Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/G2mX8v3N4TCA-b1Kg2OL7b3kfgQ.roa
File: G2mX8v3N4TCA-b1Kg2OL7b3kfgQ.roa (raw, json)
Hash identifier: YGlYhz8FwPbLmk8Nc+E8hSupJZdn/aagnzC15juxkBg=
Subject key identifier: 1B:69:97:F2:FD:CD:E1:30:80:F9:BD:4A:83:63:8B:ED:BD:E4:7E:04
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 0190974F4A926BDC6A87C5DD77FE149E94F5
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/G2mX8v3N4TCA-b1Kg2OL7b3kfgQ.roa
Signing time: Tue 09 Jul 2024 11:44:34 +0000
ROA not before: Tue 09 Jul 2024 11:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214678
IP address blocks: 89.34.76.0/24 maxlen: 24
185.240.88.0/23 maxlen: 23
185.240.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:97:4f:4a:92:6b:dc:6a:87:c5:dd:77:fe:14:9e:94:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jul 9 11:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b6997f2fdcde13080f9bd4a83638bedbde47e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:50:28:11:39:53:3b:3b:b2:a1:c0:a4:b2:
66:20:89:24:da:9a:f8:9a:e9:ce:8c:6d:17:64:75:
9a:5f:19:7b:24:16:2a:19:bb:06:75:53:3c:36:44:
6a:5c:4a:1b:49:91:88:88:33:42:60:24:78:16:c4:
15:4c:17:8b:5c:19:23:91:8b:f8:80:53:af:ad:22:
2c:8f:41:66:75:43:ea:74:80:40:e1:43:84:48:4f:
57:62:3e:9f:f7:16:20:07:6a:66:97:2f:01:fc:ca:
ce:65:20:7e:3e:98:c4:f1:90:80:a2:9e:d9:19:2d:
1e:ef:a5:7a:f2:91:39:05:ad:5a:d6:dc:7c:0b:8c:
f5:24:5c:b1:eb:f6:62:63:b6:a8:e4:70:0e:72:6c:
55:09:79:da:5b:44:3e:2a:6e:5a:0f:0e:36:9c:10:
69:85:b2:3f:c0:b9:27:26:bd:05:fc:d6:82:ba:e6:
4d:b7:6b:cc:b2:14:59:b3:39:4c:89:80:57:8c:57:
57:7f:7d:d5:f9:b3:50:bf:d7:0a:be:fb:07:2b:da:
87:47:b1:36:05:93:81:bf:e6:ce:c3:d8:cc:00:10:
79:5d:7d:eb:a0:91:a9:21:d5:b0:90:64:03:a9:2f:
43:f9:4f:d8:ff:61:2d:ba:c1:ce:0b:82:38:bb:4e:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:69:97:F2:FD:CD:E1:30:80:F9:BD:4A:83:63:8B:ED:BD:E4:7E:04
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/G2mX8v3N4TCA-b1Kg2OL7b3kfgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.76.0/24
185.240.88.0/22
Signature Algorithm: sha256WithRSAEncryption
32:4f:8f:52:62:11:de:37:33:7e:3b:5c:b0:99:7a:ac:b0:e0:
7b:ad:6d:e4:31:8d:89:e2:6f:1d:f2:94:fd:9d:bf:de:b1:02:
02:19:63:60:7e:f8:33:09:fe:b8:63:38:7c:02:04:83:f0:dc:
4c:39:16:f1:81:75:5e:3a:9c:8f:38:8a:bb:4a:eb:c0:2b:f0:
29:25:6d:2d:7b:ef:eb:a9:41:91:04:3b:79:eb:92:9d:00:30:
c5:36:a6:19:f8:1d:ae:52:39:2e:f0:68:a9:07:89:2d:7d:3b:
b2:16:83:2a:e6:83:d9:c9:2c:6b:1d:bc:b6:c7:44:dd:d2:18:
7a:11:bb:87:43:45:7e:b7:f4:64:6e:77:fa:c7:35:b0:c0:13:
33:d2:b9:28:e3:ad:bb:e3:1b:05:62:7c:ba:0b:3f:98:3d:64:
dc:e3:3e:3b:f4:79:b6:ea:44:7c:f7:04:59:75:9c:19:dc:29:
43:f3:13:4a:d1:4f:f0:b6:d5:93:8c:4a:3d:dd:90:b5:fd:55:
c6:91:4c:05:95:c4:67:d3:69:89:94:88:80:e6:8a:87:1e:df:
46:02:93:f1:a8:7b:2d:b1:ee:cf:53:6c:f7:8a:cc:83:dc:f6:
59:3d:ed:ec:a8:fc:b5:ef:32:45:04:96:01:6e:f0:6d:2d:0e:
71:ab:92:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:09:12 2024 by rpki-client on console-ams.rpki-client.org