Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/DG99ydt56AbkZ_iH7Oq6NNq3Tf8.roa
File: DG99ydt56AbkZ_iH7Oq6NNq3Tf8.roa (raw, json)
Hash identifier: 6UGTlTGb2kzg1TCNJrW+xXoODOI86hXrsgvB9zQ5b5s=
Subject key identifier: 0C:6F:7D:C9:DB:79:E8:06:E4:67:F8:87:EC:EA:BA:34:DA:B7:4D:FF
Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial: 018E090B6FD90BDC76DAC809C4E5D8C37D54
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/DG99ydt56AbkZ_iH7Oq6NNq3Tf8.roa
Signing time: Mon 04 Mar 2024 10:38:48 +0000
ROA not before: Mon 04 Mar 2024 10:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12642
IP address blocks: 87.239.199.0/24 maxlen: 24
91.195.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:09:0b:6f:d9:0b:dc:76:da:c8:09:c4:e5:d8:c3:7d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Validity
Not Before: Mar 4 10:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c6f7dc9db79e806e467f887eceaba34dab74dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:12:5a:99:26:85:a2:b1:18:f1:cf:a4:69:
a4:66:7f:ac:9e:e0:51:ce:2f:9e:91:b5:51:45:b1:
06:a3:96:7b:be:03:44:d5:e9:66:f4:76:11:8a:7c:
7c:3b:2f:bd:0e:55:2c:c3:bb:1f:24:5c:8f:0d:5e:
88:f9:23:73:22:1a:0f:e2:f2:8f:18:08:cf:5b:e0:
03:4f:e1:b5:19:5c:b7:ab:c5:41:d9:cd:29:f8:9b:
1b:23:22:7c:c9:e5:e3:10:eb:cd:71:8d:d7:e8:c1:
45:e3:09:d3:e3:e7:a4:cd:c5:0c:68:83:ce:81:17:
7b:3a:79:64:16:0f:6e:5f:0b:12:fc:98:1b:38:08:
8b:33:7b:64:d5:c9:18:0f:21:48:4b:0a:95:c9:63:
08:bd:50:96:6f:44:f5:94:72:7b:8e:4c:0f:da:44:
2b:c1:d8:93:88:0e:95:28:40:8d:d9:a4:73:67:2a:
83:b9:cf:f6:ca:29:3f:36:69:cc:bd:1f:e6:c4:45:
d7:f9:25:8e:14:c9:33:c7:4b:0c:5e:8f:ac:24:97:
6a:41:1c:09:57:c3:9c:2a:13:4b:1b:4f:6f:50:fe:
60:2d:7a:c4:e6:d9:c1:cb:1f:49:7a:13:4b:da:b8:
13:76:67:b2:6c:8d:0a:9d:cd:88:bd:f7:7e:7c:0f:
b1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6F:7D:C9:DB:79:E8:06:E4:67:F8:87:EC:EA:BA:34:DA:B7:4D:FF
X509v3 Authority Key Identifier:
keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/DG99ydt56AbkZ_iH7Oq6NNq3Tf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.199.0/24
91.195.191.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ed:3e:d4:09:76:96:75:93:6f:5c:1e:4f:e2:6a:69:48:fe:
c2:7b:e3:cb:a0:8e:3d:13:d4:98:16:ad:e3:c9:a5:e4:b6:c7:
f4:2d:44:a0:f0:f9:66:b7:1f:df:86:4f:eb:84:78:bf:92:81:
3a:d4:bf:14:f6:17:ce:70:b1:e1:54:f8:e6:6c:64:23:06:c7:
5d:cd:03:a3:f5:b7:ec:6f:d0:6f:e6:a3:ca:69:54:c5:43:34:
f3:99:2b:57:f4:4a:f9:f0:a0:a5:5f:1b:5b:02:18:e6:55:3b:
39:f9:b6:8a:fa:ad:86:d7:39:d1:06:5a:c5:ad:67:0b:59:c7:
71:40:9f:51:5b:2b:ee:d3:25:9d:41:3d:62:58:7b:3d:4d:82:
bd:e2:6f:10:15:2e:3d:38:e8:45:43:70:18:3c:17:40:88:ae:
b5:d4:4c:bc:d4:7e:ee:20:e4:4e:0c:4e:1d:fa:92:cf:8a:e7:
e5:aa:13:34:d5:52:75:41:6a:7f:e1:ae:ff:b5:ed:17:9b:05:
c0:11:28:96:0d:25:33:6c:1b:31:b0:24:a8:ee:6e:b7:b7:36:
b4:9e:7b:84:c6:24:ad:79:c8:c9:ee:5e:78:e9:d3:b2:d0:f8:
5a:8e:62:a8:39:c5:3e:9f:83:fb:6b:1f:11:72:b6:6f:72:20:
e1:ca:56:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:00:33 2024 by rpki-client on console-fra.rpki-client.org