Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/BaG2dMQPfw6EjBzDZBg3knR7AKI.roa
File: BaG2dMQPfw6EjBzDZBg3knR7AKI.roa (raw, json)
Hash identifier: QVNCLzcs2Dqg4/X7CGsrmr49DtVyNBviWJ28rjZVNXU=
Subject key identifier: 05:A1:B6:74:C4:0F:7F:0E:84:8C:1C:C3:64:18:37:92:74:7B:00:A2
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018CC9BCA65F89DD55FC9D7BE03A52D21040
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/BaG2dMQPfw6EjBzDZBg3knR7AKI.roa
Signing time: Tue 02 Jan 2024 10:33:52 +0000
ROA not before: Tue 02 Jan 2024 10:33:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 89.117.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a6:5f:89:dd:55:fc:9d:7b:e0:3a:52:d2:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 10:33:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05a1b674c40f7f0e848c1cc364183792747b00a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:28:03:d1:49:f2:e6:68:fb:59:ab:5f:82:
e3:af:c9:66:88:93:1f:39:c7:c4:34:2f:bd:ab:9f:
9a:2f:66:41:21:69:1a:b8:e2:c8:f0:e1:a1:3c:8a:
35:8e:bf:49:74:13:3c:1e:93:90:d1:d2:e7:b5:b2:
00:03:8f:d6:7e:55:a7:7f:bf:83:29:af:e0:97:d4:
80:db:25:b2:6f:fd:2a:25:b6:d3:b6:bd:05:e2:e4:
63:f8:52:5e:b5:1b:0a:0f:42:ff:0c:93:60:ed:9b:
ae:b4:fe:d0:b3:8f:67:0f:54:20:c1:89:b6:1b:98:
a3:86:ea:98:43:ec:fb:6e:5b:30:46:33:aa:03:c2:
57:6a:31:a2:89:ea:0b:cd:db:b7:b2:ad:8d:6f:57:
ec:ca:41:39:82:3d:5f:91:4e:0b:0f:ef:c0:65:d1:
aa:a7:98:8b:3e:02:3a:32:e2:8c:20:55:87:aa:93:
fa:d4:ac:00:7c:7b:2b:5b:9a:60:46:bb:2e:2e:c4:
d6:db:26:dc:f3:02:52:b9:5f:ff:70:d4:1a:1c:07:
8e:96:e1:f8:e7:5e:6b:db:1c:25:90:ad:7c:e4:06:
f7:8b:57:28:15:a4:9d:7d:42:7a:07:84:85:1a:8b:
5d:b2:9f:55:b8:b0:0c:35:24:e6:05:7c:45:52:2f:
91:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A1:B6:74:C4:0F:7F:0E:84:8C:1C:C3:64:18:37:92:74:7B:00:A2
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/BaG2dMQPfw6EjBzDZBg3knR7AKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.241.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d0:64:93:08:6c:77:34:3e:7d:da:66:01:8b:33:4e:61:30:
ed:e1:02:76:4a:f3:7a:b6:9a:dc:9e:00:80:5c:e5:f4:76:b4:
93:08:bf:d1:07:93:52:74:c2:e2:78:4a:09:b1:7a:ab:3b:6f:
b5:0e:70:11:75:04:7d:cf:03:fb:18:35:40:79:7e:4e:47:19:
f8:9b:27:04:ba:91:ee:2d:90:01:99:e0:f4:1e:55:b2:ec:e9:
e3:8f:0c:4b:5d:2b:43:ba:f9:7e:ed:17:02:57:46:3d:ff:30:
a8:22:1f:b7:92:14:a9:4d:e3:9d:89:49:46:47:6e:e3:22:73:
e6:58:7b:e5:89:db:a2:00:8b:4b:3b:be:93:3a:7b:19:a3:42:
3c:7c:39:9a:a5:a3:6f:80:27:09:bf:3d:6e:60:06:c8:88:88:
50:b9:ca:2f:e1:69:4f:63:a0:19:9c:38:a5:ae:56:dc:93:cc:
cb:7e:0a:5e:bb:a0:74:01:34:6c:fc:db:36:46:f2:45:97:95:
60:3e:f3:75:a2:67:19:c8:97:43:46:62:84:ab:96:a7:86:b0:
4c:f9:4d:91:98:03:b1:b2:72:81:0b:f6:77:3e:e1:8c:24:ca:
92:4c:67:29:a7:a8:24:af:23:92:e3:c3:ee:f8:c6:cf:31:d9:
ab:fc:42:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:44:35 2024 by rpki-client on console-fra.rpki-client.org