Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/J8mOpU_vX2svFflEwZJQztsTsk0.roa
File: J8mOpU_vX2svFflEwZJQztsTsk0.roa (raw, json)
Hash identifier: I90Kq+qoLch+M1KjXOKL+BuDEFtFkqYYFBIgUvMhOyM=
Subject key identifier: 27:C9:8E:A5:4F:EF:5F:6B:2F:15:F9:44:C1:92:50:CE:DB:13:B2:4D
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 018CC424705F3BF53875F962DD5A8B4F7F77
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/J8mOpU_vX2svFflEwZJQztsTsk0.roa
Signing time: Mon 01 Jan 2024 08:29:31 +0000
ROA not before: Mon 01 Jan 2024 08:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 89.111.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:70:5f:3b:f5:38:75:f9:62:dd:5a:8b:4f:7f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jan 1 08:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27c98ea54fef5f6b2f15f944c19250cedb13b24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:41:a9:20:31:62:d0:dc:21:a7:df:16:98:
65:0e:3c:98:d5:c8:e3:7a:5b:bf:8e:f5:df:ba:2b:
5c:bb:b3:a5:af:34:07:16:05:d6:34:ed:66:a6:42:
bf:b3:c7:a3:34:4d:bf:99:45:ac:42:f1:d5:37:2f:
d3:84:25:45:e5:70:1a:28:e2:da:7e:a5:82:2f:bd:
50:cf:25:23:79:78:5b:25:fc:48:fa:2b:2e:70:bb:
74:50:81:e7:2d:b4:52:6b:0e:33:9c:30:77:a7:ba:
25:9f:95:9b:4a:40:26:05:76:4e:af:bc:a1:6a:21:
47:1b:f3:e5:b5:ab:f5:d3:df:a9:23:e7:32:54:3f:
72:45:12:c2:2e:21:5a:e5:39:ed:f1:7c:f7:57:5b:
59:93:e7:0d:02:82:a7:7d:e0:c9:be:9b:a2:7b:65:
4d:81:de:3d:cf:bf:f8:4f:cd:56:58:93:3b:cb:c5:
24:50:6f:0a:3d:94:e1:4e:ba:8e:c0:98:b2:d8:1c:
b4:ec:02:d3:12:98:14:f4:26:7c:1b:ce:66:b5:50:
db:2e:c0:01:80:10:7b:7b:13:fb:6e:3b:b5:22:31:
ce:c6:11:41:69:97:69:49:a7:42:ff:70:79:a2:21:
bd:84:58:db:ab:9f:82:f8:1a:71:ef:61:37:6b:4f:
ba:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C9:8E:A5:4F:EF:5F:6B:2F:15:F9:44:C1:92:50:CE:DB:13:B2:4D
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/J8mOpU_vX2svFflEwZJQztsTsk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.111.240.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ff:9a:c8:59:70:69:7e:88:71:73:04:ed:f5:2e:0c:52:24:
e5:aa:6b:05:0f:02:89:5d:4a:15:14:4c:c7:fb:06:7d:f5:25:
c8:96:eb:f2:18:67:51:c9:78:48:67:fa:b7:d3:c2:15:ba:42:
2f:a0:dd:c3:c3:12:65:e0:3e:0f:b3:ab:d1:28:02:77:cf:7e:
a2:35:1d:27:f4:f0:08:1b:66:9d:d8:8e:08:ab:c8:61:be:df:
86:6e:57:58:57:db:c9:fc:a5:67:15:a3:96:cf:c4:c3:12:98:
85:22:46:17:63:99:3b:cb:25:13:d8:62:d1:a7:43:81:47:87:
2d:33:80:0c:43:85:9c:68:5a:e7:dc:97:05:e1:54:a6:3a:7d:
e3:b9:3f:f6:79:40:35:b1:47:e5:1d:69:80:ec:58:c3:dd:bc:
21:a0:24:c3:bb:12:59:0f:30:4c:a6:df:ee:30:89:36:94:08:
cf:7a:bb:24:06:02:5d:86:6e:ae:e0:a8:5c:55:2b:3a:aa:c7:
cf:c0:0b:f4:75:f1:3c:73:fe:39:eb:d7:f1:6d:10:f0:1f:31:
d5:54:75:65:62:17:34:4f:a0:9c:bd:29:2a:40:b2:ab:8a:b0:
09:b3:fa:c4:5d:e9:89:88:23:b1:9b:58:10:3e:58:ab:76:ee:
c0:c2:fb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:19:21 2024 by rpki-client on console-fra.rpki-client.org