Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/OQnbPsq8TOAcej9Kd_TXjZyaaH4.roa
File: OQnbPsq8TOAcej9Kd_TXjZyaaH4.roa (raw, json)
Hash identifier: KNs2DnZi1hAa2v6UE3K0Y5J7BN+wC/4YlXHqvtyaSAo=
Subject key identifier: 39:09:DB:3E:CA:BC:4C:E0:1C:7A:3F:4A:77:F4:D7:8D:9C:9A:68:7E
Certificate issuer: /CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Certificate serial: 018CC56E0FD732DCD2D7C95FE92A261C64B7
Authority key identifier: 86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/OQnbPsq8TOAcej9Kd_TXjZyaaH4.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39033
IP address blocks: 89.104.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0f:d7:32:dc:d2:d7:c9:5f:e9:2a:26:1c:64:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3909db3ecabc4ce01c7a3f4a77f4d78d9c9a687e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:de:60:95:de:01:ac:13:de:64:59:26:4a:
1b:2a:44:dd:6e:09:36:b9:c1:d8:06:61:b1:a7:c8:
3f:38:a3:8c:f8:b5:e7:c6:bf:72:40:34:70:9a:6e:
80:71:4f:2d:bd:bb:cf:0b:6f:8b:f5:fe:ba:63:1a:
61:71:ed:1a:65:f9:f2:b4:e1:38:d1:ff:dd:7b:17:
8d:2a:0d:bc:49:f6:7a:00:d3:af:79:95:b1:d7:01:
f6:58:14:85:72:d6:dc:72:8b:16:18:fc:8e:f1:04:
e4:8c:d5:bd:0f:0d:ec:f3:70:0b:9d:46:e2:31:8b:
3d:9a:31:4e:02:7e:7e:c6:9c:8c:0e:b3:32:5a:0a:
08:61:ed:5b:34:23:94:8b:86:9e:ff:57:99:e8:74:
96:17:f0:ca:96:1c:7f:68:a4:56:33:fc:af:ab:19:
0f:be:3e:a5:42:70:05:25:46:12:4d:40:29:85:52:
f7:e0:53:b2:ef:dd:c5:41:59:e3:60:63:23:e7:77:
e6:0c:6b:61:81:f3:7f:a4:58:db:5a:7e:5d:32:26:
a3:9d:31:1c:5f:9d:4f:35:f5:54:e8:d7:a5:58:46:
8e:59:75:23:2c:2e:2a:f4:19:8f:62:27:cb:91:e4:
8d:7d:f5:10:76:ae:80:12:32:d2:f1:34:e3:7e:48:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:09:DB:3E:CA:BC:4C:E0:1C:7A:3F:4A:77:F4:D7:8D:9C:9A:68:7E
X509v3 Authority Key Identifier:
keyid:86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/OQnbPsq8TOAcej9Kd_TXjZyaaH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.104.114.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:cf:4d:72:9b:3d:9a:3c:2a:b7:54:02:da:7e:e2:52:f5:52:
26:9c:c0:22:91:30:a8:d6:62:1c:d7:09:98:ee:50:c3:19:ac:
fc:d0:f2:42:81:8f:5b:52:b7:e0:ac:f9:3e:54:f8:da:ea:cd:
ea:a4:bd:dc:30:e3:ea:4e:27:22:fd:8f:5b:06:da:9c:e1:eb:
8a:71:11:e3:80:47:2a:a6:3c:3a:19:b2:23:b5:9c:12:3e:fc:
9e:d6:1c:1f:35:60:e6:6a:ec:a7:c2:69:0d:47:35:9e:d0:bb:
6f:0c:de:cf:fc:95:0d:9d:9f:f8:98:94:6c:75:c9:57:62:fd:
1f:9d:d4:7f:a7:74:6a:8f:22:bf:f9:51:2f:8d:df:26:d9:79:
a2:69:f5:62:10:da:35:9a:97:f4:ae:78:61:c9:4b:03:4a:eb:
02:a7:68:69:96:3a:81:0b:be:9c:00:4d:15:e9:7d:20:86:af:
e4:b5:68:92:39:2c:d8:bc:98:e5:dc:19:38:14:c0:23:cc:30:
f0:3c:ed:c8:7b:1e:0a:18:58:da:db:51:6b:ae:1f:e5:9d:af:
2f:7a:27:1c:03:56:92:8b:e2:9c:ac:ce:44:a9:16:c8:35:e1:
35:a4:53:fe:56:7b:09:5c:78:5d:7c:e7:b5:10:11:a6:94:9a:
41:84:0f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 09:02:19 2024 by rpki-client on console-ams.rpki-client.org