Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/fpgr5aQ1jQ4PrAX4Fh6eKOPCZHY.roa
File: fpgr5aQ1jQ4PrAX4Fh6eKOPCZHY.roa (raw, json)
Hash identifier: ltN7gZIISH8XuRK4BfGGjerFQdiOtmwoDJYsNHrXMaA=
Subject key identifier: 7E:98:2B:E5:A4:35:8D:0E:0F:AC:05:F8:16:1E:9E:28:E3:C2:64:76
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 018F86AC86705552DFE8B616536DD5C016FB
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/fpgr5aQ1jQ4PrAX4Fh6eKOPCZHY.roa
Signing time: Fri 17 May 2024 13:10:04 +0000
ROA not before: Fri 17 May 2024 13:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199369
IP address blocks: 89.33.166.0/24 maxlen: 24
89.33.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:ac:86:70:55:52:df:e8:b6:16:53:6d:d5:c0:16:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: May 17 13:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e982be5a4358d0e0fac05f8161e9e28e3c26476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:34:56:56:b9:01:c2:0f:49:d8:07:d0:11:
c8:64:8c:ee:42:0a:d2:3c:cf:c4:b6:52:b1:fe:0e:
d5:b8:7b:10:17:a0:70:c8:a7:46:2e:e2:29:76:0f:
e4:a0:e6:72:91:9d:10:53:d8:c6:e5:c3:43:01:75:
5c:e7:9f:22:f6:de:b8:d6:f9:0f:58:33:2a:c0:19:
4d:b9:38:3a:bc:d8:4b:f3:f7:0b:c5:d2:9d:c6:96:
f2:2b:bd:5a:ec:27:f1:dd:73:32:8b:bc:0d:4d:19:
26:e6:b0:07:b0:5a:42:91:b8:5b:a9:57:af:11:73:
04:79:7f:9a:b7:de:ea:af:33:4a:2f:62:b4:ca:ce:
5b:d1:8e:f0:07:a3:76:5c:11:e9:2b:44:51:ee:be:
8b:03:a3:53:2c:05:85:d6:9f:65:d8:d7:a8:47:1e:
5f:8c:78:5d:9c:25:63:70:4c:85:e6:2e:4a:27:d0:
a1:57:c1:65:69:60:5c:91:cc:64:4a:df:80:72:46:
58:7f:8c:ae:c5:43:46:13:57:73:9f:ad:f9:60:21:
4a:a7:b9:e8:c4:c4:92:9c:5e:a6:2f:2e:8f:ae:c2:
82:d1:dd:2f:bf:ab:86:c7:d7:5d:b8:e6:56:d5:41:
3f:61:da:02:22:ce:1f:5c:a2:57:5b:e5:f1:b2:0c:
b4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:98:2B:E5:A4:35:8D:0E:0F:AC:05:F8:16:1E:9E:28:E3:C2:64:76
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/fpgr5aQ1jQ4PrAX4Fh6eKOPCZHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.166.0/23
Signature Algorithm: sha256WithRSAEncryption
45:15:1a:ca:b9:fa:b0:01:55:25:01:9b:7f:65:3a:9a:4f:16:
71:eb:42:a9:8e:36:04:cd:86:71:d4:61:16:8c:50:db:8e:a1:
46:a5:ff:a2:04:48:73:4f:b2:41:be:63:0a:13:77:a7:70:a9:
68:9d:61:83:47:ed:e9:91:c6:c3:bd:9b:29:88:61:3a:09:82:
98:b8:ef:8c:49:ca:87:42:b5:39:28:d6:f3:f6:38:5c:ba:e6:
74:a5:31:8b:fc:0b:20:8d:32:3b:d9:13:04:1f:91:3e:2e:59:
c6:d4:a0:11:1c:1c:57:e2:bc:fe:18:12:52:c4:5d:49:04:e2:
48:11:d5:ad:24:38:08:e3:a3:ae:c8:54:e8:f9:90:8a:46:36:
75:7b:5d:fd:e9:d7:74:b2:1f:c5:64:a5:58:31:76:4a:05:66:
f8:a3:75:d9:27:a5:0c:ca:b3:07:b8:24:2a:2d:ed:66:83:1c:
c2:c0:13:72:a0:f0:f0:4a:53:eb:66:49:41:50:c4:bd:18:d5:
b9:aa:30:b9:46:58:0a:47:5c:11:58:70:a3:67:c4:de:88:f4:
c7:98:d1:c5:22:16:bc:3f:a1:e4:95:fc:74:b9:b8:ea:35:9a:
42:e9:a9:65:48:28:e0:22:dc:5b:f1:7f:7f:b0:bb:3a:cd:93:
d4:a9:c0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:23:03 2024 by rpki-client on console-ams.rpki-client.org