b1:e7:b7:93:36:57:9c:c7:a1:69:cc:
cf:56:3a:b8:13:7b:d5:83:fc:8e:2c:02:c8:a0:48:
77:12:b6:55:18:0a:e5:93:df:55:cf:c3:d9:ff:9f:
dc:f0:5c:4d:c7:d2:0b:50:5f:bc:f5:da:62:c0:8c:
ac:17:b0:b8:13:51:f1:cc:25:0b:4b:4f:6a:ef:78:
16:a6:01:16:b0:b1:ee:1e:58:7e:11:4f:f4:95:24:
f8:bd:28:44:5e:74:91:c1:96:1c:f8:0a:83:f1:da:
0a:5a:b4:76:f0:71:86:e1:c9:d5:12:ab:c5:7b:d2:
1c:06:7c:1f:e7:f6:e8:53:41:d2:77:4b:d0:51:0c:
b0:a1:ff:58:49:a8:ba:5b:d8:4e:40:7b:87:29:f8:
a0:50:f5:17:3a:b4:13:26:51:20:11:ba:ff:3b:33:
cb:a2:10:bb:93:81:99:35:22:72:fa:0f:ab:50:08:
3a:65:b7:86:8c:15:fd:05:9f:5d:55:79:7c:ab:54:
19:8b:5e:a3:2c:4e:f5:37:f6:75:f4:44:76:cf:96:
cd:99:a6:3e:ff:e4:9b:4f:1d:56:db:08:d8:3f:ac:
cf:ac:44:a5:9a:ef:f4:a7:50:f9:9a:4b:b9:84:78:
0d:62:77:6a:15:d6:7e:c1:33:07:36:51:37:22:33:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AB:72:DB:45:57:82:5A:81:FA:F6:2F:B3:2D:22:67:7E:70:F2:68
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/haty20VXglqB-vYvsy0iZ35w8mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.206.0/24
Signature Algorithm: sha256WithRSAEncryption
de:07:7f:9c:bf:50:0f:c6:c8:d8:fa:2c:63:2e:d9:15:46:c5:
2c:5a:59:74:59:2c:f3:21:fe:4b:71:89:9a:5b:fc:81:ac:cf:
c6:92:77:e3:c9:4f:43:12:94:68:f5:c9:00:c5:9e:e1:9c:ea:
e3:4a:26:06:19:82:b6:eb:27:75:65:d8:2a:e6:1c:14:d0:ff:
88:eb:b3:f4:33:de:16:0e:8d:20:79:5a:5b:c4:b0:95:2b:7e:
f3:fb:92:73:04:4b:12:14:da:29:12:f0:eb:b5:54:dd:13:18:
ee:05:d3:02:a4:73:dc:3b:02:73:c8:35:24:94:d5:21:c7:c2:
e9:3a:0b:fe:89:92:77:f6:6f:a4:8f:f0:99:84:f4:55:08:87:
31:d1:47:41:e6:25:1e:d1:22:0f:d8:e4:51:f5:9b:68:0d:78:
9a:fc:5d:73:10:3e:25:49:e0:83:0f:82:e9:9a:92:34:ee:b0:
bc:77:1c:d0:30:e5:9e:16:99:54:5f:25:a5:0e:95:57:6b:be:
15:9c:63:be:bf:3d:84:20:84:a5:65:86:e2:b6:83:9d:b6:de:
d8:7e:99:45:2c:dd:ec:b7:89:0c:85:47:71:bd:83:3e:7c:e9:
c3:8e:46:76:d5:ea:40:3a:a1:49:be:d5:ba:7d:86:e1:ca:00:
67:03:bb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:10:20 2024 by rpki-client on console-fra.rpki-client.org