Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/rk5pqXn7CY_Nhjj9y61PCv--6CE.roa
File: rk5pqXn7CY_Nhjj9y61PCv--6CE.roa (raw, json)
Hash identifier: MPcFcwh/bvbTFojz+F5PcXn/9hw5703e6HLj9tfqEKA=
Subject key identifier: AE:4E:69:A9:79:FB:09:8F:CD:86:38:FD:CB:AD:4F:0A:FF:BE:E8:21
Certificate issuer: /CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Certificate serial: 018CC794B4024870D4BE39A66AD643E4E10D
Authority key identifier: 4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/rk5pqXn7CY_Nhjj9y61PCv--6CE.roa
Signing time: Tue 02 Jan 2024 00:31:00 +0000
ROA not before: Tue 02 Jan 2024 00:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41696
IP address blocks: 89.221.176.0/20 maxlen: 24
2a02:e28::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:b4:02:48:70:d4:be:39:a6:6a:d6:43:e4:e1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b513f7e446e0cd6dcfe56829bbc9fe498d3e8
Validity
Not Before: Jan 2 00:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae4e69a979fb098fcd8638fdcbad4f0affbee821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:db:5a:8b:0c:16:52:1d:67:a2:ab:39:f9:
2e:b7:cf:94:ae:f2:c7:a2:90:56:5b:71:85:f8:18:
a1:2e:a4:0e:3f:ac:64:55:13:1f:bb:13:ee:e3:67:
fc:33:c7:8c:d2:1f:a0:6c:79:da:4a:72:e4:17:63:
f7:64:93:e3:63:4a:06:54:b8:d6:b3:21:24:d9:b6:
00:73:8f:c2:85:a8:30:b9:f6:fd:00:e6:fc:76:04:
ee:21:a8:bd:03:e6:4c:80:54:4d:d4:fd:83:a9:e1:
4c:8b:25:41:17:cb:a8:e5:d5:a7:ca:5d:72:da:0a:
33:cc:31:82:9a:6a:3c:91:40:40:e9:46:7f:1a:5e:
28:69:50:ab:4f:62:f1:8a:23:64:f2:8a:8f:13:23:
c2:95:31:63:49:63:54:f2:c8:2d:03:72:7f:e6:38:
70:d9:fd:a4:79:b5:34:49:38:f9:bd:47:cf:7d:75:
72:5e:61:01:f1:df:9c:fc:39:96:db:43:5f:a1:ce:
85:ab:44:f9:7c:67:a0:03:78:e9:1a:18:54:50:e0:
1b:38:5d:4f:bd:64:e3:8a:e0:88:43:e3:5f:8b:70:
dc:7b:80:1b:bc:b2:a8:da:19:25:fe:4a:1d:08:dd:
3f:7c:6f:5a:0b:01:98:dc:fb:2b:48:6e:a4:cd:fc:
87:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4E:69:A9:79:FB:09:8F:CD:86:38:FD:CB:AD:4F:0A:FF:BE:E8:21
X509v3 Authority Key Identifier:
keyid:4A:4B:51:3F:7E:44:6E:0C:D6:DC:FE:56:82:9B:BC:9F:E4:98:D3:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SktRP35EbgzW3P5Wgpu8n-SY0-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/rk5pqXn7CY_Nhjj9y61PCv--6CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/SktRP35EbgzW3P5Wgpu8n-SY0-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.221.176.0/20
IPv6:
2a02:e28::/32
Signature Algorithm: sha256WithRSAEncryption
47:ea:cc:a8:13:57:15:a5:a7:52:75:6a:f3:6b:33:95:be:a2:
ed:fb:3b:25:9e:1b:cb:b3:bc:c0:b9:3f:ee:f9:65:96:c2:4d:
1f:4a:c2:3a:09:81:64:7d:53:a9:0c:e1:ed:49:f1:15:5e:7f:
58:48:35:e0:39:39:be:5c:c6:f9:34:67:68:26:54:ca:eb:59:
3d:0b:60:48:21:7b:57:09:d0:a7:31:f0:38:c2:11:62:c0:e3:
06:01:07:cd:a3:c2:bc:25:c7:df:09:19:e3:ec:28:ff:e0:11:
46:a2:3c:78:a0:15:9c:dd:0e:79:00:f6:f7:30:f6:f9:ae:c9:
80:b2:5a:93:cc:a7:e9:ad:69:06:3e:2a:a4:19:0e:0c:b8:96:
44:c6:a8:56:ed:09:50:c5:f4:05:a9:ea:41:4a:f0:94:6a:79:
d1:7d:ca:02:29:4c:71:4e:79:62:23:92:b2:35:d1:30:72:09:
d9:97:91:bf:4f:d1:75:70:0f:9e:ed:6f:a9:7d:60:9e:42:f7:
33:38:31:e7:f1:62:1f:ac:6a:3f:db:39:7e:08:4b:96:e6:6c:
d9:ee:17:d1:5c:0b:59:c6:88:87:18:f2:58:af:d7:42:25:2b:
74:af:02:5f:a5:ba:6a:b4:1f:4a:1e:26:9d:79:b7:12:0e:5a:
77:1d:e4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:01:01 2024 by rpki-client on console-ams.rpki-client.org