Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/DdQBNmPCCIWjcbzG4ZYFO-DrIaM.roa
File: DdQBNmPCCIWjcbzG4ZYFO-DrIaM.roa (raw, json)
Hash identifier: 2aonJ8XYj1tcO0hB/7c9S4dWUAVsPaGZzwFcYEM1T5o=
Subject key identifier: 0D:D4:01:36:63:C2:08:85:A3:71:BC:C6:E1:96:05:3B:E0:EB:21:A3
Certificate issuer: /CN=cb608201f88aeae9486b9fa87189d796c54027dd
Certificate serial: 0192FC0D952455FDFB9AD55BB008E3FB0B43
Authority key identifier: CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/DdQBNmPCCIWjcbzG4ZYFO-DrIaM.roa
Signing time: Tue 05 Nov 2024 11:20:01 +0000
ROA not before: Tue 05 Nov 2024 11:20:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201150
IP address blocks: 89.23.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fc:0d:95:24:55:fd:fb:9a:d5:5b:b0:08:e3:fb:0b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb608201f88aeae9486b9fa87189d796c54027dd
Validity
Not Before: Nov 5 11:20:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dd4013663c20885a371bcc6e196053be0eb21a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:e3:5c:45:d1:36:2c:ca:7f:05:1e:eb:b8:
b4:2c:a1:fd:f7:d2:75:ab:45:a6:75:29:31:82:f2:
17:5c:9a:0e:cd:91:8f:8a:3e:0c:1c:6c:5e:d6:a2:
0b:40:19:c9:1f:9a:91:24:e9:27:9a:f1:53:79:b1:
7f:39:2d:38:52:19:94:a6:94:4b:55:4c:54:48:3a:
6f:b5:93:84:00:87:88:e0:c1:79:dd:70:4c:f4:3a:
43:f1:67:45:4d:b2:6b:a3:30:7f:ec:82:1e:dd:84:
14:87:22:34:64:a8:7a:8a:9c:b9:b5:72:d6:69:90:
ff:3f:a3:69:21:28:69:17:80:84:4e:13:11:f2:ec:
aa:44:43:a3:77:8b:90:da:87:b1:27:7e:bc:5b:07:
ed:14:3c:74:a3:ab:6c:2a:8d:0f:30:ed:57:a4:20:
18:22:85:cf:aa:3d:bb:92:60:c1:27:9d:57:bd:cb:
b1:77:fb:2a:1f:46:30:ee:6b:1f:b7:20:db:6b:b6:
b5:4d:70:9d:7d:fe:d0:ea:3f:12:14:3c:ed:6d:d3:
08:0d:8f:2a:db:14:bd:7d:19:ca:54:2f:06:f3:3c:
29:e0:84:5a:7d:ea:b9:13:3d:ee:d8:61:9b:a8:02:
d1:56:cf:83:29:4c:25:04:8d:0d:9f:d8:53:71:32:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D4:01:36:63:C2:08:85:A3:71:BC:C6:E1:96:05:3B:E0:EB:21:A3
X509v3 Authority Key Identifier:
keyid:CB:60:82:01:F8:8A:EA:E9:48:6B:9F:A8:71:89:D7:96:C5:40:27:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2CCAfiK6ulIa5-ocYnXlsVAJ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/DdQBNmPCCIWjcbzG4ZYFO-DrIaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ff10a5-2fa3-4942-b2a9-bfe52b4af8b7/1/y2CCAfiK6ulIa5-ocYnXlsVAJ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.126.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e4:b3:5d:3c:70:ad:02:43:c6:a5:4b:72:13:79:d5:db:6a:
e1:3f:38:62:fc:e1:5b:ab:af:f3:9b:55:5a:45:50:ad:b9:cd:
81:a3:d0:8f:47:5c:df:d5:39:26:04:52:b7:55:6b:ef:f1:94:
ec:d9:ef:25:98:a8:44:df:25:5e:dd:8f:ff:f3:33:93:e9:1d:
fb:02:f5:76:da:cf:04:51:75:68:07:b9:99:d0:cd:e7:7f:5f:
d9:48:9d:86:03:7c:0a:e1:bd:74:9b:47:4e:3e:cc:b3:b5:43:
88:6a:34:ba:a6:e5:24:8b:6f:cb:02:b8:5b:d6:90:7a:69:ed:
28:76:37:84:26:3d:60:56:28:66:bc:ea:71:ed:ab:8c:e8:f4:
8f:a9:50:8d:ee:cb:8d:14:0e:61:da:a7:4c:0b:6f:c4:44:05:
50:e4:05:4b:51:92:85:7d:d7:01:7f:de:f2:bc:29:a0:87:ac:
0f:4a:ec:7a:40:1d:43:14:69:da:1f:35:54:76:72:55:39:e7:
45:47:ad:83:5e:c0:94:84:95:d3:cf:98:27:4f:9c:16:5b:38:
fe:43:c4:a7:4b:db:7d:14:a7:53:46:85:98:b0:d6:a4:13:8d:
1f:b9:c2:b2:d9:90:d8:0a:1c:c8:10:d4:03:74:30:ce:50:4a:
75:5a:9f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:02 2024 by rpki-client on console-ams.rpki-client.org