Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/p9ssHKqOI3A0vOt3M1sefkk8VvM.roa
File: p9ssHKqOI3A0vOt3M1sefkk8VvM.roa (raw, json)
Hash identifier: 5cwy4RfzVz046mhyLZCfDmbjFAwdtA+EoYSw397HWLg=
Subject key identifier: A7:DB:2C:1C:AA:8E:23:70:34:BC:EB:77:33:5B:1E:7E:49:3C:56:F3
Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial: 018E428E2DEE1559660D57A82DC9F66CE828
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/p9ssHKqOI3A0vOt3M1sefkk8VvM.roa
Signing time: Fri 15 Mar 2024 14:39:57 +0000
ROA not before: Fri 15 Mar 2024 14:39:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203953
IP address blocks: 89.150.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:42:8e:2d:ee:15:59:66:0d:57:a8:2d:c9:f6:6c:e8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
Validity
Not Before: Mar 15 14:39:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7db2c1caa8e237034bceb77335b1e7e493c56f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:e4:d5:07:68:9f:56:03:b3:af:5c:3e:22:
be:8d:db:bb:a2:45:1f:c9:64:5d:15:d5:3f:1c:ad:
25:12:b8:14:20:a4:40:91:1b:1b:90:f1:10:57:11:
fe:76:16:59:51:10:8e:00:5d:e6:45:ab:ab:ff:b0:
d1:a7:2c:87:6d:c4:e9:4a:eb:fa:71:4a:93:a2:85:
cb:4d:d0:27:59:9c:47:83:01:88:f6:b4:09:ba:22:
d7:55:44:2b:f9:8d:18:26:e1:3b:52:7f:8b:31:24:
c3:48:ae:fe:d6:ca:de:51:fe:57:56:94:ed:84:53:
e8:0e:b7:88:d8:4c:05:92:a6:b8:52:5a:e2:a5:eb:
8e:38:40:be:c1:52:e3:45:70:be:d1:a5:ae:ca:d5:
d2:b5:fd:82:ea:e8:19:3d:5a:6e:5f:9d:f5:27:2e:
8e:a1:37:26:52:e3:e1:01:d7:f0:66:35:fe:c8:52:
e5:17:4a:27:d4:36:da:b0:67:34:86:03:64:cc:4e:
6d:5e:cf:66:d9:96:be:c3:82:94:f8:c9:55:19:5c:
ed:e9:2a:d8:5b:3f:14:96:f8:aa:06:47:ba:81:c9:
24:5f:2a:31:fb:d1:b2:b2:cb:43:e7:3c:6f:5b:d9:
3d:93:89:4f:55:62:4f:d8:c4:69:92:85:a5:38:b6:
fd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DB:2C:1C:AA:8E:23:70:34:BC:EB:77:33:5B:1E:7E:49:3C:56:F3
X509v3 Authority Key Identifier:
keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/p9ssHKqOI3A0vOt3M1sefkk8VvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.128.0/18
Signature Algorithm: sha256WithRSAEncryption
90:86:88:d8:fa:71:53:ba:e6:52:1e:ca:17:33:ad:76:49:48:
4f:92:b3:8b:bc:fa:63:fb:52:08:55:d2:5d:4a:a5:bd:3c:00:
77:cb:c9:05:38:1a:5e:d5:8a:f2:d1:bb:14:34:83:c9:fb:c5:
f3:a1:30:61:07:68:f2:27:19:ad:c4:4c:f6:eb:5d:e4:54:30:
1d:27:78:58:ce:6e:a9:5a:f8:62:a0:f2:f0:b4:dd:2a:b8:7d:
d2:25:23:6f:e2:e8:f6:9f:53:39:70:c4:ab:6d:03:cd:4e:df:
a0:35:80:01:03:7c:58:bc:bb:7b:ea:43:07:81:3b:80:2e:29:
b2:11:d6:75:14:91:c2:cb:73:ea:a3:af:3e:3c:40:82:7d:ba:
f5:85:ee:c7:3f:5c:a4:54:2d:cc:5e:79:9b:11:62:86:c1:ec:
0c:47:73:03:5c:2d:af:e1:a2:c4:e3:be:fc:43:28:f1:a7:df:
0b:9a:0d:e0:31:b5:2d:1e:ac:14:e1:d8:53:17:11:df:87:e4:
f0:ab:07:83:4c:95:02:5d:9d:d6:57:01:59:4d:57:58:e4:b1:
28:98:7c:36:67:35:73:3e:94:be:fb:7f:50:e2:f3:65:a5:c0:
05:37:b0:42:7d:8a:cc:d1:8b:4c:86:4f:cc:bd:af:39:e2:45:
75:63:31:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:31:57 2024 by rpki-client on console-ams.rpki-client.org