Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/nBnDZW3QgjIP38rT8hhQ_IMGoPw.roa
File: nBnDZW3QgjIP38rT8hhQ_IMGoPw.roa (raw, json)
Hash identifier: qRrXWGUP9+F63PG0VBslXeIw6Z8H4TK8XiM5vVtvmBM=
Subject key identifier: 9C:19:C3:65:6D:D0:82:32:0F:DF:CA:D3:F2:18:50:FC:83:06:A0:FC
Certificate issuer: /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial: 018CC94E490689FB7978F7FA4215A3A154A0
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/nBnDZW3QgjIP38rT8hhQ_IMGoPw.roa
Signing time: Tue 02 Jan 2024 08:33:20 +0000
ROA not before: Tue 02 Jan 2024 08:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8860
IP address blocks: 89.187.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:49:06:89:fb:79:78:f7:fa:42:15:a3:a1:54:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Validity
Not Before: Jan 2 08:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c19c3656dd082320fdfcad3f21850fc8306a0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:46:95:b3:6d:d0:67:1a:22:2a:94:2d:2a:
8e:8c:37:ba:f6:8a:81:0b:05:a4:bc:ab:d1:d5:61:
12:1c:ac:5e:ba:d0:0a:d1:2f:d2:a6:fe:bc:e9:5f:
c5:de:7e:d2:5d:09:75:fb:83:43:66:cb:dc:6b:4a:
ed:ea:55:e1:bb:7b:cf:36:93:4c:d7:dd:e8:67:04:
98:ad:7b:2e:f0:68:a9:d0:3e:42:05:66:a3:a2:91:
5b:b5:07:e5:5a:d6:57:82:89:be:92:f2:f7:b6:0b:
a4:b8:0b:f4:9f:85:88:bb:c0:fc:50:1e:8b:e0:b4:
19:4b:c8:87:db:c8:28:4e:84:71:18:43:48:25:6e:
96:f1:4b:63:d8:15:95:2b:a0:a1:9b:73:15:3e:99:
0e:79:ef:8e:74:0b:b7:36:67:f2:fe:f0:f7:36:78:
75:a7:ca:60:57:7c:d9:4c:4d:7e:74:01:2a:6c:c5:
68:31:4d:12:c8:e4:ed:d7:25:50:9b:3c:02:65:bb:
08:75:9f:9c:fc:83:78:62:0c:a3:b0:a7:2b:d4:ab:
1f:bf:aa:f7:fc:e0:c8:ab:b2:f3:93:86:e7:e2:93:
ff:99:d7:12:3b:fa:59:6c:32:e2:e8:bf:26:bd:14:
41:94:f8:2f:79:3e:5b:c9:01:06:44:3c:57:bb:12:
68:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:19:C3:65:6D:D0:82:32:0F:DF:CA:D3:F2:18:50:FC:83:06:A0:FC
X509v3 Authority Key Identifier:
keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/nBnDZW3QgjIP38rT8hhQ_IMGoPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.83.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:3e:9e:d9:86:07:b4:31:2d:e5:5e:10:c6:b6:db:99:60:a5:
7c:bf:ad:f4:16:98:0f:2b:34:2b:85:38:6b:ef:99:2d:7d:87:
21:04:09:cc:75:a2:35:c0:fa:e5:b1:a5:1b:25:1d:51:df:49:
20:ce:23:e2:4d:24:c8:aa:af:60:c5:0a:3e:c3:8b:e1:35:8d:
ac:78:fb:a8:4f:29:b3:ea:87:58:4a:74:ae:a9:f9:7e:59:b9:
a7:11:84:4e:25:ab:4f:2b:11:71:ae:06:fb:af:6b:93:d0:e7:
80:1e:12:b4:f3:70:b0:6d:28:cf:34:8f:75:46:25:3d:e1:28:
df:6e:38:79:1e:fb:5f:3b:c5:50:78:a0:c4:dc:b5:ad:c3:c1:
19:ef:2c:f9:41:10:6a:5b:82:de:6f:1e:aa:ff:18:9d:eb:45:
7a:a9:15:e0:c5:66:98:eb:7c:18:5a:93:3d:9b:e0:83:b1:2c:
01:63:85:85:bd:e5:e9:bd:f1:1a:71:c0:54:9a:ec:b9:ea:78:
6e:73:33:e7:81:77:e7:9e:21:9c:dc:92:1c:f6:20:c0:f8:8c:
89:3c:5b:4f:0b:c9:cc:3e:55:cd:31:6c:50:7f:a7:85:97:ac:
4b:90:db:53:a0:39:86:6a:18:76:07:86:a1:a0:fd:c1:b0:56:
5d:18:7d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:37 2024 by rpki-client on console-ams.rpki-client.org