Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/iYZJVtJfNboySXl9dUlXNGBfr2w.roa
File: iYZJVtJfNboySXl9dUlXNGBfr2w.roa (raw, json)
Hash identifier: ku5e4PWIFUOYYNswsP6sw/bd2iVVMyIFqGnd2T2fEg4=
Subject key identifier: 89:86:49:56:D2:5F:35:BA:32:49:79:7D:75:49:57:34:60:5F:AF:6C
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 018CC64A74DD0F4A0459CFF7D4E575C385D3
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/iYZJVtJfNboySXl9dUlXNGBfr2w.roa
Signing time: Mon 01 Jan 2024 18:30:17 +0000
ROA not before: Mon 01 Jan 2024 18:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 109.71.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:74:dd:0f:4a:04:59:cf:f7:d4:e5:75:c3:85:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jan 1 18:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89864956d25f35ba3249797d75495734605faf6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:6e:1f:ce:55:58:d9:e1:31:06:c6:75:08:
6a:9e:bf:2f:9b:c9:27:ad:6a:59:d7:97:1c:7a:97:
6f:1d:a6:27:90:68:88:04:a4:92:74:f0:6c:b1:8a:
5d:0f:ee:a1:eb:b9:e2:2a:62:65:93:00:33:03:b1:
22:8b:d9:f8:49:11:af:8b:04:21:18:3e:b5:a4:b8:
1f:eb:b0:a3:c2:5d:0d:0f:39:96:f6:72:29:c5:f9:
87:65:5f:0a:27:85:38:4a:a9:f9:80:42:9d:27:c8:
27:c8:44:cd:01:45:88:ff:9c:5f:7d:c2:76:48:16:
3a:af:4d:82:7f:5f:8c:71:5a:a1:6b:61:f1:9c:21:
99:52:d2:5a:92:0b:74:9c:4f:7a:75:21:ff:98:61:
9a:29:dd:58:0e:23:83:00:4e:02:2f:a6:9f:14:56:
90:bc:4f:86:d7:84:3f:f9:56:38:da:9a:59:46:a6:
29:b1:de:65:35:57:00:7d:a0:ba:1f:67:f3:65:f6:
0c:f2:3f:61:12:95:c2:84:63:93:77:42:e8:e3:be:
fd:4b:4f:09:cc:06:0d:c9:02:a5:92:ab:13:9d:69:
58:fe:83:3a:2e:da:40:a9:f4:b9:90:7b:8a:04:2f:
9a:c8:b4:85:56:a4:d8:02:55:bc:72:15:fc:7a:72:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:86:49:56:D2:5F:35:BA:32:49:79:7D:75:49:57:34:60:5F:AF:6C
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/iYZJVtJfNboySXl9dUlXNGBfr2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.24.0/24
Signature Algorithm: sha256WithRSAEncryption
25:18:64:90:00:49:1c:38:20:20:bc:7b:0b:c0:88:5d:0c:68:
c4:9c:01:0a:f3:cd:69:54:a8:43:7b:fa:14:62:58:09:de:a9:
6d:bc:d3:de:8f:5d:a8:04:c2:ca:cf:d1:c0:9d:5d:1f:1f:c3:
89:57:27:67:b2:d7:0f:0c:af:a9:4c:4f:65:48:1c:f1:61:72:
45:33:bc:fa:35:04:14:a4:0f:69:0c:bb:c2:54:5e:80:de:88:
4b:01:6e:3a:a5:6b:e4:c4:5f:62:c5:4c:56:b4:b3:87:5a:53:
6b:a9:00:0c:ff:71:ac:7b:10:44:4d:33:98:a9:20:2a:df:db:
64:08:a0:f4:8a:45:6e:2d:96:1f:44:33:75:e8:62:f9:5f:d7:
ae:7c:99:f5:35:4d:f1:1f:4d:8f:f0:c3:c0:fe:d3:b2:e2:1e:
41:9c:8d:86:6a:60:f6:62:8d:71:f2:ef:d5:fc:e6:24:aa:e2:
f8:93:7e:c6:6f:c9:53:e2:6d:ba:e8:16:a8:31:82:a9:e2:0f:
1b:12:88:ff:da:53:f9:35:84:f2:b5:ee:d2:9e:c0:eb:b6:02:
59:b3:a2:e0:10:ad:5a:24:3d:48:cf:8d:d0:21:89:14:91:e0:
cf:d1:83:c0:ce:db:9e:f8:55:0b:27:d2:ce:4c:1b:69:55:d3:
76:77:12:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:51:16 2024 by rpki-client on console-ams.rpki-client.org