Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3cJjKgfp1dDSB7zrb3rjDp84vuU.roa
File: 3cJjKgfp1dDSB7zrb3rjDp84vuU.roa (raw, json)
Hash identifier: oD7TmCvbSyrgBWvmNbHUyD1urH7bSL9qmeEO7OS6CMQ=
Subject key identifier: DD:C2:63:2A:07:E9:D5:D0:D2:07:BC:EB:6F:7A:E3:0E:9F:38:BE:E5
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0191EBF37E0B43C7758C8B593619A235A7D8
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3cJjKgfp1dDSB7zrb3rjDp84vuU.roa
Signing time: Fri 13 Sep 2024 15:14:48 +0000
ROA not before: Fri 13 Sep 2024 15:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 272403
IP address blocks: 89.42.71.0/24 maxlen: 24
89.45.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Oct 2024 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:eb:f3:7e:0b:43:c7:75:8c:8b:59:36:19:a2:35:a7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 13 15:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddc2632a07e9d5d0d207bceb6f7ae30e9f38bee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:50:c3:f6:6b:44:f5:a1:96:50:f7:4c:2d:
d2:67:b0:8e:65:35:51:b7:67:19:b2:69:bc:1a:87:
6d:be:d2:56:78:85:6e:e9:4c:f6:3d:4c:1e:47:d7:
0f:0f:99:90:f5:4a:73:7d:6e:4b:9c:bf:69:9b:7f:
75:33:8f:06:c0:b2:67:68:3c:cf:c9:14:31:3f:89:
0e:9f:48:77:50:68:3a:a2:06:ad:e1:4c:96:44:df:
95:19:c6:72:80:3a:ad:2e:5f:2e:18:72:0b:1a:b2:
35:2a:77:61:ca:cd:d0:cb:d3:70:bd:e5:c6:e2:8c:
b3:c8:37:ea:ae:39:6a:2f:a7:3a:77:5e:e6:a8:99:
38:d5:cf:31:71:1c:07:58:e7:2f:3e:8d:92:e1:ad:
40:27:c3:b2:c4:5d:2b:9e:53:3d:d8:f2:91:c2:3d:
fc:e5:1d:9a:26:78:fe:ac:7e:5d:0e:1b:e0:37:7b:
f0:2a:ed:87:78:12:20:c8:0b:18:38:bd:52:56:a6:
a7:24:9a:84:d5:eb:a2:16:ce:59:c8:25:9e:2d:6e:
91:13:67:7a:1b:0b:29:2c:78:92:76:f3:52:53:21:
cc:92:bb:f9:32:d0:15:ad:8f:58:d5:c2:80:d0:a5:
e8:83:2a:e8:f4:d1:5b:f1:b0:59:1f:1b:0b:52:39:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C2:63:2A:07:E9:D5:D0:D2:07:BC:EB:6F:7A:E3:0E:9F:38:BE:E5
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3cJjKgfp1dDSB7zrb3rjDp84vuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.71.0/24
89.45.209.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:95:5b:b8:8b:71:45:ba:93:a2:28:d2:2a:23:02:b1:06:fd:
e4:9a:99:c6:31:5b:eb:aa:f1:f2:11:11:46:f6:49:9d:3d:34:
92:d9:30:06:3c:4d:0e:6a:ee:88:53:8f:50:c0:7e:f1:95:47:
c9:4f:04:12:4e:30:cd:ab:53:b1:46:93:7e:02:e7:0d:c7:c9:
32:6f:cd:99:0c:cd:8d:3c:c7:49:80:7a:88:1f:d2:04:9e:1d:
23:fd:1b:24:05:f6:eb:d3:e2:e9:13:54:3e:19:10:fb:2c:52:
33:21:58:ea:43:36:12:7b:1f:2e:eb:14:e8:4f:d8:ad:61:94:
5d:b6:7b:63:b9:16:6e:3b:88:47:41:a3:1f:9b:9d:ce:9d:ca:
51:da:c3:0b:85:c6:bc:34:e7:09:6d:39:08:08:44:5c:b3:05:
60:4c:5e:5c:3f:ad:c1:41:3c:69:37:ce:8f:22:c2:9f:4f:43:
71:ba:bb:08:f7:31:19:50:7e:c9:64:c0:e2:fa:18:44:39:05:
cf:bb:60:8e:83:43:48:8e:d3:2a:aa:d7:b8:ff:90:17:36:da:
ec:46:8d:7b:92:b2:ef:1c:a5:11:e0:f2:c3:e2:d2:08:38:01:
7b:dc:bf:bb:84:7a:5b:e5:c5:e7:6b:b9:86:4b:35:66:6a:c2:
4c:74:1f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 12:20:28 2024 by rpki-client on console-ams.rpki-client.org