Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/89TID-tLtQCf-sFJAyNozjU211o.roa
File: 89TID-tLtQCf-sFJAyNozjU211o.roa (raw, json)
Hash identifier: ZgJIfp0V6uNun9ZbhJeQRkJ6iirxMXrMu7LoKmoR44Q=
Subject key identifier: F3:D4:C8:0F:EB:4B:B5:00:9F:FA:C1:49:03:23:68:CE:35:36:D7:5A
Certificate issuer: /CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
Certificate serial: 018CC64B41CDA891E38005599BBB49EFF2C4
Authority key identifier: F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/89TID-tLtQCf-sFJAyNozjU211o.roa
Signing time: Mon 01 Jan 2024 18:31:09 +0000
ROA not before: Mon 01 Jan 2024 18:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50585
IP address blocks: 185.53.84.0/22 maxlen: 22
193.105.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:41:cd:a8:91:e3:80:05:59:9b:bb:49:ef:f2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
Validity
Not Before: Jan 1 18:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3d4c80feb4bb5009ffac149032368ce3536d75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:61:f6:33:14:cf:69:1b:29:a1:42:b3:de:b6:
65:5f:f2:5a:23:6a:2d:9c:60:86:9f:94:a9:f4:82:
3a:0c:1f:29:ca:0b:f1:a0:e5:63:3d:e1:7b:bc:a9:
e0:72:ec:2a:a3:0e:74:2b:c4:6d:2e:6d:3b:31:1c:
dc:fb:a7:76:1b:86:dd:b9:92:37:ff:6f:94:0a:78:
a4:25:33:42:34:31:a7:91:48:74:75:99:83:48:8d:
9d:1f:d9:12:0f:69:38:3c:eb:e3:ba:e4:ed:d7:5b:
5e:66:1c:24:f4:a5:ea:2d:bb:ef:dd:e5:b0:15:89:
7f:7b:a6:fd:6b:8d:b6:09:fc:98:3a:fd:65:28:6e:
c9:96:e0:25:d9:9b:38:da:97:e1:42:31:ca:00:63:
a3:fc:ad:58:69:0e:b0:8d:a4:76:38:3d:d9:4c:e1:
1a:d6:70:ce:84:17:4a:52:fa:68:79:57:45:3d:5d:
8c:21:a2:3b:6e:b4:f0:bd:63:8a:d9:10:4e:f4:6e:
1a:45:02:4d:10:d5:8e:c6:3d:7e:5b:8f:a6:e4:a7:
67:bb:7c:cb:2d:6a:3a:8d:29:99:9c:c6:e4:24:50:
82:51:7a:d7:7f:12:0d:b6:d1:0c:a7:88:3a:9c:5b:
58:dd:03:8d:72:4d:2a:35:9d:8d:c3:10:a0:19:ea:
2e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D4:C8:0F:EB:4B:B5:00:9F:FA:C1:49:03:23:68:CE:35:36:D7:5A
X509v3 Authority Key Identifier:
keyid:F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/89TID-tLtQCf-sFJAyNozjU211o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.84.0/22
193.105.97.0/24
Signature Algorithm: sha256WithRSAEncryption
70:aa:9a:72:df:c1:af:11:16:fb:8f:19:4e:3b:66:db:f5:41:
26:2a:d1:d9:0c:87:c8:bb:f6:f6:58:ad:0c:ec:45:a3:03:74:
a6:8a:7e:0d:f6:de:59:12:c9:04:f3:b5:63:17:4b:18:c7:83:
ff:22:d7:c2:7f:21:fc:5a:70:c9:93:f6:d7:97:14:26:52:b1:
2a:6a:c1:94:27:bf:22:f3:1f:b1:a0:ee:42:fa:93:33:47:c3:
ba:29:e8:0e:43:ef:14:b6:ac:47:94:02:fb:2c:8c:9d:a6:72:
3b:8e:77:6e:d7:82:1c:91:6c:da:87:0f:e5:30:39:ce:b9:9e:
d9:cb:2e:0d:10:e9:27:e1:ca:c7:72:b4:a4:bf:d3:0d:ea:52:
03:3e:06:38:4a:4d:b3:a9:ed:23:13:05:ea:c4:72:48:12:dd:
7c:5c:25:5c:dd:49:e2:b6:55:c6:b1:e0:01:27:44:f8:17:cc:
88:db:74:bd:87:a0:dd:0b:12:82:16:70:fe:11:65:4e:e4:8a:
1e:1d:3a:6c:5e:33:c2:0d:f7:fb:db:2b:dc:c0:f2:87:d9:0d:
56:36:31:dd:93:31:be:bb:42:bd:88:3a:9e:df:02:14:b6:ad:
32:cd:7f:d3:5b:d6:54:7e:95:6b:7b:91:a8:19:57:41:4c:73:
fa:bf:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:24:48 2024 by rpki-client on console-fra.rpki-client.org