Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/m5l4w0wF17UCUn5Ex5GlLiaA4RQ.roa
File: m5l4w0wF17UCUn5Ex5GlLiaA4RQ.roa (raw, json)
Hash identifier: uTsN7IJWOvH7W26Io38pz9mBf3xbumXcTsy5ZhSWxG0=
Subject key identifier: 9B:99:78:C3:4C:05:D7:B5:02:52:7E:44:C7:91:A5:2E:26:80:E1:14
Certificate issuer: /CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Certificate serial: 018CC8DE71548B770A47099BB3A7A5766CD3
Authority key identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/m5l4w0wF17UCUn5Ex5GlLiaA4RQ.roa
Signing time: Tue 02 Jan 2024 06:31:10 +0000
ROA not before: Tue 02 Jan 2024 06:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60090
IP address blocks: 89.200.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:71:54:8b:77:0a:47:09:9b:b3:a7:a5:76:6c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Validity
Not Before: Jan 2 06:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b9978c34c05d7b502527e44c791a52e2680e114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1f:8c:21:d8:bd:63:c3:c6:a8:7d:c8:d6:12:
fc:0e:3d:c7:40:44:0c:e1:1b:64:7d:a1:7e:6c:18:
42:8c:d8:ad:7e:a1:be:4a:8b:40:87:b4:59:34:5a:
cc:0c:8e:f0:b7:8e:ab:66:3d:5a:30:f5:34:57:f3:
f2:8e:45:2a:52:4e:e1:46:70:86:49:43:ad:6c:ba:
b7:a3:b5:ce:eb:fc:13:4c:f4:2d:44:76:84:13:85:
4d:e7:fc:af:92:dc:10:1c:cd:ee:52:e0:d4:e6:2e:
10:cc:28:0f:59:77:fd:52:14:b5:5f:ca:5d:6e:ae:
4a:73:68:02:63:a2:3a:aa:ab:58:69:fe:60:65:12:
2a:f6:a6:cf:76:58:29:36:7b:92:bc:65:92:77:4c:
68:33:7a:12:25:13:f3:f0:4f:b3:b3:8d:66:6e:b0:
16:6b:a1:c8:f3:bc:6c:ab:55:3e:b6:3f:8d:53:eb:
d4:9c:4f:35:76:f4:8b:2c:40:c9:e7:4c:d8:66:39:
96:9c:ed:e7:f8:f1:7d:63:8b:64:ae:a6:44:54:2d:
b8:a8:45:0d:47:49:7f:98:32:d2:67:af:fc:25:e7:
6d:5f:97:6e:c3:24:37:17:44:59:90:13:c2:49:fb:
ac:87:8a:05:6d:e0:77:e3:4b:22:a7:75:2f:b1:f6:
a8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:99:78:C3:4C:05:D7:B5:02:52:7E:44:C7:91:A5:2E:26:80:E1:14
X509v3 Authority Key Identifier:
keyid:4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/m5l4w0wF17UCUn5Ex5GlLiaA4RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.200.243.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:c1:91:c4:ef:53:17:c2:50:7d:f2:a8:87:d8:a8:58:63:70:
45:b3:31:f3:b5:93:5d:0b:55:f8:21:03:14:ae:8a:6a:85:1a:
b5:be:08:38:db:de:4c:e4:b5:3b:e2:37:e3:7b:77:f3:59:4c:
4a:b2:02:ed:bc:6d:1f:9d:05:5b:06:ce:ce:9d:c9:16:0b:35:
37:23:6b:d4:61:ea:69:6e:1b:34:4d:56:83:ae:9c:dc:df:71:
08:8d:b7:e7:42:98:ed:fe:d5:27:64:05:be:23:f1:63:0f:6b:
78:a3:a6:a0:6e:a7:a7:17:f3:0b:93:d2:ca:3a:d0:b0:80:9f:
c1:08:b3:a0:49:02:58:0d:b4:3b:aa:09:8d:d1:0f:29:df:d2:
91:c8:29:36:d3:0d:c7:b1:a3:16:21:cf:7a:d6:1f:e7:1f:5d:
56:da:d0:93:90:40:3b:c5:ad:71:3e:5f:5f:e8:83:d9:d1:85:
04:20:4a:0f:16:3d:ec:95:48:2a:08:09:c8:89:56:5f:4d:bc:
58:8a:b8:23:32:39:20:1c:fa:70:4a:c5:1a:67:54:39:0e:e8:
9e:83:a0:a8:79:dd:ba:b5:30:df:a0:d2:57:56:fd:86:d5:57:
e7:d2:d8:64:49:76:38:ce:60:0f:8b:e2:52:a1:d0:93:17:22:
df:ff:8e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:15:49 2024 by rpki-client on console-fra.rpki-client.org