Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/bSXXByjX4ABueVmz7_oe4wGlUnc.roa
File: bSXXByjX4ABueVmz7_oe4wGlUnc.roa (raw, json)
Hash identifier: iwswvOATIevzG17rXtU8Co41yyT6Qu3yisOHfrsjYgI=
Subject key identifier: 6D:25:D7:07:28:D7:E0:00:6E:79:59:B3:EF:FA:1E:E3:01:A5:52:77
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 018CC94E6CDFB0BE925F4E3D76A20DC1956F
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/bSXXByjX4ABueVmz7_oe4wGlUnc.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36224
IP address blocks: 89.39.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6c:df:b0:be:92:5f:4e:3d:76:a2:0d:c1:95:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d25d70728d7e0006e7959b3effa1ee301a55277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:9c:01:c9:81:3c:02:41:08:d1:4f:07:e3:
b7:23:98:bb:07:f0:f6:58:c9:20:fb:17:c0:70:0d:
5e:73:3b:d6:48:8e:c7:4f:05:ce:05:d7:9c:7d:2f:
21:dd:09:6d:c6:41:49:94:27:0d:0e:b5:54:fe:a1:
32:c1:76:84:dc:57:b5:cd:c6:72:76:dc:fd:6c:d2:
50:5b:ee:df:84:19:34:9b:25:e6:f9:5f:6a:d7:d9:
df:a6:82:c5:a3:e1:9e:f6:00:fd:de:bb:c3:8c:91:
97:9b:af:b8:fb:e5:31:e2:4b:ff:3a:25:5b:14:db:
a7:eb:bb:69:d4:79:33:43:9e:4f:89:d4:ba:49:94:
de:dd:fd:e2:5b:80:2b:91:53:43:d7:f8:7d:83:bd:
10:14:26:01:db:ed:6a:ba:b1:5d:c4:36:64:03:c4:
a1:d9:bf:12:81:d0:2e:3d:74:06:ad:e7:06:7e:ea:
8f:3e:80:34:93:13:4d:f4:4b:58:6e:ff:1b:81:70:
a5:80:f4:46:d8:1c:70:27:86:00:89:5f:c3:6c:64:
d4:73:55:ec:bd:3c:d5:46:52:a5:23:77:cd:be:0f:
a4:44:8c:d7:0c:87:55:0b:13:c7:dc:0d:88:ab:95:
b7:c5:50:50:f1:c8:14:ff:6b:48:63:9f:19:1a:8b:
8d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:25:D7:07:28:D7:E0:00:6E:79:59:B3:EF:FA:1E:E3:01:A5:52:77
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/bSXXByjX4ABueVmz7_oe4wGlUnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.6.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:ed:25:18:a4:78:22:17:ff:56:ac:53:9d:2e:65:7c:d5:8d:
46:0b:d3:47:01:2b:86:0d:0c:b3:fc:c8:93:b9:73:b0:65:35:
de:c8:ce:8b:0d:6e:2c:1d:11:f8:eb:a1:48:57:16:19:b8:f8:
cb:65:96:5b:06:dd:c9:e3:4a:a7:00:b1:e3:d7:9f:8f:d3:29:
7f:e2:3b:07:a6:83:ef:67:c1:fe:2e:77:96:cd:fa:6f:e0:6b:
ce:74:9b:68:2f:2e:35:37:90:e2:b4:5f:56:c7:39:c3:08:60:
30:81:75:7f:db:d0:df:e8:c5:ee:d0:27:de:94:93:c4:8f:6c:
02:3b:99:ed:87:6e:8a:de:c4:97:6e:2d:60:c6:0c:bf:42:87:
c4:36:1e:35:f4:bc:c2:6f:7f:0e:01:6d:d9:97:15:38:84:45:
6a:f3:3b:57:3d:89:da:75:15:de:90:7c:a1:3c:3a:20:a9:c8:
91:29:19:6f:57:85:6f:52:a1:43:5f:52:53:df:bd:e8:d4:a9:
df:c7:50:be:2b:2d:14:fe:30:17:b9:9d:10:da:0d:64:da:c4:
0b:54:dd:33:24:07:f8:4f:0f:ce:00:0f:1e:7f:3d:f2:75:cb:
d9:0e:82:f9:2e:27:bf:e6:55:61:95:be:3f:c5:67:2f:b0:85:
7e:26:ae:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:39:20 2024 by rpki-client on console-ams.rpki-client.org