Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/nKpow_ySVhMGmTi2pce6rga3xvU.roa
File: nKpow_ySVhMGmTi2pce6rga3xvU.roa (raw, json)
Hash identifier: Eb2Q8o34ULKvSBi+qFwOJnbe1JddV8md5Y8Vh0pvR8A=
Subject key identifier: 9C:AA:68:C3:FC:92:56:13:06:99:38:B6:A5:C7:BA:AE:06:B7:C6:F5
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 018D89DA359B621CF3552E2B84F459C10B44
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/nKpow_ySVhMGmTi2pce6rga3xvU.roa
Signing time: Thu 08 Feb 2024 17:53:15 +0000
ROA not before: Thu 08 Feb 2024 17:53:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213094
IP address blocks: 89.22.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:89:da:35:9b:62:1c:f3:55:2e:2b:84:f4:59:c1:0b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Feb 8 17:53:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9caa68c3fc925613069938b6a5c7baae06b7c6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:df:ea:ad:4c:22:98:c2:73:b1:7f:09:79:
5f:6a:53:67:f2:cc:ac:6a:35:90:76:f1:12:93:45:
f5:c2:12:c5:ce:fb:5c:95:d0:27:bf:5c:10:7a:e1:
7d:1f:3e:45:5e:1b:96:6b:64:a5:b5:a9:81:fb:14:
de:d9:51:fc:7c:57:49:ed:cc:01:5d:e9:b7:9d:a5:
de:0e:6e:60:39:18:e7:78:62:ee:4d:04:40:1a:48:
2f:43:88:ad:22:83:59:09:0a:b0:06:c0:b6:fe:06:
69:ab:6a:64:84:4a:00:e1:b4:0d:96:d9:33:9f:70:
a3:5b:3e:66:a7:d6:99:06:1e:49:74:dd:6a:3f:77:
f9:75:50:e2:1f:34:dc:62:e6:c5:86:d6:1f:a8:6f:
26:94:05:c3:7c:56:07:3f:66:19:39:54:62:fa:d7:
17:22:50:1f:f4:4b:71:be:31:73:28:b6:65:98:ac:
35:f9:b1:57:b9:e1:46:c2:87:c2:53:16:8d:ec:36:
44:47:31:32:cc:ac:c3:a1:7c:5e:88:ba:81:80:54:
5d:c2:33:d6:4f:5d:27:5d:59:91:8b:61:f7:dc:20:
de:b5:d9:47:f4:a9:6b:4c:31:fd:c2:07:0a:72:89:
f1:23:6c:1a:42:4e:54:d4:2a:98:b5:6b:4b:c9:75:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AA:68:C3:FC:92:56:13:06:99:38:B6:A5:C7:BA:AE:06:B7:C6:F5
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/nKpow_ySVhMGmTi2pce6rga3xvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.196.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:68:b9:c3:d5:34:e7:a3:94:94:1a:45:6e:a9:69:25:ee:d4:
23:01:8c:4b:61:07:84:63:66:89:19:93:b1:8c:d7:75:f9:27:
c2:53:d4:8c:12:d3:bc:9b:60:76:a7:db:d9:ba:c0:f8:32:20:
39:ef:b8:17:2b:71:7b:49:13:a4:1e:0b:5a:a9:de:5c:dc:1e:
77:ec:2a:cc:c3:df:47:80:4a:a8:24:56:0b:cf:3a:79:87:39:
14:87:89:90:32:7b:4a:25:0b:89:a2:b2:45:38:b0:e5:e1:5d:
48:33:6f:be:63:2b:eb:7b:22:95:ba:bf:87:dd:56:10:ec:48:
60:d7:aa:7d:50:fe:a5:f8:8a:92:1e:3b:9e:48:9e:a8:dd:45:
99:e4:a1:f7:29:74:9f:27:73:02:fe:77:0d:99:cf:ae:6f:a1:
d6:57:a2:80:85:ff:1e:f8:a8:92:b0:dc:8e:41:63:42:a6:88:
14:cc:ae:c9:26:15:59:d2:44:1c:2c:51:5f:81:24:b2:56:ad:
ed:38:14:29:e7:f4:c8:28:d7:8d:35:07:c9:8a:b0:74:5c:81:
a3:fe:18:c6:4d:29:11:a1:3f:76:14:a1:93:56:fc:d0:18:1b:
63:c7:1c:f2:07:d1:c4:1e:b7:ba:80:36:ea:a1:8e:ce:7e:20:
3b:81:66:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:41:07 2024 by rpki-client on console-fra.rpki-client.org