Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1_nRt-fiqRuMK3Z50V9x9ur0WYU.roa
File: 1_nRt-fiqRuMK3Z50V9x9ur0WYU.roa (raw, json)
Hash identifier: Qfok0rZX4WesXDc+Ti58mkYzvV3rm/xmSH1QW3B92NI=
Subject key identifier: D7:F9:D1:B7:E7:E2:A9:1B:8C:2B:76:79:D1:5F:71:F6:EA:F4:59:85
Certificate issuer: /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial: 0192D828AB435C085150C3E2C8A9B9B0D634
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1_nRt-fiqRuMK3Z50V9x9ur0WYU.roa
Signing time: Tue 29 Oct 2024 12:03:16 +0000
ROA not before: Tue 29 Oct 2024 12:03:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43581
IP address blocks: 89.169.5.0/24 maxlen: 24
89.169.6.0/24 maxlen: 24
89.169.8.0/24 maxlen: 24
89.169.9.0/24 maxlen: 24
89.169.10.0/24 maxlen: 24
89.169.11.0/24 maxlen: 24
93.183.68.0/24 maxlen: 24
93.183.69.0/24 maxlen: 24
93.183.70.0/24 maxlen: 24
93.183.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d8:28:ab:43:5c:08:51:50:c3:e2:c8:a9:b9:b0:d6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Validity
Not Before: Oct 29 12:03:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7f9d1b7e7e2a91b8c2b7679d15f71f6eaf45985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:5e:3c:d4:7b:46:ab:c2:46:87:8e:32:6e:
ae:4b:85:e1:ac:ed:7a:6e:29:dd:82:98:14:01:8e:
3f:22:70:85:8d:16:12:e5:dd:7c:bb:77:b3:15:9c:
74:e8:52:da:c3:c2:57:32:c1:d4:fe:b4:7d:fa:e7:
25:84:ba:08:e8:2a:44:6d:2a:30:6b:5b:84:f8:74:
be:d5:d4:3b:6d:7c:1d:59:af:e0:54:bf:ca:84:ac:
6d:26:38:41:75:20:cd:4e:97:1f:8c:a1:08:34:b1:
db:f8:b4:d2:45:3f:04:26:17:1e:fd:36:d9:91:e8:
8c:5b:90:33:3f:09:7f:b2:fa:01:a4:9f:42:bc:a0:
93:3b:5d:b9:f3:6b:89:29:b7:d4:f6:2b:63:5b:7d:
a5:32:c8:70:05:e6:b7:c4:04:b5:d8:e6:a6:c0:bb:
37:a9:25:0e:41:96:a6:f2:ec:5d:ea:02:18:d3:fb:
b4:83:52:23:19:1b:60:45:6a:1b:6b:04:55:87:14:
8a:56:b4:b7:f5:99:e9:62:78:0c:96:28:1e:28:d9:
70:6a:45:a1:f4:ee:bf:ec:63:4a:8e:24:51:25:a5:
83:4b:05:85:0d:d5:1b:58:ca:e5:ec:34:2b:e0:18:
be:45:cc:0f:0b:1d:96:83:de:03:58:34:3d:e5:4a:
e3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F9:D1:B7:E7:E2:A9:1B:8C:2B:76:79:D1:5F:71:F6:EA:F4:59:85
X509v3 Authority Key Identifier:
keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1_nRt-fiqRuMK3Z50V9x9ur0WYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.169.5.0-89.169.6.255
89.169.8.0/22
93.183.68.0/22
Signature Algorithm: sha256WithRSAEncryption
08:ca:17:4f:1c:b1:65:50:a7:44:8d:59:2f:bc:93:5a:7e:f8:
82:d6:84:09:52:32:6e:06:6e:4a:98:bb:ba:20:ed:6b:c0:26:
cd:b4:e1:67:6c:b8:2b:e2:9f:5c:3b:e7:38:0b:29:9a:48:1f:
0d:71:c9:c9:20:56:41:24:31:e1:b3:8c:4c:e7:e3:d3:ae:76:
18:c5:50:ad:6b:55:ed:4e:74:49:08:d8:a1:0f:1c:85:73:e7:
8c:b2:a5:c7:76:b9:e1:72:89:1d:32:82:df:94:7a:fa:12:1e:
b4:c0:61:7a:c5:4a:53:2a:b6:59:b3:be:17:ba:ea:c4:79:ef:
56:ee:9b:a9:c8:c3:5e:d8:db:9a:26:4d:e2:af:37:0a:7d:c4:
af:0c:a8:14:31:ca:35:37:d4:c4:58:6d:00:29:b0:0d:62:7b:
69:b6:be:bd:02:95:45:91:f1:e8:ac:7b:4c:ad:42:47:14:6b:
4a:fd:f3:2f:3a:79:6e:9b:08:d9:bf:b3:b2:f9:7c:1a:71:76:
8e:fc:09:17:f8:14:71:6d:58:bf:3e:19:d0:1d:57:8f:16:a6:
85:42:f5:fc:16:c7:4b:f1:59:1b:f2:a3:a8:87:0b:36:cf:64:
f7:73:0f:35:e6:4e:80:e2:98:09:1f:6b:4c:fa:94:b2:73:a9:
64:06:a7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:33:17 2024 by rpki-client on console-ams.rpki-client.org