Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/n02xAYYrqUFEJSDi0e8iAgESiEc.roa
File: n02xAYYrqUFEJSDi0e8iAgESiEc.roa (raw, json)
Hash identifier: N5vxx4B7wynPLbIUSdUo0oMu9dMm+OH6oH6j/yqcTFo=
Subject key identifier: 9F:4D:B1:01:86:2B:A9:41:44:25:20:E2:D1:EF:22:02:01:12:88:47
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 018CC2DAD1D55D85A9EF5D45D301BE06F01D
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/n02xAYYrqUFEJSDi0e8iAgESiEc.roa
Signing time: Mon 01 Jan 2024 02:29:29 +0000
ROA not before: Mon 01 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210150
IP address blocks: 152.89.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d1:d5:5d:85:a9:ef:5d:45:d3:01:be:06:f0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Jan 1 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f4db101862ba941442520e2d1ef220201128847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:77:6e:ad:b2:7d:e3:58:08:ff:9b:c2:82:
f3:ff:d6:3e:13:df:1b:49:ce:08:0f:59:c3:37:cb:
5a:64:71:b9:10:66:35:80:df:d3:99:e6:b3:e9:38:
43:5f:24:89:bd:fd:15:6e:2e:5c:24:29:20:d1:e7:
0c:09:7a:dc:f2:88:e6:17:30:80:2f:68:01:b3:7d:
ec:b6:1d:5c:02:74:8e:13:6d:98:74:8f:7d:fd:ab:
df:9f:80:cc:da:88:c7:8e:47:32:fb:c5:78:9e:c8:
41:17:f1:44:41:a8:1e:89:33:d7:16:92:53:e6:c5:
1d:ad:b8:30:d1:e0:0c:11:8c:ad:16:de:f5:bb:a2:
8e:21:54:2f:6b:1f:e7:ea:1a:94:33:80:e5:53:9f:
0c:62:a4:36:a3:95:55:7a:27:6b:87:10:d7:a5:94:
23:71:54:d4:66:be:a3:a3:94:4b:d7:e5:6b:a4:ff:
19:c6:e9:cc:82:f2:3e:e7:c3:9f:1a:4d:14:ec:c9:
11:8d:7e:ac:9b:63:87:85:42:84:3e:8b:38:87:d6:
98:4e:2e:95:e2:17:b0:69:dd:04:eb:ef:e7:de:25:
e6:61:ea:2a:30:d2:78:1b:9d:94:20:5e:05:ec:33:
30:dd:b4:21:cf:dc:2d:01:e6:ae:f8:ac:05:b3:75:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4D:B1:01:86:2B:A9:41:44:25:20:E2:D1:EF:22:02:01:12:88:47
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/n02xAYYrqUFEJSDi0e8iAgESiEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.184.0/22
Signature Algorithm: sha256WithRSAEncryption
23:ab:c0:86:dd:dc:30:65:5e:49:83:58:a7:38:f6:26:07:dd:
44:24:80:bc:ef:82:11:7a:84:62:3d:a1:06:88:0c:64:dc:5f:
b9:95:48:56:8b:1e:d9:72:30:f9:f3:7a:43:49:dc:98:67:a4:
55:d0:da:8f:40:65:42:9e:a7:55:34:2f:4d:a0:94:d4:2c:a4:
c9:60:95:cb:73:df:8e:e5:9b:0e:19:8f:1c:21:36:8e:fa:a3:
14:82:1b:43:ad:13:43:63:9c:1c:ef:f3:07:e4:9b:53:b6:1b:
ff:60:96:53:a7:17:df:07:50:ed:23:b0:8c:95:33:1a:95:f2:
0b:a0:9d:bf:71:e3:04:b4:33:d8:43:04:1f:14:51:af:05:fe:
f2:f6:26:ed:d5:19:5e:c8:1a:ee:a2:a2:6b:d8:89:a4:55:11:
ab:5e:92:39:d4:7d:17:a4:bf:52:41:7a:f8:f6:09:d6:c9:e7:
ee:b2:d2:3c:86:9d:c2:e7:bb:85:41:f6:80:19:be:90:c2:0e:
38:e5:84:51:24:ba:5a:d1:24:52:72:bb:d0:3a:f9:07:d6:c3:
51:4a:80:bc:da:1b:69:b7:1a:b8:13:4e:19:08:4f:26:53:7a:
ab:6f:02:63:51:6b:60:f4:d9:63:96:dd:41:63:c9:aa:54:7e:
d3:d3:d9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:08:29 2024 by rpki-client on console-ams.rpki-client.org