Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/nCDkBjKFEJ9aAiYG7siuCtuv9LU.roa
File: nCDkBjKFEJ9aAiYG7siuCtuv9LU.roa (raw, json)
Hash identifier: GZKPCfNnC0PriEW/EvYje0f17xcskBhiyNqwLxWvIIE=
Subject key identifier: 9C:20:E4:06:32:85:10:9F:5A:02:26:06:EE:C8:AE:0A:DB:AF:F4:B5
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 018CC94CA10150DEDF687D78F33F06B5D6D7
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/nCDkBjKFEJ9aAiYG7siuCtuv9LU.roa
Signing time: Tue 02 Jan 2024 08:31:31 +0000
ROA not before: Tue 02 Jan 2024 08:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42487
IP address blocks: 89.28.144.0/21 maxlen: 21
2a01:58c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:a1:01:50:de:df:68:7d:78:f3:3f:06:b5:d6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Jan 2 08:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c20e4063285109f5a022606eec8ae0adbaff4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:f8:23:e8:65:ee:7b:ac:36:24:2d:af:f6:
37:a1:20:0b:96:22:95:03:6a:45:fd:1e:a7:cf:03:
8f:53:59:da:d6:22:fa:b7:05:04:df:42:5d:09:cb:
13:30:31:90:3c:40:33:bc:95:4b:31:90:49:0e:9b:
27:b2:e1:19:cd:5a:66:be:2d:fa:4d:3a:8a:fc:cf:
3e:fb:65:08:ff:c2:bc:50:f7:69:c1:f0:58:22:ad:
89:6b:06:5e:67:fe:a5:06:d7:6d:07:da:99:7f:29:
0a:3c:97:16:20:d3:10:35:ad:81:d1:32:ab:e2:a0:
bc:9f:11:ff:9e:6f:7d:ac:9f:2d:4a:e9:30:78:e7:
8a:33:97:65:52:6b:99:b9:cf:c2:34:29:59:7a:1b:
12:aa:94:d6:ed:eb:2e:ec:ab:c2:6f:68:4e:a2:53:
60:4b:0e:00:fe:62:a0:95:d2:b8:10:b5:9e:ed:56:
85:ed:64:e9:49:83:ce:6f:f0:c8:97:2a:a1:c1:c2:
71:fc:5f:2c:06:96:38:bf:49:05:f4:05:ec:17:78:
cf:ff:c9:24:c8:6f:df:2e:4c:2f:f6:72:97:3e:b0:
1e:7a:f2:5b:0e:43:6d:dd:52:ba:1d:5e:64:d4:97:
e3:d2:a3:2a:ef:5e:e2:fc:4d:e8:0d:17:3d:17:1b:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:20:E4:06:32:85:10:9F:5A:02:26:06:EE:C8:AE:0A:DB:AF:F4:B5
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/nCDkBjKFEJ9aAiYG7siuCtuv9LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.144.0/21
IPv6:
2a01:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
81:d2:68:80:79:b1:82:6a:5f:e4:f7:57:ab:f1:b0:3b:de:e0:
6f:76:a2:da:f5:3a:83:69:54:e6:6e:94:c2:52:aa:79:a7:4e:
11:1d:b5:8b:01:99:26:83:a7:94:4b:ce:b4:71:da:bf:07:92:
4a:06:34:11:9c:29:3e:47:a3:d0:e5:3b:ac:b9:9c:79:ff:29:
94:b0:53:17:1d:dd:47:52:9a:0b:21:8e:4f:37:86:e1:07:d9:
4f:4d:17:9e:3d:42:6f:0f:55:14:07:68:17:49:53:a6:7f:bc:
a2:58:2f:fc:bc:32:23:cc:88:20:8a:b1:ab:0d:d5:94:12:24:
b0:e4:85:83:fc:36:a8:e7:5a:1b:4d:77:fb:e7:95:6b:fa:80:
54:66:51:c3:1e:f8:6e:cd:f5:3f:a6:32:e7:27:6f:6a:21:21:
25:f5:76:f0:e2:b4:8b:46:4b:1a:da:85:0a:1d:eb:76:78:8f:
83:73:51:95:0c:93:8a:59:d6:0f:31:46:60:ae:8a:10:9e:f0:
80:6e:72:12:ae:20:51:9a:79:69:0f:61:a6:64:27:43:c8:a3:
38:9d:5a:19:a4:e3:95:dd:9c:61:67:f0:9b:f7:86:f1:10:c4:
e1:73:26:5c:8a:1f:ae:34:c4:c7:8b:2b:c9:00:53:18:ac:f9:
06:fc:43:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:44:35 2024 by rpki-client on console-fra.rpki-client.org