Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/DugZ0HHGXwCd7mqxHuDjHggZr78.roa
File: DugZ0HHGXwCd7mqxHuDjHggZr78.roa (raw, json)
Hash identifier: GDQueoS1j3lJ/9ckaws76OqHv1X0wlceTNLh3z+/1Jk=
Subject key identifier: 0E:E8:19:D0:71:C6:5F:00:9D:EE:6A:B1:1E:E0:E3:1E:08:19:AF:BF
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 01935326A0CF894DB14837058CDBE04AA466
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/DugZ0HHGXwCd7mqxHuDjHggZr78.roa
Signing time: Fri 22 Nov 2024 09:14:20 +0000
ROA not before: Fri 22 Nov 2024 09:14:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50265
IP address blocks: 89.169.44.0/22 maxlen: 22
91.233.88.0/24 maxlen: 24
193.106.68.0/22 maxlen: 24
2a00:46e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:26:a0:cf:89:4d:b1:48:37:05:8c:db:e0:4a:a4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Nov 22 09:14:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ee819d071c65f009dee6ab11ee0e31e0819afbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7e:1d:84:a5:a4:aa:4e:11:15:39:28:0e:be:
1e:b1:34:70:d7:37:21:a5:f0:1c:9b:74:d3:49:3e:
78:04:f0:5d:c6:5a:b1:16:ca:ce:8d:d7:c0:0d:61:
93:48:ee:f8:61:4e:f6:46:25:8d:85:4d:10:15:54:
6d:e0:d2:73:6b:3f:54:60:73:c4:24:6d:96:28:10:
50:6d:8d:09:6b:f7:e9:ba:f3:da:99:0a:95:d1:f4:
8c:a0:9d:04:7d:50:bb:87:af:dd:e7:07:66:46:4e:
78:75:b4:69:d3:47:c0:d5:fc:63:c4:5f:07:2e:5d:
8f:50:92:87:ed:6b:8f:af:6a:e5:2c:b9:bf:fb:1a:
80:a5:b0:0d:ec:4b:ee:35:86:7a:0d:2f:19:ab:7b:
e2:31:e8:ee:ac:f8:06:da:74:61:f7:24:e9:7d:70:
7b:7e:fe:d4:f2:e3:44:c1:a7:81:d6:9d:f7:a9:eb:
73:84:d4:6e:46:4d:8f:ef:77:73:3f:8e:7c:e8:32:
c4:89:bd:80:86:db:cc:c4:05:8c:ce:e5:b4:cc:14:
1f:4f:42:62:24:e0:66:99:95:de:f5:d3:4e:d6:28:
38:d9:79:76:8e:47:eb:47:3b:69:ec:a7:e1:65:c9:
ee:d7:cc:0b:3a:16:1b:56:b5:90:92:6b:85:88:f9:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E8:19:D0:71:C6:5F:00:9D:EE:6A:B1:1E:E0:E3:1E:08:19:AF:BF
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/DugZ0HHGXwCd7mqxHuDjHggZr78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.169.44.0/22
91.233.88.0/24
193.106.68.0/22
IPv6:
2a00:46e0::/32
Signature Algorithm: sha256WithRSAEncryption
90:b9:01:1e:aa:89:d9:e6:be:95:51:e2:cd:47:bc:01:bc:12:
c3:89:d3:3e:0e:b5:39:f9:81:08:98:91:b3:fa:1d:c8:4f:11:
ea:13:25:32:b6:e8:f4:c9:a5:64:83:e4:ab:05:67:94:2f:ea:
8d:f6:91:ba:24:64:0d:06:91:0c:65:60:80:82:ec:8a:69:08:
45:66:ba:ef:2f:4b:0a:ab:aa:e8:9c:71:26:60:ec:da:13:8f:
88:f1:95:05:1f:97:c6:ac:33:72:e2:db:92:74:64:3a:50:bb:
a0:41:62:40:2d:2e:94:c9:d7:7a:0b:3d:b0:4a:08:fb:af:a9:
5c:86:88:e1:04:a3:e7:bd:df:b3:3b:04:90:44:f2:15:d1:55:
88:5b:f9:72:d4:aa:02:d1:be:c8:e5:ce:fc:91:59:3b:b0:98:
e2:db:26:3d:64:1f:1b:ad:b8:29:37:a9:98:6b:90:6c:49:71:
f3:6a:d9:6a:54:11:7b:89:b3:c7:03:02:10:27:50:9a:2e:f0:
39:b1:f3:6c:e0:71:6d:53:3f:e4:2a:ef:5a:79:fc:df:59:61:
44:1b:22:57:92:57:c2:d9:05:da:b8:53:23:e4:59:1f:9d:97:
da:de:58:91:8e:74:4c:a0:5c:11:21:6d:78:10:be:82:00:27:
00:b8:d4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:43:33 2024 by rpki-client on console-ams.rpki-client.org