Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/886Q1EZndl5ziRcWZhBkZc1Bj0A.roa
File: 886Q1EZndl5ziRcWZhBkZc1Bj0A.roa (raw, json)
Hash identifier: d7eGv7LG2dePxbEy3U758i4HDGEEKxhA0O4ZF88x508=
Subject key identifier: F3:CE:90:D4:46:67:76:5E:73:89:17:16:66:10:64:65:CD:41:8F:40
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018E38F10C5CC9AAEEFC058CDE7C8C773500
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/886Q1EZndl5ziRcWZhBkZc1Bj0A.roa
Signing time: Wed 13 Mar 2024 17:51:45 +0000
ROA not before: Wed 13 Mar 2024 17:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 89.35.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:f1:0c:5c:c9:aa:ee:fc:05:8c:de:7c:8c:77:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 13 17:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3ce90d44667765e7389171666106465cd418f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f3:c1:99:db:2a:c5:1d:d0:70:a2:b8:25:55:
ce:12:d1:b8:1e:87:2b:63:03:0a:d4:c3:9a:09:7b:
89:73:a4:97:a6:cd:b8:7f:1a:b1:6d:26:c5:3e:22:
84:79:75:91:c8:5b:04:63:89:fe:49:ff:f3:8c:64:
a1:13:e9:43:73:1f:83:34:13:4f:ff:bf:25:0f:1d:
4a:bc:e7:a3:28:0c:f1:80:66:41:7f:00:af:d8:3f:
79:03:de:df:89:03:17:00:57:63:8a:4b:43:b7:14:
ef:e8:79:5e:58:39:d8:fe:13:18:37:45:fa:41:7a:
90:12:7e:91:61:83:95:14:3c:19:ee:42:59:6d:10:
1a:fe:a7:fb:54:e6:ac:03:e1:dc:a2:4d:0b:86:1c:
9e:16:57:49:e0:34:aa:2a:fa:84:e2:51:a2:fc:5f:
ae:10:ea:55:0d:89:cb:f6:fa:8a:65:00:1c:0c:a8:
08:db:03:d2:72:ef:1b:9b:41:1c:1f:3c:74:d0:38:
01:b6:6a:c2:f1:17:85:c0:4a:9d:24:46:83:b3:5c:
cf:99:08:75:3f:8d:38:78:0b:54:d0:3f:71:75:f7:
bd:9f:3b:79:00:27:3f:b6:59:91:23:c1:35:cf:22:
b5:09:bc:82:a1:59:10:ad:06:10:5e:21:93:4d:82:
e0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CE:90:D4:46:67:76:5E:73:89:17:16:66:10:64:65:CD:41:8F:40
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/886Q1EZndl5ziRcWZhBkZc1Bj0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.73.0/24
Signature Algorithm: sha256WithRSAEncryption
13:6c:83:c2:13:d3:d8:9d:4f:93:ae:1f:54:a9:c0:62:d5:b4:
51:be:ea:9b:b4:45:3a:d5:d9:0e:aa:df:8a:7e:11:69:cf:06:
b6:cc:55:39:33:6e:27:75:63:9d:ff:36:f1:3e:3b:94:3d:d5:
28:4c:a8:b9:3f:65:97:71:9f:82:ad:25:27:d4:41:1e:34:82:
0e:b0:bb:1a:d4:a6:91:2b:1b:2d:6d:c2:2c:7c:05:1f:60:09:
b7:21:2f:b4:5a:21:03:f1:e3:68:ae:40:a2:18:dd:9c:a7:9d:
fe:96:b9:57:f9:b2:a9:8f:95:78:2a:32:ef:8e:f1:36:1d:8e:
c5:42:bf:8d:f8:d8:f9:b9:47:9e:79:8b:3d:08:58:43:79:74:
c0:7b:e1:f9:52:a8:19:99:86:68:e6:01:3f:44:d7:e9:97:53:
68:4d:86:79:6e:6a:ba:01:bd:04:e3:aa:fe:04:f6:cf:ca:ca:
11:40:4a:e1:8a:7c:de:e5:1e:8a:3e:52:6a:8c:14:75:92:6b:
92:8d:ac:e5:1f:d6:5c:f6:25:4a:3a:8a:68:a0:64:95:77:f3:
b8:97:49:34:47:57:5d:09:f3:69:ad:8d:a0:88:40:77:25:95:
01:fc:02:f0:ca:a1:ba:af:ce:16:23:00:92:b1:3c:8a:19:69:
4c:be:f9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:00:54 2024 by rpki-client on console-ams.rpki-client.org