Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/K9phGwvbVnYk7jztzD9ubl_zWt8.roa
File: K9phGwvbVnYk7jztzD9ubl_zWt8.roa (raw, json)
Hash identifier: pNGpdVrvPmj+hSOzPprSqdGzBXGK/imlAtS5RDU4o7k=
Subject key identifier: 2B:DA:61:1B:0B:DB:56:76:24:EE:3C:ED:CC:3F:6E:6E:5F:F3:5A:DF
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 018CC86FE793DF6DAAA7CAC6F8AAB0AEBC69
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/K9phGwvbVnYk7jztzD9ubl_zWt8.roa
Signing time: Tue 02 Jan 2024 04:30:26 +0000
ROA not before: Tue 02 Jan 2024 04:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14445
IP address blocks: 89.187.24.0/24 maxlen: 24
89.187.27.0/24 maxlen: 24
89.187.26.0/24 maxlen: 24
89.187.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:e7:93:df:6d:aa:a7:ca:c6:f8:aa:b0:ae:bc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jan 2 04:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bda611b0bdb567624ee3cedcc3f6e6e5ff35adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:98:16:12:4a:af:23:41:d4:09:de:e6:fb:
1e:71:72:3a:dc:de:62:25:9e:75:51:fa:69:36:45:
41:a5:69:3b:0f:ae:11:0c:e3:91:3c:f7:31:86:80:
f7:5a:a7:b1:57:5c:5b:54:db:ef:7d:1f:cc:59:ea:
ef:19:72:f1:97:e7:ed:c2:83:af:d6:e2:4f:41:22:
f0:d2:01:40:e9:b5:99:5b:be:00:d8:9d:44:d9:58:
77:8b:fd:05:ca:17:50:35:61:e9:7f:61:02:8b:8f:
57:08:f9:63:41:95:19:59:1e:e8:b7:d7:56:9d:ef:
66:79:2b:6a:69:60:e8:a2:10:b1:9f:24:99:a3:32:
c6:7c:97:2f:52:cb:28:be:11:36:13:b3:d5:5a:f5:
67:b1:a8:b1:02:ed:42:49:9d:79:42:0c:ca:20:fe:
a6:28:5f:6e:22:c1:fa:fa:fc:86:ca:36:11:5b:ba:
ea:7f:07:56:d8:37:b0:f0:6e:96:f3:26:5e:d9:0c:
95:9e:1d:de:66:39:a5:ad:70:19:8e:e7:2b:5e:ca:
b6:ae:71:3c:22:2b:70:18:6f:b7:4f:1a:35:53:64:
65:7b:4f:21:bd:25:67:8e:a5:e2:f2:89:b7:0a:2f:
73:40:c7:f7:93:e5:03:41:cd:73:70:e6:02:d5:77:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:61:1B:0B:DB:56:76:24:EE:3C:ED:CC:3F:6E:6E:5F:F3:5A:DF
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/K9phGwvbVnYk7jztzD9ubl_zWt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.24.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:1b:ee:53:70:ec:95:37:c9:d4:dd:b9:28:0c:3d:c1:ed:78:
08:11:ec:e9:58:cf:ba:1e:40:f9:0f:dd:53:0b:0f:bb:f4:75:
2c:ee:12:67:a6:37:de:fa:4d:b3:4e:e0:33:9d:3b:19:d6:14:
0a:ab:db:a0:59:b1:b3:b2:86:90:4e:c1:1c:f6:97:48:35:3b:
2c:d2:b7:01:82:bc:6c:bc:80:91:32:15:16:d5:d4:bd:be:a1:
7e:8f:31:72:41:7f:f5:fc:b4:03:ef:d4:19:3d:7b:5f:d0:d3:
11:9a:44:36:ba:84:bc:af:1b:c7:24:27:9e:9d:b0:b2:25:48:
01:c9:cc:b2:26:22:24:49:a8:64:e6:82:46:7a:a7:f8:10:7d:
95:b6:76:01:b0:b7:21:ab:4d:6a:b3:e8:7d:e1:ed:ab:2a:ee:
43:92:39:a6:eb:81:ef:e0:cc:b5:7a:85:c6:15:aa:67:a2:9d:
65:9c:a7:07:d9:51:e4:11:a2:92:ae:ab:fb:34:d8:0d:11:ae:
71:ca:31:30:4e:ec:50:61:a7:8d:57:ce:5b:87:e7:b2:1f:a3:
d3:2f:33:fe:a6:b5:6b:a6:b3:bf:19:4c:9f:60:61:85:22:f2:
44:a1:8d:ab:26:24:a2:bb:2b:4f:81:f3:e6:91:35:70:f7:3e:
c3:5c:f9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:10:17 2024 by rpki-client on console-ams.rpki-client.org