Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/c2yZjaGRydCuu_Ly3Rs_03ydFco.roa
File: c2yZjaGRydCuu_Ly3Rs_03ydFco.roa (raw, json)
Hash identifier: BDagJSOnOIwpqXEe8vu8wUgejKjUnUyubEPoL1CnoiU=
Subject key identifier: 73:6C:99:8D:A1:91:C9:D0:AE:BB:F2:F2:DD:1B:3F:D3:7C:9D:15:CA
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 0190646EC217ED4934907F648A6CA376A6CF
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/c2yZjaGRydCuu_Ly3Rs_03ydFco.roa
Signing time: Sat 29 Jun 2024 14:38:18 +0000
ROA not before: Sat 29 Jun 2024 14:38:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5620
IP address blocks: 89.164.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:64:6e:c2:17:ed:49:34:90:7f:64:8a:6c:a3:76:a6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jun 29 14:38:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=736c998da191c9d0aebbf2f2dd1b3fd37c9d15ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3c:97:fd:b5:2c:e2:73:0f:6e:6a:04:78:24:
6a:f0:e1:88:b7:20:d4:03:87:c8:07:3b:22:8f:42:
45:c4:be:39:3a:a8:b1:fa:c0:ff:3c:0e:b1:6b:a4:
8c:4c:e3:e1:9d:17:03:9c:22:fc:3c:2d:22:c3:63:
cf:fa:8b:e6:33:53:15:5f:68:18:54:dd:b1:4a:00:
bc:46:96:96:0a:79:eb:92:7e:b4:2c:21:9e:6e:75:
db:55:ba:0a:7f:bf:f6:38:48:86:4c:8c:e9:e4:5a:
20:06:49:53:62:0c:81:d5:e8:da:ba:da:32:bb:1f:
2e:f8:13:1f:d6:1c:33:b3:88:f4:75:2b:aa:d1:b8:
cb:db:f8:12:2b:5e:40:bd:a7:f7:45:02:5c:ad:e1:
98:cc:6b:aa:27:0c:ee:3c:6c:38:66:30:c3:1a:a1:
a7:a6:07:bc:f0:e4:54:38:5a:59:f9:03:df:3f:fd:
3c:9a:e1:a1:78:b2:3b:d9:68:11:4d:f5:80:c5:3e:
1c:d6:7f:97:65:97:be:52:3c:ba:f2:30:c7:3c:81:
88:6f:57:88:63:51:da:cd:69:4f:ea:54:f1:d4:9d:
1f:68:96:8c:25:5c:be:fb:22:a4:32:7f:85:30:b7:
aa:18:93:2a:93:44:e1:3f:d7:28:a3:d7:75:78:b3:
e5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6C:99:8D:A1:91:C9:D0:AE:BB:F2:F2:DD:1B:3F:D3:7C:9D:15:CA
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/c2yZjaGRydCuu_Ly3Rs_03ydFco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.164.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:7c:04:e1:0e:a0:e8:22:41:c9:a8:4d:e9:0b:0b:e6:fa:bd:
f6:2d:bb:c3:ee:f8:99:f7:42:3d:9b:93:42:e3:30:c3:41:9d:
f9:01:1b:31:a1:4c:8f:55:1f:79:0c:12:1d:11:a1:02:9c:87:
b7:9e:6a:22:63:76:a1:a3:31:9f:9f:7c:3a:1b:bc:31:a7:54:
24:ef:70:d4:80:72:85:20:51:f7:28:96:40:96:bb:d1:ad:1f:
f1:f5:01:f8:7f:f3:e1:4e:99:87:d1:75:d3:9a:a1:b7:e5:bc:
8f:dc:3d:a7:7f:68:98:d8:df:1b:15:c5:0f:2e:e8:7c:33:c9:
01:7f:bd:3b:c9:8d:f6:03:84:8e:a1:e5:9d:b8:b9:6c:9d:44:
5f:30:e8:47:eb:4a:16:b7:72:fa:de:6f:84:f7:07:97:4d:8b:
73:77:f5:85:28:b2:c1:10:c9:4a:e9:2b:25:19:2e:07:14:01:
96:94:94:1c:b1:e4:9e:7d:c6:f7:fe:10:91:a0:99:58:c7:eb:
17:99:38:02:4d:61:16:43:f6:47:63:7a:f7:9f:85:81:99:a7:
c5:a2:9b:17:20:54:ed:c2:06:95:2b:3d:4d:9b:e1:35:9d:9c:
01:ab:84:be:b4:d4:0f:04:de:d8:f8:a6:cc:ae:df:ea:65:01:
87:51:98:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:23:40 2024 by rpki-client on console-ams.rpki-client.org