Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/w2SK3S0qgG6B9n9UTw44f-MDfJI.roa
File: w2SK3S0qgG6B9n9UTw44f-MDfJI.roa (raw, json)
Hash identifier: CvdTTxkuyHVjvnIS+aZNU5dJ3lnoVjSePmuxJrf1JUA=
Subject key identifier: C3:64:8A:DD:2D:2A:80:6E:81:F6:7F:54:4F:0E:38:7F:E3:03:7C:92
Certificate issuer: /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial: 0192D82242ED903AB626006E0EC43A4F503C
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/w2SK3S0qgG6B9n9UTw44f-MDfJI.roa
Signing time: Tue 29 Oct 2024 11:56:16 +0000
ROA not before: Tue 29 Oct 2024 11:56:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50053
IP address blocks: 89.169.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d8:22:42:ed:90:3a:b6:26:00:6e:0e:c4:3a:4f:50:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Validity
Not Before: Oct 29 11:56:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3648add2d2a806e81f67f544f0e387fe3037c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:28:fc:26:fc:54:5b:78:43:eb:38:55:30:26:
90:12:73:15:d6:b9:74:b4:2b:98:29:2e:b2:22:d3:
86:e4:73:6b:00:76:9a:73:cf:9e:00:c6:fb:24:7c:
e3:a2:ae:60:dc:61:f7:17:62:f1:eb:d6:11:45:e5:
fb:ac:0c:66:9d:c5:f0:44:78:03:0d:5b:f6:bf:8b:
bd:51:86:ec:d4:a6:94:04:ce:ce:5b:22:5c:39:62:
ba:da:49:e2:04:13:65:c5:e7:9d:ca:21:f2:bb:be:
22:b9:2c:e2:f3:1a:e3:cd:91:18:2e:0f:c4:96:f7:
0c:e8:86:8d:16:ea:f6:7f:d1:cb:e1:80:9f:7f:31:
86:50:1a:34:63:3f:a5:ed:bf:09:6b:dd:ca:38:0e:
ab:81:db:1f:1a:d7:16:86:7c:3a:92:20:f4:cf:ca:
cd:71:04:69:e2:07:3f:fa:90:8e:d7:04:42:cf:d7:
06:c9:48:07:54:a1:38:86:c3:2d:02:5f:6a:ea:76:
95:b4:68:49:b6:73:eb:e1:23:3c:d4:79:81:d4:c6:
5d:c1:73:3c:5d:fc:2b:7c:99:33:d7:53:cd:a6:5e:
02:50:ff:a8:ff:92:e0:70:49:62:1c:d1:a7:db:42:
ca:4f:28:37:c8:9a:72:bb:2c:28:d3:04:b6:19:04:
f2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:64:8A:DD:2D:2A:80:6E:81:F6:7F:54:4F:0E:38:7F:E3:03:7C:92
X509v3 Authority Key Identifier:
keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/w2SK3S0qgG6B9n9UTw44f-MDfJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.169.4.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a8:a1:40:e3:8e:f7:da:16:a5:ba:6c:dc:95:a9:14:12:6e:
9b:bf:07:4a:e9:e7:07:7d:46:36:b3:c7:d1:54:1b:33:47:03:
52:8e:97:9c:97:fe:3d:89:89:d4:20:fb:3f:2a:33:b1:a9:a4:
c8:a9:a9:10:57:d8:16:47:1b:73:c9:e8:7a:12:77:9b:80:fd:
b3:66:ae:4c:db:89:72:8d:2d:2f:ad:73:cf:f3:23:33:ac:5e:
61:45:3c:8a:32:dd:03:e5:ba:02:4a:1c:10:d0:b5:9c:2a:81:
23:65:3e:be:e0:87:2e:66:12:60:40:3b:4d:95:df:eb:7a:ac:
72:a7:6b:b1:73:49:fe:f3:97:d4:80:a7:5c:c2:1a:5a:de:04:
ae:e9:ff:98:4f:eb:0f:e8:38:4b:1b:42:40:e2:9c:9b:12:5a:
48:eb:06:2a:43:50:12:94:ec:1f:2a:dd:15:0f:16:4b:2c:41:
5b:65:6c:b1:a1:42:a2:37:99:28:72:5e:45:f8:d2:41:be:06:
11:e5:a8:cd:57:03:89:28:59:c8:9f:2b:d3:78:12:4d:3b:2b:
14:f3:04:c7:d7:87:e6:43:0b:52:65:22:64:06:08:2e:a5:83:
dc:19:68:1d:fe:1d:93:a8:9d:5b:03:aa:64:d7:9c:51:dd:e0:
85:2b:1d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:33:17 2024 by rpki-client on console-ams.rpki-client.org