Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/gRF3Qy_fRVwKNY_dUyNvE_45Hag.roa
File: gRF3Qy_fRVwKNY_dUyNvE_45Hag.roa (raw, json)
Hash identifier: V/tWZ2cXGc9aqZYWdxrn3jD/Zj6lB/ZM0RclzRglyks=
Subject key identifier: 81:11:77:43:2F:DF:45:5C:0A:35:8F:DD:53:23:6F:13:FE:39:1D:A8
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018CC94DAF6EDA893A9A22288D4611AFB652
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/gRF3Qy_fRVwKNY_dUyNvE_45Hag.roa
Signing time: Tue 02 Jan 2024 08:32:40 +0000
ROA not before: Tue 02 Jan 2024 08:32:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197483
IP address blocks: 89.40.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:af:6e:da:89:3a:9a:22:28:8d:46:11:af:b6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 08:32:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=811177432fdf455c0a358fdd53236f13fe391da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:da:43:ee:f0:52:f8:7f:eb:42:0d:e6:eb:
1e:a7:66:1b:b2:e4:e3:08:c1:c0:a3:6d:1e:e4:80:
74:41:0d:91:8f:7d:44:60:76:50:8a:c2:a9:c3:3c:
07:11:51:55:dc:94:e7:38:51:24:a6:e2:fc:7c:83:
fb:26:6e:58:6a:5f:86:f0:ff:b0:16:86:db:85:68:
16:2c:0a:47:6f:99:c2:74:df:2d:f7:2c:15:fd:87:
06:16:0f:c4:15:1b:f0:e0:2b:3e:19:db:bf:8a:4a:
c7:5e:fa:63:28:89:56:31:85:26:b7:1d:c2:ae:3d:
f3:2f:88:09:2e:f5:d3:71:8e:32:b7:7c:21:f2:69:
48:61:89:e5:f6:65:99:04:26:41:c3:ad:0d:49:35:
83:da:0b:35:b8:ca:5a:fd:e2:d4:a2:45:cd:04:25:
1a:51:61:3a:b4:b6:df:ea:2e:8c:40:07:49:fd:82:
a5:55:82:dd:91:2e:18:29:08:7c:7e:f7:08:40:2d:
48:bd:25:51:3a:98:62:13:16:6a:60:8c:b0:61:6e:
cc:6a:64:48:a4:6e:1f:c2:ff:64:2a:ee:46:9c:01:
76:ba:41:c3:97:0d:6d:84:bf:88:bb:3e:f3:15:49:
72:db:7a:86:b9:61:09:bb:a5:92:b0:43:db:a3:05:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:11:77:43:2F:DF:45:5C:0A:35:8F:DD:53:23:6F:13:FE:39:1D:A8
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/gRF3Qy_fRVwKNY_dUyNvE_45Hag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.80.0/24
Signature Algorithm: sha256WithRSAEncryption
63:c6:c6:1e:9e:bf:04:56:9a:40:ad:0e:b5:e5:6f:9d:cc:e8:
48:c8:80:73:25:a7:b7:9e:2c:73:e2:4f:f8:99:c0:14:f9:b6:
20:c1:41:51:ee:73:3a:8b:dc:49:95:6c:b7:b5:06:d0:e1:11:
2c:2a:90:35:99:8c:b1:3b:d7:92:a7:9d:50:99:b6:1a:15:b9:
4a:d5:be:88:c9:e1:92:90:92:92:62:54:64:b4:d6:9e:cb:a6:
17:9e:01:5b:22:8e:7a:60:3c:e3:48:a5:13:dd:b1:f7:44:b0:
18:fe:2c:4f:62:e2:1a:48:c9:d5:10:27:e9:7d:fd:11:84:5d:
73:5a:71:f4:64:ef:a0:e5:67:dd:ff:4c:4f:c7:e9:a4:58:d2:
4e:dc:93:c1:14:f8:93:8e:21:9d:ca:9b:17:1a:78:1f:fa:28:
e5:40:76:5f:c8:0e:20:cb:1f:7a:51:12:4d:77:0a:79:51:9e:
95:d7:fd:6e:c0:25:c2:b1:f2:29:94:82:b3:ce:b5:07:68:91:
7c:78:9a:81:cd:75:fd:06:09:c9:f1:ea:e5:15:c8:90:23:80:
c0:47:fc:07:6c:ce:ae:92:18:d9:2f:06:af:13:47:59:f3:b2:
10:ce:0e:33:5c:44:29:ab:10:31:e4:c2:e5:54:c2:b4:fa:b6:
3e:88:b2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 02:54:57 2024 by rpki-client on console-fra.rpki-client.org