Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/hsrsVcq9kse1LGZuzVZR9Exx9es.roa
File: hsrsVcq9kse1LGZuzVZR9Exx9es.roa (raw, json)
Hash identifier: 47oIBWqDgrp+97nATgJwRWwRAVj5NqIHtgqfh/Re6Ys=
Subject key identifier: 86:CA:EC:55:CA:BD:92:C7:B5:2C:66:6E:CD:56:51:F4:4C:71:F5:EB
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0192092A70420EF2CED5C4A9EA0A1D6ABD42
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/hsrsVcq9kse1LGZuzVZR9Exx9es.roa
Signing time: Thu 19 Sep 2024 07:23:49 +0000
ROA not before: Thu 19 Sep 2024 07:23:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214241
IP address blocks: 89.22.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:09:2a:70:42:0e:f2:ce:d5:c4:a9:ea:0a:1d:6a:bd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Sep 19 07:23:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86caec55cabd92c7b52c666ecd5651f44c71f5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:e0:6c:4e:1a:74:e1:c3:a6:e2:0b:c9:b1:
2d:52:c6:ba:3b:38:ec:b0:53:77:39:4e:da:ec:1a:
58:10:7c:cc:a9:ce:77:22:08:36:0f:0f:b3:9b:99:
e6:4b:94:87:31:d7:2e:bb:62:ea:97:42:39:c9:be:
a1:70:55:d0:d8:72:5a:8d:b4:63:19:67:cf:c6:41:
63:be:de:ac:40:34:8b:f0:3f:04:1b:1a:2c:77:18:
36:33:ed:a4:a5:fe:bf:56:08:2e:4c:95:6b:f6:c6:
9c:63:5a:2d:ea:df:5a:d2:94:79:08:c8:7e:ca:d7:
89:a2:fe:0f:67:d2:67:4c:31:63:48:7e:c4:6a:4b:
42:9c:11:87:84:fb:51:7c:bf:b1:77:8f:23:cc:6e:
c2:52:17:e5:8b:92:c9:41:da:47:f3:bf:57:18:96:
1c:cb:96:49:7b:34:6e:c8:20:9a:32:2f:5c:ee:e7:
81:63:37:8c:12:05:b2:1d:49:32:bb:91:d0:74:1b:
b6:0c:4b:b6:ad:38:b6:96:ed:d2:c1:6f:c0:3a:2d:
0b:82:25:8d:41:df:14:eb:95:8f:7d:8d:ca:1d:a2:
4b:75:f2:4f:e8:f1:ec:32:e4:82:d2:93:a1:3f:93:
39:c5:0c:c2:c5:a0:33:e2:48:50:11:1b:85:7f:4e:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CA:EC:55:CA:BD:92:C7:B5:2C:66:6E:CD:56:51:F4:4C:71:F5:EB
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/hsrsVcq9kse1LGZuzVZR9Exx9es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.194.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:df:39:6d:12:13:b6:5b:7f:a4:91:e3:27:01:1e:fa:de:2a:
66:57:f5:f3:03:d4:55:f6:e0:6e:7d:ab:9a:91:34:df:ca:0f:
e7:17:47:cc:47:2d:6d:3b:a9:87:3e:b1:6a:41:a6:c9:25:08:
bd:30:ca:68:8b:fe:67:aa:e8:0b:fa:83:dd:1c:08:b1:cf:d5:
df:82:10:ac:c7:24:27:2d:19:31:81:6d:df:ea:76:7f:cd:53:
28:5d:57:ee:d3:c8:e6:db:1e:fd:17:0d:d2:07:be:8a:af:f5:
3a:e5:95:e5:f9:42:df:a7:0e:7e:f5:49:be:04:73:cb:90:e7:
a1:41:a0:d9:0c:8b:8f:61:fb:9f:ae:ea:18:64:18:8c:f8:6a:
f2:b0:15:49:f6:fd:40:8a:19:2c:18:10:62:c2:8e:07:87:4b:
1c:14:45:36:4b:42:e1:11:b1:25:a9:29:fb:54:bd:4c:a8:ab:
d0:5d:9a:6c:06:41:d4:8c:a4:13:a6:65:91:a5:fe:ed:6d:c7:
9c:b0:64:4d:2e:49:eb:f9:81:ed:a4:28:bf:56:10:9d:08:1c:
e8:3b:bd:75:af:a8:20:21:48:6c:fc:98:0e:b4:49:bc:54:11:
7c:8f:21:52:38:cc:5c:69:84:58:86:4e:67:c7:c8:7e:82:16:
2b:2f:74:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:59:46 2024 by rpki-client on console-fra.rpki-client.org