Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/X_fFGTiNFW2GfQftRNE0tBB_CTo.roa
File: X_fFGTiNFW2GfQftRNE0tBB_CTo.roa (raw, json)
Hash identifier: WoaY40S8wzSsT7nB8xogPvI6Zi13JjeOfxUuSwHA9ts=
Subject key identifier: 5F:F7:C5:19:38:8D:15:6D:86:7D:07:ED:44:D1:34:B4:10:7F:09:3A
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 018ECDAF14DAC986ACFDAD07134E7B470C7E
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/X_fFGTiNFW2GfQftRNE0tBB_CTo.roa
Signing time: Thu 11 Apr 2024 15:03:07 +0000
ROA not before: Thu 11 Apr 2024 15:03:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50309
IP address blocks: 217.18.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cd:af:14:da:c9:86:ac:fd:ad:07:13:4e:7b:47:0c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Apr 11 15:03:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ff7c519388d156d867d07ed44d134b4107f093a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f8:f9:30:68:76:8f:6e:c6:f8:1f:aa:63:fc:
f2:84:97:74:48:92:b2:78:d6:37:7e:d9:2c:9c:41:
45:a5:40:0f:65:07:07:ac:92:b3:9f:a4:c6:78:62:
b1:25:e7:ae:44:33:8d:0b:8b:e5:9b:06:ac:0c:75:
4e:12:d7:e8:6f:31:fe:32:ee:c5:71:6a:a0:5a:ee:
20:23:46:c7:db:0e:e6:8e:a3:a4:18:2d:4b:c0:8f:
b4:0c:a8:46:22:ef:ec:0d:ec:23:d2:df:be:42:0b:
95:30:25:0a:80:b7:53:9b:45:1d:01:45:ba:a9:f3:
80:8a:80:15:cb:f2:1b:bd:68:21:ae:d2:3f:ba:32:
7d:74:76:ba:ab:95:71:79:0a:ac:0b:14:d4:ed:a8:
dd:cc:2c:49:2c:e1:e7:94:27:a4:e3:1d:30:f5:6a:
72:38:90:73:51:04:a3:ce:ca:0c:b6:8c:05:91:a9:
4b:cb:66:ec:0c:2b:92:62:70:c3:80:55:98:32:08:
16:a0:ce:12:61:49:12:75:19:3f:a7:96:78:81:10:
7e:1a:87:ae:0b:d1:26:ae:da:99:90:8d:f2:eb:34:
7d:8f:18:5d:97:94:81:6c:4f:81:08:b3:3d:e2:e5:
aa:95:d8:04:51:9a:b5:92:f4:72:12:d9:1e:47:d4:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F7:C5:19:38:8D:15:6D:86:7D:07:ED:44:D1:34:B4:10:7F:09:3A
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/X_fFGTiNFW2GfQftRNE0tBB_CTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.89.0/24
Signature Algorithm: sha256WithRSAEncryption
26:71:3f:bb:71:35:3d:87:f9:08:26:23:f6:30:cf:f2:a1:d1:
1d:6f:0e:8c:8e:1f:25:6e:43:08:6d:1b:54:93:ba:ff:39:be:
42:6d:08:c3:03:e4:4b:28:44:e3:58:26:e9:5c:ff:33:7d:03:
06:aa:50:80:59:6c:2b:4d:df:9b:6e:b2:10:9c:8a:28:9c:7a:
93:59:ba:d0:e7:0f:95:43:10:13:97:1d:9b:ee:eb:c1:55:c5:
3d:3e:f3:c0:17:b7:4e:b3:24:53:32:46:ca:96:55:9e:ed:0a:
f5:f9:45:de:ea:c6:08:c8:d4:e3:dd:b6:d9:bd:d1:30:e3:9a:
ee:1e:d6:08:ad:ac:42:e8:66:33:07:c8:e4:f0:de:19:3d:5a:
b4:31:28:cd:8e:68:bf:00:02:26:5d:8d:32:b6:7d:b6:2a:d4:
12:39:9c:84:3f:96:95:59:95:a9:8b:7e:97:19:35:53:6d:fa:
dc:ca:ce:82:ca:f8:57:7b:3d:72:ae:67:a5:c3:28:0f:dd:7a:
98:ea:50:41:5b:08:c1:d6:ca:29:5b:62:1e:ea:e7:70:02:34:
4d:24:3b:67:cc:92:ee:a2:86:a2:8f:cb:70:9b:e8:4a:5c:de:
9e:9a:4c:10:e9:fa:55:aa:dc:be:5d:69:d2:bc:71:c7:39:d3:
57:81:f3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 11:48:44 2024 by rpki-client on console-fra.rpki-client.org