Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/CWj233lPAqw8_rMALxBmTEPyJlU.roa
File: CWj233lPAqw8_rMALxBmTEPyJlU.roa (raw, json)
Hash identifier: P6cfsKR3FgH9iwh9rK6dQ7yJ2NZK5YWiWQYv4mJVkp8=
Subject key identifier: 09:68:F6:DF:79:4F:02:AC:3C:FE:B3:00:2F:10:66:4C:43:F2:26:55
Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial: 018DFC2A9F917A209B2C0C8E6FB43ACD397A
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/CWj233lPAqw8_rMALxBmTEPyJlU.roa
Signing time: Fri 01 Mar 2024 22:37:48 +0000
ROA not before: Fri 01 Mar 2024 22:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 95.131.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fc:2a:9f:91:7a:20:9b:2c:0c:8e:6f:b4:3a:cd:39:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Validity
Not Before: Mar 1 22:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0968f6df794f02ac3cfeb3002f10664c43f22655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:dc:47:26:7e:89:d5:71:e2:16:31:3e:7a:
62:d7:39:41:2e:20:1a:9b:fa:90:56:2b:55:2d:86:
9a:79:91:cd:9e:87:5d:78:5c:eb:87:ad:d0:84:55:
63:8e:21:ed:25:f1:56:cb:c8:05:84:76:9d:1f:ac:
ca:c8:93:27:f4:bf:ec:e3:f6:c0:ca:2c:2d:6d:16:
36:f5:b6:82:ff:6d:e4:a2:bf:6e:16:fd:5c:2a:96:
5b:68:2c:a6:44:88:3a:c2:21:8a:78:69:38:d9:83:
a8:51:46:af:8c:8b:3b:0d:5c:08:66:9b:6f:21:40:
61:d3:e6:3c:e3:95:7a:ce:50:10:35:9f:c1:21:fc:
63:4d:0f:32:53:d8:0b:85:e4:09:74:13:1a:50:99:
cc:60:61:d8:96:d2:a1:a6:a4:1e:b9:b0:c4:cc:a1:
4a:cd:27:44:ac:0c:5a:0d:f5:92:5a:47:7f:d9:9e:
c3:65:e3:8e:f0:9b:47:10:29:c6:4d:46:ea:65:37:
35:c0:3b:f0:f8:6c:4f:fe:08:fa:80:9e:0d:85:85:
a3:b8:0c:0c:ae:fe:a7:1f:52:2f:2b:bb:b7:c9:b6:
35:e9:49:e3:31:60:d4:08:a1:f7:e8:c2:01:51:c2:
96:06:14:32:26:2a:ed:48:4e:9d:34:11:a4:29:f3:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:68:F6:DF:79:4F:02:AC:3C:FE:B3:00:2F:10:66:4C:43:F2:26:55
X509v3 Authority Key Identifier:
keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/CWj233lPAqw8_rMALxBmTEPyJlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.32.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:53:d0:a0:ff:c8:0f:d1:f3:cb:6f:ad:c8:e2:2c:12:92:2d:
1f:7c:60:b5:af:c9:bf:aa:d0:34:ec:21:a5:8f:52:97:2a:a6:
2d:cc:39:f1:fe:d6:36:c1:24:f9:ed:c3:67:3a:a5:cb:82:db:
29:ef:71:f8:ab:e2:0a:81:4e:28:f3:6e:52:54:de:da:49:d9:
35:80:69:b2:c3:9d:ab:e5:1d:46:a0:fb:d3:22:93:28:29:2e:
29:4e:a8:f3:1b:c6:5d:55:79:b5:18:76:05:a1:f5:41:e5:b5:
ef:18:1d:91:a1:17:12:6c:15:f7:4f:14:07:45:1d:9d:b1:17:
d9:ca:6a:aa:c6:4c:d6:1a:b9:a3:d3:d9:5a:bc:31:df:e5:f8:
47:d6:48:43:0a:3c:da:a1:90:55:1e:66:be:92:e0:af:49:d5:
7a:df:fc:18:af:48:b4:19:40:ff:7a:10:af:78:61:99:fd:30:
74:f6:8b:1f:cb:28:e4:ff:98:f9:bc:e2:d5:16:4d:ab:f6:41:
3a:f3:ab:92:09:16:26:a8:32:ce:f3:f8:65:bb:f5:6e:7d:bc:
6c:32:7a:49:cd:ca:e0:76:f0:96:ca:3e:96:f1:1f:1c:2d:44:
6f:02:e9:b5:88:54:63:a9:8c:34:7a:d2:82:03:0f:d0:29:e4:
28:02:aa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:36:10 2024 by rpki-client on console-ams.rpki-client.org