Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/fqVcFdvNoZWfigva1IZ961k0P94.roa
File: fqVcFdvNoZWfigva1IZ961k0P94.roa (raw, json)
Hash identifier: G1kAXZTWJav50a3nfpFfBE3oAVkDxxD5xSWWc4RB9JA=
Subject key identifier: 7E:A5:5C:15:DB:CD:A1:95:9F:8A:0B:DA:D4:86:7D:EB:59:34:3F:DE
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 01914D6A541B80FE15AB008CF65B704BF6B1
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/fqVcFdvNoZWfigva1IZ961k0P94.roa
Signing time: Tue 13 Aug 2024 20:24:59 +0000
ROA not before: Tue 13 Aug 2024 20:24:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200000
IP address blocks: 80.89.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4d:6a:54:1b:80:fe:15:ab:00:8c:f6:5b:70:4b:f6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Aug 13 20:24:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ea55c15dbcda1959f8a0bdad4867deb59343fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:23:4c:0f:7d:74:5b:49:14:49:4a:28:14:
f6:25:77:55:8f:f6:53:6a:9f:64:33:1d:a7:8b:03:
28:f5:86:42:47:55:92:04:1c:cd:78:c9:a4:94:37:
bb:d7:da:3a:93:83:c8:4a:70:76:b1:d9:8f:b5:14:
92:2e:92:38:1b:94:f1:2f:fd:06:02:f8:5c:c2:49:
08:5f:9a:f3:e4:22:2d:39:29:1e:79:28:e3:1b:a9:
99:6b:49:2a:60:84:91:b1:58:84:94:13:6f:c3:a9:
de:78:aa:a1:a9:9f:0a:75:7b:fb:59:78:52:09:ed:
b0:c1:47:87:0a:de:75:a4:1b:8f:d7:76:86:e7:e5:
53:6e:e9:af:4c:96:2a:dc:fd:bd:ec:c7:a8:eb:65:
1e:e3:54:b7:74:44:ba:5c:59:7a:5d:44:e6:9d:49:
cf:70:fa:95:68:a1:3d:7c:c3:56:65:02:e3:d1:68:
61:82:18:9a:fd:34:89:49:ad:3b:c0:a3:6d:0c:39:
f1:1d:3f:45:76:4a:cd:9f:53:b5:96:bd:a2:09:50:
80:3e:ff:58:d1:a5:6b:a5:08:8e:2d:9a:b1:d6:47:
8c:35:93:f2:94:c0:21:c2:eb:a4:19:fe:6e:92:3c:
ea:c7:cf:84:47:5d:f9:23:e4:63:5c:c3:45:36:07:
ec:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A5:5C:15:DB:CD:A1:95:9F:8A:0B:DA:D4:86:7D:EB:59:34:3F:DE
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/fqVcFdvNoZWfigva1IZ961k0P94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.240.0/20
Signature Algorithm: sha256WithRSAEncryption
81:0d:85:4f:af:58:70:46:a2:2e:50:04:f1:ff:3c:2b:0c:99:
c0:10:e0:06:ce:9e:8e:ff:85:1e:93:17:5c:f8:c9:6a:9b:b0:
52:90:4e:0f:92:50:91:e2:92:b9:1a:8c:9b:36:dc:21:42:d3:
5b:60:a1:da:24:d7:db:ff:2e:e4:be:c0:e1:42:2b:5b:d7:71:
71:38:a1:80:88:18:91:81:32:44:ec:78:ac:a7:ea:12:51:09:
6e:a3:61:ac:14:c0:7f:36:d1:ae:a1:07:9c:11:4e:98:8e:8a:
f1:59:19:b4:71:61:15:01:48:4e:25:e7:4b:4d:ba:c1:9c:fa:
10:25:09:60:d2:1e:e9:f1:bd:94:fc:c8:6c:16:37:b3:55:f3:
98:b4:5a:de:71:e1:86:cf:3c:ce:ec:8e:62:f2:70:bc:b1:a0:
f0:c0:c5:15:00:58:6e:46:b3:f1:42:62:b3:a0:33:ab:6c:82:
ec:80:ae:4f:33:be:2d:6c:20:a8:0e:97:d5:0b:8c:dd:94:b3:
3d:f3:b8:c0:02:43:8a:89:5f:42:40:ed:42:f7:cd:e5:48:4f:
a7:1e:02:96:03:5f:85:b6:90:d3:41:6d:02:43:d3:7c:58:66:
f1:cc:87:24:e9:44:d4:f1:fd:c4:e4:5f:55:16:76:aa:e9:bd:
b7:96:bf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:21:51 2024 by rpki-client on console-ams.rpki-client.org