Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/lQp8vzyD3tlnteH0Ml_K1HIotCw.roa
File: lQp8vzyD3tlnteH0Ml_K1HIotCw.roa (raw, json)
Hash identifier: jTOZoLxhDCaHAlctp3iTBHsnnlEu2MCAbNNYrg6t7AE=
Subject key identifier: 95:0A:7C:BF:3C:83:DE:D9:67:B5:E1:F4:32:5F:CA:D4:72:28:B4:2C
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 0190646C040AFB5D2D163A5A609F34B4784A
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/lQp8vzyD3tlnteH0Ml_K1HIotCw.roa
Signing time: Sat 29 Jun 2024 14:35:18 +0000
ROA not before: Sat 29 Jun 2024 14:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42679
IP address blocks: 89.164.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:64:6c:04:0a:fb:5d:2d:16:3a:5a:60:9f:34:b4:78:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jun 29 14:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=950a7cbf3c83ded967b5e1f4325fcad47228b42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:b6:c8:6f:20:0e:e7:dc:f8:ee:5a:dc:65:
f0:78:50:a2:40:6f:34:7b:c7:1e:8f:77:96:ca:5b:
ba:19:37:56:20:a5:a8:5f:5a:d8:1e:11:ec:f6:e6:
93:eb:70:bc:e8:99:a0:1a:6f:6c:a7:f2:63:3d:a8:
ba:cb:f0:ba:8b:47:ed:08:63:3f:e8:58:3e:e3:13:
e8:11:29:b4:53:79:15:c9:15:f5:a9:f1:50:90:e8:
4a:80:bd:45:c9:a5:79:b7:e6:c9:36:d0:b5:db:88:
2b:e0:ca:32:68:ac:0d:5e:d5:ff:a4:61:31:bb:0b:
ee:67:56:27:46:b0:c8:c8:02:d6:fd:07:de:d6:e1:
d8:da:95:59:78:52:da:ce:a4:82:a5:b1:c6:6a:71:
42:86:e7:c4:5e:47:f7:dd:fb:1a:5d:26:f2:1f:e0:
a1:ed:40:1c:e1:e4:83:bf:ed:a4:1f:47:4c:07:26:
35:3f:71:e5:30:62:02:15:00:30:22:c8:a6:4f:37:
74:b8:c0:c4:7b:b6:fd:68:4e:1a:40:4d:a1:6c:b4:
46:7b:f6:cd:7f:4f:9b:55:a5:d7:95:56:91:5c:1b:
77:af:0b:5b:92:28:23:0d:d2:60:06:8f:1f:db:2d:
a2:00:be:22:05:cc:cb:a3:b4:64:c3:aa:8f:da:65:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0A:7C:BF:3C:83:DE:D9:67:B5:E1:F4:32:5F:CA:D4:72:28:B4:2C
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/lQp8vzyD3tlnteH0Ml_K1HIotCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.164.96.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a9:03:5a:14:ac:14:07:27:b3:62:ab:52:02:10:d3:e9:c1:
79:10:a1:5a:7f:51:fd:97:9d:ef:f5:df:83:94:fa:dd:5a:31:
15:0c:2f:1d:a7:98:61:01:90:ba:6f:cd:1c:94:39:c9:6d:b4:
d5:32:ed:3d:14:94:b7:f2:c9:5a:7f:72:1a:37:3e:18:f3:d9:
36:6e:31:80:bd:1e:92:4c:1a:fa:2d:47:50:2b:93:1d:10:5f:
8d:38:b0:de:ed:8b:e4:ec:f4:36:b7:99:cc:d9:fd:2b:9c:cd:
e4:29:f2:7a:88:81:b9:bc:01:2e:dd:3d:76:7a:3c:0a:6c:96:
0b:5b:59:da:87:4b:e3:d8:88:64:ac:69:f9:82:89:92:57:64:
31:c9:3c:0d:e1:7e:f0:c8:a7:0b:f3:33:26:8e:c4:ec:51:4b:
28:58:8f:c9:7a:2f:6e:17:29:ef:6a:84:5b:93:61:cf:e8:91:
49:b6:88:c1:e9:8a:4f:8c:50:96:53:7a:43:d7:29:12:e0:bb:
17:bb:81:c3:5b:5e:01:1c:cb:52:cc:c3:05:1a:47:8e:17:1c:
10:05:bc:f0:dc:7d:04:28:d4:1b:1b:48:32:ff:dd:96:a3:19:
da:42:95:13:22:57:c8:1d:de:71:1c:ac:64:55:41:2e:02:32:
f0:33:62:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:23:40 2024 by rpki-client on console-ams.rpki-client.org