Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/RzTHo07fNKlUfCslD1Iw3DCesJw.roa
File: RzTHo07fNKlUfCslD1Iw3DCesJw.roa (raw, json)
Hash identifier: bYjoffGt/tMp42lgpp9HtvjeBSE9Okb9qt9+9CI255c=
Subject key identifier: 47:34:C7:A3:4E:DF:34:A9:54:7C:2B:25:0F:52:30:DC:30:9E:B0:9C
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 018CC2DB282950C6C52E9D9122C03036BEC8
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/RzTHo07fNKlUfCslD1Iw3DCesJw.roa
Signing time: Mon 01 Jan 2024 02:29:51 +0000
ROA not before: Mon 01 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18345
IP address blocks: 89.42.20.0/24 maxlen: 24
89.42.21.0/24 maxlen: 24
89.149.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:28:29:50:c6:c5:2e:9d:91:22:c0:30:36:be:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jan 1 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4734c7a34edf34a9547c2b250f5230dc309eb09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:0e:64:16:8f:d1:89:05:88:41:e8:8a:12:
d0:5a:48:1c:f3:57:f9:92:15:e9:c3:26:1d:68:c0:
b8:58:76:51:4d:cf:0a:22:f8:3a:99:06:75:59:2a:
b8:0a:3c:6b:c0:5c:34:0d:4e:dc:ba:06:26:af:68:
82:b5:f0:51:98:aa:61:4f:f5:d9:3a:3d:94:75:30:
ab:19:1a:dc:70:5c:d0:4c:00:13:01:a9:30:67:9b:
db:3c:f3:cc:ca:59:30:06:60:1b:d4:e9:0d:fb:e5:
11:ea:2d:34:1b:09:63:12:13:3c:e4:be:3a:45:38:
ab:11:58:25:2e:96:d5:4b:9c:50:23:89:1f:95:08:
5d:f4:d0:bf:3a:49:9c:43:7b:c3:00:bc:5b:e5:ac:
c4:61:ca:38:7f:82:99:ba:96:54:76:88:2d:cf:4f:
9c:6c:1c:06:08:cc:53:7e:12:e2:c1:c0:db:a1:ab:
99:64:0f:4f:cf:1d:3b:d7:98:c9:39:14:dd:13:04:
0e:e9:29:e4:9a:aa:4c:40:99:25:73:e9:60:ea:f8:
11:ed:93:7f:2d:41:a6:c8:30:6c:fd:53:99:ad:89:
1b:90:b9:25:b8:3b:9b:2c:ba:3c:45:43:e6:47:54:
f7:f1:9e:6e:02:7b:72:b0:52:dd:14:c7:df:4b:31:
d6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:34:C7:A3:4E:DF:34:A9:54:7C:2B:25:0F:52:30:DC:30:9E:B0:9C
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/RzTHo07fNKlUfCslD1Iw3DCesJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.20.0/23
89.149.63.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:43:ae:49:d1:28:e0:a6:52:7d:1e:ad:6b:ed:29:b9:12:3b:
5b:ec:62:00:2d:45:fe:e9:e1:bb:20:0b:6d:cc:5e:a3:57:8b:
81:07:2c:22:b4:f6:33:e8:3f:00:27:a2:f6:ee:c2:93:af:2b:
3a:33:68:1c:b9:25:8e:18:e5:8f:e3:74:5e:1c:ae:db:17:52:
bf:d1:47:1f:7e:9f:25:29:d9:7b:3e:de:a3:aa:0c:b3:09:f6:
77:b9:25:e8:05:9b:6e:7f:35:ea:95:0c:bb:80:77:6e:88:89:
68:61:01:c7:f3:80:bd:17:c0:bd:ca:8c:ca:9e:22:b1:9f:17:
4b:5d:f5:4c:d3:31:11:76:f7:0f:b7:e7:48:bc:2d:9b:a9:6b:
e4:ec:bc:5a:95:5c:75:44:a8:0c:91:76:42:f5:3b:ce:1c:28:
44:8e:ed:a5:a7:c9:a2:64:39:c0:f3:c6:3d:40:3d:4c:9f:5a:
e1:ad:3c:49:0b:23:37:30:8e:77:e3:df:8d:77:6b:eb:f1:c0:
1e:56:9f:ad:2c:87:d2:1e:88:66:5b:01:83:56:7b:1e:ad:0e:
51:7d:e2:cc:97:45:63:43:1c:ea:08:ed:39:e3:46:39:96:c3:
12:5b:84:e0:3d:ed:07:36:85:2d:67:e9:0a:06:9c:ff:6c:7a:
c7:cb:6a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:00 2024 by rpki-client on console-ams.rpki-client.org