Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0O2WRcvF_gaOLM6XMT8KajMx7uc.roa
File: 0O2WRcvF_gaOLM6XMT8KajMx7uc.roa (raw, json)
Hash identifier: 0FQy36ST2DcjYCBnphp74cNZnVhgbc8FfZF8wm0H4NA=
Subject key identifier: D0:ED:96:45:CB:C5:FE:06:8E:2C:CE:97:31:3F:0A:6A:33:31:EE:E7
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0190929B615D70875135569242870D746FEF
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0O2WRcvF_gaOLM6XMT8KajMx7uc.roa
Signing time: Mon 08 Jul 2024 13:49:34 +0000
ROA not before: Mon 08 Jul 2024 13:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205275
IP address blocks: 89.37.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:92:9b:61:5d:70:87:51:35:56:92:42:87:0d:74:6f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 8 13:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0ed9645cbc5fe068e2cce97313f0a6a3331eee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:e4:84:5c:57:aa:f7:6d:be:4b:3b:c9:9f:
e3:d8:82:58:b7:a8:f2:94:eb:fb:ae:b5:80:ad:81:
d7:a3:7f:83:f5:aa:cf:f9:41:bd:7c:4e:4e:5d:ab:
f9:dc:d7:cd:c4:d1:08:7f:ce:8b:23:74:e2:48:1e:
ce:f1:9d:3d:6f:d4:d1:b5:28:af:17:ca:34:da:99:
62:b5:6d:4d:f4:e1:de:2c:72:36:e6:23:9e:fb:a8:
b4:9a:0f:14:25:2c:cd:90:6b:c3:79:60:8f:19:70:
aa:bb:f6:9f:0b:04:37:70:58:bf:15:30:7f:19:fd:
2c:ac:81:7d:24:30:3c:0e:a5:1d:21:f2:06:38:d3:
48:bb:40:94:7c:aa:79:7b:62:04:df:7e:ac:a4:54:
af:53:10:75:9f:1d:0a:87:a8:17:f9:1a:b5:76:51:
84:6f:6e:6e:3f:00:a3:2f:59:5d:dd:01:63:51:3a:
20:2e:de:c6:8c:15:9d:8c:03:6b:cc:a6:fe:4b:3e:
18:93:fa:c5:74:e7:d5:d7:c1:b9:fb:0f:7b:03:0e:
a4:e7:e6:d0:5f:ec:4a:a2:98:a4:cd:f8:57:1d:49:
c6:d7:a8:bc:3f:77:b5:f4:c7:92:36:c6:9e:ff:a2:
eb:76:19:c2:a9:2a:e3:bc:d8:47:c5:cc:54:09:4e:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:ED:96:45:CB:C5:FE:06:8E:2C:CE:97:31:3F:0A:6A:33:31:EE:E7
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0O2WRcvF_gaOLM6XMT8KajMx7uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.118.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c8:7c:23:8d:d7:5d:ce:03:6a:0d:29:cb:8c:47:8c:7b:6f:
9f:b9:9c:ce:6d:76:1a:57:ee:6d:4e:3b:2e:ee:99:e4:13:c0:
90:af:95:50:9c:7c:7c:15:e4:1c:6a:aa:ba:1c:17:1c:f0:5b:
02:48:b5:86:7f:cb:e7:4d:f2:26:bc:a7:39:34:0e:3a:18:cd:
06:11:dd:2d:0d:41:7e:0a:63:64:8c:a8:af:10:d3:01:c1:49:
28:1e:1c:9f:53:b5:cd:9b:79:a0:c4:29:70:7a:ae:65:c9:02:
da:5c:16:6b:eb:16:8e:3c:9b:3b:bc:fa:80:9a:f6:93:3d:49:
66:72:51:37:ec:bc:b6:2e:da:db:e4:76:05:e4:76:08:91:f5:
58:38:70:c9:02:9a:b7:ac:51:5e:3a:19:fd:9f:e7:d2:5b:6b:
5d:6b:93:8b:9f:ae:f6:16:26:2b:28:df:39:c9:27:c2:fd:8d:
35:c3:5e:2a:3f:6b:3c:13:03:f2:3d:ca:81:77:07:b1:43:c1:
b9:ba:95:d2:af:a9:fb:08:9b:f8:9f:ca:bb:b4:ce:46:60:dd:
61:1c:5f:cb:2b:5a:97:d7:3a:1d:86:77:23:2d:2c:21:d4:33:
a3:8e:bb:5e:34:8b:3f:99:bf:77:5d:96:c8:8c:fb:80:32:0a:
7d:5d:69:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:39:39 2024 by rpki-client on console-ams.rpki-client.org