Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/J-kd64Lxe71y3aoQd9uES4CBajY.roa
File: J-kd64Lxe71y3aoQd9uES4CBajY.roa (raw, json)
Hash identifier: 1TElPVbC1q4SKUGEEDTBOj8I9N3Hmx1yVF7toUmF9UA=
Subject key identifier: 27:E9:1D:EB:82:F1:7B:BD:72:DD:AA:10:77:DB:84:4B:80:81:6A:36
Certificate issuer: /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial: 018CC64AE4B9F80F865F5C48C353F4D5ABBB
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/J-kd64Lxe71y3aoQd9uES4CBajY.roa
Signing time: Mon 01 Jan 2024 18:30:46 +0000
ROA not before: Mon 01 Jan 2024 18:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34914
IP address blocks: 89.222.34.0/23 maxlen: 23
89.222.32.0/23 maxlen: 23
89.222.2.0/23 maxlen: 23
89.222.0.0/19 maxlen: 19
89.222.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e4:b9:f8:0f:86:5f:5c:48:c3:53:f4:d5:ab:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Validity
Not Before: Jan 1 18:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27e91deb82f17bbd72ddaa1077db844b80816a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:1a:4a:bd:97:39:e5:96:57:e9:bb:7a:58:
56:40:ff:04:0a:4c:19:e7:a9:c3:78:cb:57:84:2b:
92:cb:66:09:51:7d:eb:b1:49:6b:80:5a:08:a0:08:
2e:e0:6c:6e:74:d3:82:43:cb:fc:4a:69:ed:7b:ab:
53:9c:84:e3:e5:7c:60:a9:a4:1f:34:72:a2:50:81:
34:4b:38:b4:9d:38:6e:39:b5:2a:0d:c2:55:48:e3:
53:34:c1:d7:db:57:18:d5:d1:83:e2:02:be:d1:6c:
2d:d2:86:35:b1:7a:0c:ad:73:75:0e:77:16:89:7d:
42:b4:2a:4b:be:c8:1b:c2:97:0e:15:22:27:95:9b:
77:a5:fb:cd:70:fe:22:e4:b4:bb:21:52:60:69:0d:
d8:6e:1d:e4:64:1d:65:88:8d:3d:23:cf:84:cd:77:
83:c0:32:9c:0f:f9:ed:76:5d:a3:3a:13:6a:1c:41:
09:64:dd:e9:99:a5:ba:c2:9a:76:96:6f:65:61:d8:
7a:9c:c5:60:cd:02:ec:e5:42:b5:79:4a:e3:b8:89:
64:97:fe:ac:80:e2:10:41:cf:c6:31:73:a6:36:93:
2e:f9:cb:d8:0d:5d:ff:62:22:fd:20:38:6d:b1:b7:
14:e1:de:91:5d:75:05:04:13:0f:58:c6:fe:43:a8:
7a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E9:1D:EB:82:F1:7B:BD:72:DD:AA:10:77:DB:84:4B:80:81:6A:36
X509v3 Authority Key Identifier:
keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/J-kd64Lxe71y3aoQd9uES4CBajY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.222.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a8:b3:e2:4a:ea:60:b7:a7:90:18:d6:38:ef:c8:5a:72:72:d1:
af:db:ce:b9:60:a8:8b:72:7d:c7:0b:9d:b2:3a:9d:e3:ce:fc:
fc:ef:60:9a:5e:d2:cc:2e:1d:7b:e6:c1:e9:fd:25:05:49:eb:
a8:ee:e5:4b:e1:c5:1c:d0:fa:dc:6d:31:c5:13:eb:8a:a0:1b:
a8:7b:ef:5f:cf:20:a1:36:d7:34:c2:56:5f:f9:57:77:3b:f3:
f1:4a:77:35:95:60:98:30:b8:24:70:4a:aa:d7:51:c7:8c:d7:
47:6d:19:aa:3f:bf:b4:ef:e3:53:15:a7:41:b4:f3:7d:71:71:
13:fd:76:2e:94:8c:72:ba:2b:68:54:25:f5:6a:7e:2c:44:2d:
c4:56:5d:43:04:6a:80:cb:3e:30:94:e6:5e:9d:f0:32:3f:98:
b6:71:63:0b:43:15:7f:88:cb:78:5f:dc:21:69:c0:eb:a1:dc:
95:75:fb:c8:0d:fb:12:15:cc:18:76:e9:a0:cc:f3:8e:9d:78:
bf:db:88:2c:f5:80:00:24:86:a1:92:e8:e0:ac:e7:b8:85:98:
9f:ca:09:26:16:c3:bc:29:fd:bc:8b:06:52:a2:0b:0b:72:71:
58:5f:a9:e6:f9:5f:7a:af:28:35:c1:b8:bc:62:e6:06:b7:0b:
61:5f:ca:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:53:26 2024 by rpki-client on console-ams.rpki-client.org