Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2rFQRvUCx11G2FfPKHvnq67tQLU.roa
File: 2rFQRvUCx11G2FfPKHvnq67tQLU.roa (raw, json)
Hash identifier: SuGo/yi5kmqk0IBou1o6UCkEjbQaxF/CJr5J8DyVDiI=
Subject key identifier: DA:B1:50:46:F5:02:C7:5D:46:D8:57:CF:28:7B:E7:AB:AE:ED:40:B5
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018F2876274D7B5FA5117C62EB8270DA9866
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2rFQRvUCx11G2FfPKHvnq67tQLU.roa
Signing time: Mon 29 Apr 2024 06:06:22 +0000
ROA not before: Mon 29 Apr 2024 06:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 89.42.85.0/24 maxlen: 24
89.46.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:28:76:27:4d:7b:5f:a5:11:7c:62:eb:82:70:da:98:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Apr 29 06:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dab15046f502c75d46d857cf287be7abaeed40b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:6b:88:76:6e:e3:b4:b3:f0:d2:01:1b:aa:
80:8f:8d:ab:02:cd:fb:e6:30:2d:a2:a8:d3:b3:8c:
43:9e:46:15:8a:e1:b3:12:d7:27:d6:84:cf:cb:4f:
18:b2:45:9e:b9:37:ff:89:35:ce:36:a2:33:ea:76:
71:29:58:bb:c8:f0:8e:c4:02:7b:af:c6:33:fe:70:
34:04:f3:fc:65:98:5d:9b:0e:2e:c5:fe:93:10:3a:
9d:0d:8a:d0:9c:e7:3d:54:60:32:23:cd:af:a0:df:
19:3b:2d:4e:2c:15:36:66:48:05:f5:ad:ff:63:0c:
21:74:2e:a4:99:3c:18:66:08:36:d1:5c:dc:3c:b3:
b6:7a:b3:df:c5:b1:e6:04:2c:2a:e4:14:e3:ec:de:
66:ec:2a:ac:fe:62:06:5f:62:90:21:cf:20:05:6a:
66:40:68:98:15:8e:7a:1e:62:8e:64:71:a0:25:a9:
11:8a:45:50:f4:57:44:69:b8:ba:12:4d:a8:4a:50:
7f:5a:fc:95:8f:ea:63:7e:00:76:c6:b1:c6:2f:b7:
ae:0a:2d:e2:3c:25:c9:db:11:ba:63:7e:f3:67:54:
56:8e:b4:4f:a5:1f:5e:df:ce:fa:2d:64:f5:58:18:
37:50:f3:9a:92:76:54:be:ce:36:db:39:fa:fd:53:
31:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B1:50:46:F5:02:C7:5D:46:D8:57:CF:28:7B:E7:AB:AE:ED:40:B5
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2rFQRvUCx11G2FfPKHvnq67tQLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.85.0/24
89.46.2.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:82:8e:47:93:d8:ad:08:56:df:fd:a9:2b:c9:92:2f:44:e0:
61:97:82:4f:4e:bf:9b:17:fc:1e:8f:d7:80:06:87:ef:3e:26:
57:61:d8:8b:66:d4:b1:b9:a3:db:8e:44:cd:ac:cf:7d:78:b7:
83:f2:ef:10:1c:40:e5:af:a8:65:bf:2e:be:8a:c2:68:bf:f3:
49:b2:28:02:0f:f0:7e:95:01:ae:90:34:1d:95:95:19:87:44:
ed:25:98:f3:29:3f:1d:64:e3:19:c4:34:a4:1d:e1:b0:3b:f9:
a4:98:4a:b0:5c:9f:cb:5a:c2:14:ea:ab:47:94:24:4c:c3:f1:
48:ce:a5:19:fa:bf:4b:94:00:82:ed:da:8c:51:dc:5f:ae:bc:
10:f3:87:eb:62:fb:ba:54:30:52:f4:71:7f:33:07:01:f5:cf:
ae:b8:13:db:d5:da:6b:8d:17:60:5b:76:58:3a:e0:26:47:72:
e2:7c:7c:d6:e1:2c:72:b8:3b:e7:64:23:94:4f:7b:3e:7e:bd:
d8:58:bc:cd:d6:ec:98:da:78:96:7d:c4:16:dc:5d:c5:e5:22:
ee:69:b6:0f:6a:23:77:b7:96:cd:81:7e:e7:72:8d:bb:bc:04:
06:1b:32:bd:4a:bc:df:2c:03:d3:77:17:76:22:be:6d:f9:0f:
44:68:05:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:35 2024 by rpki-client on console-fra.rpki-client.org