Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/KmycTHMEnZZXWQKWQd4_tuq_zNs.roa
File: KmycTHMEnZZXWQKWQd4_tuq_zNs.roa (raw, json)
Hash identifier: 7ym/kf5hZBqZaTnfGhfvsDzOrlm0SErJ55DLUzbSQXw=
Subject key identifier: 2A:6C:9C:4C:73:04:9D:96:57:59:02:96:41:DE:3F:B6:EA:BF:CC:DB
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01902628ECF9DC324470BDA38C3603AE55AC
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/KmycTHMEnZZXWQKWQd4_tuq_zNs.roa
Signing time: Mon 17 Jun 2024 12:25:34 +0000
ROA not before: Mon 17 Jun 2024 12:25:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34714
IP address blocks: 89.40.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:26:28:ec:f9:dc:32:44:70:bd:a3:8c:36:03:ae:55:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jun 17 12:25:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a6c9c4c73049d965759029641de3fb6eabfccdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:d9:1f:10:a6:93:21:a1:1a:c6:7c:69:db:
a5:d8:96:7e:58:30:8b:11:f4:f2:eb:8a:f5:9d:7b:
d8:5e:61:60:e1:c0:08:c7:79:38:83:97:95:d0:a1:
85:d4:2b:50:31:ed:eb:c1:7f:d4:a4:1a:dc:f6:89:
be:e1:63:f7:d6:87:28:93:d4:84:ca:2b:6f:bc:fc:
3e:4b:59:ef:d4:62:25:d5:52:52:c2:0e:60:c5:98:
25:27:6e:90:20:e6:b1:5f:c4:cc:c8:f3:03:da:8b:
ac:8e:8f:b7:f2:6a:cd:ab:35:9f:1c:df:c9:5b:09:
27:56:51:5d:19:1a:71:b4:98:8b:46:45:92:59:d4:
39:56:1e:39:54:de:ff:51:28:c7:02:49:e2:24:de:
89:4c:22:17:c6:92:c0:e1:81:f6:04:75:e0:90:2f:
a7:30:13:22:d8:3b:d9:9c:15:2c:bf:ad:63:5b:f2:
43:fc:f8:a8:01:ad:0b:1b:f5:06:c9:fe:2d:a0:ff:
28:0f:f6:7a:cb:96:cf:c6:fb:c8:ee:bd:ee:1f:99:
4e:54:79:61:4b:4d:7d:d5:16:67:20:2b:6f:57:07:
2f:9f:89:cd:e7:c1:9f:26:b1:d2:08:9c:82:c0:e9:
aa:68:fd:82:b7:bb:a7:e3:e8:ea:96:e6:e3:35:fc:
41:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6C:9C:4C:73:04:9D:96:57:59:02:96:41:DE:3F:B6:EA:BF:CC:DB
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/KmycTHMEnZZXWQKWQd4_tuq_zNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.34.0/24
Signature Algorithm: sha256WithRSAEncryption
07:7e:5c:c5:80:22:c9:4c:40:ba:bc:bd:5c:e0:be:4d:69:47:
d7:e3:b6:47:37:b2:e2:3f:53:f1:5b:39:6a:ab:b8:fd:53:8e:
53:67:8b:3d:e5:93:aa:e7:98:23:ae:fc:e3:20:dc:69:27:7b:
cf:c5:df:0b:0a:94:69:9a:21:cc:2c:d0:3e:63:56:1a:a3:0a:
a2:a5:30:ad:28:bc:57:9e:2a:f4:08:c6:ae:56:28:bd:5d:41:
68:37:94:f3:d2:72:23:e6:27:66:8c:14:46:f8:ea:15:63:40:
45:1d:a3:29:b5:30:39:4f:e2:62:38:f9:c6:71:9f:80:14:32:
ad:46:b2:2c:ba:a6:48:8a:9b:ac:4a:36:e3:68:9b:7b:b6:79:
7d:b2:97:1c:80:45:34:fe:e2:32:62:d8:b4:93:a1:89:94:16:
1b:a7:2b:99:dc:9e:62:9e:2f:f8:db:c4:3a:cd:73:86:d7:30:
79:22:1e:15:6b:f8:9e:2d:9f:a6:40:32:dd:7b:a8:61:6d:a1:
18:1a:d2:df:cc:0c:ed:09:fa:38:6e:86:1a:6e:5d:fb:af:67:
10:a1:25:26:e4:39:78:1b:f1:3b:c3:b5:83:30:ef:0d:8f:e6:
12:85:c3:7d:3e:7a:72:8f:53:18:0b:36:5e:3e:01:23:b3:89:
b6:9c:26:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:43:46 2024 by rpki-client on console-ams.rpki-client.org