Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/542hMYBTZ7GjzxgFHVKKo6NINBw.roa
File: 542hMYBTZ7GjzxgFHVKKo6NINBw.roa (raw, json)
Hash identifier: Wt/iZKUiL9+THBDy80w+4HyIKO9HcLFN0ShfCd1lI9g=
Subject key identifier: E7:8D:A1:31:80:53:67:B1:A3:CF:18:05:1D:52:8A:A3:A3:48:34:1C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018DDCD69BABF6F22FB3E084D70CF212FE5C
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/542hMYBTZ7GjzxgFHVKKo6NINBw.roa
Signing time: Sat 24 Feb 2024 20:37:48 +0000
ROA not before: Sat 24 Feb 2024 20:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 89.47.100.0/24 maxlen: 24
93.119.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:dc:d6:9b:ab:f6:f2:2f:b3:e0:84:d7:0c:f2:12:fe:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 24 20:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e78da131805367b1a3cf18051d528aa3a348341c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:d6:8d:d2:1e:9d:72:b6:60:46:14:bf:1a:
be:ad:c2:5e:60:e2:d4:f4:68:53:7f:71:45:8d:b1:
43:1d:55:0f:77:02:0e:7d:1a:6f:8b:e4:15:25:63:
79:f8:f9:e3:fb:5b:f0:8f:b0:d1:58:f6:8a:8c:88:
bf:83:1e:ce:c8:5a:3c:84:b4:9a:aa:77:19:d8:c1:
8d:dd:63:f1:7a:2b:f8:8d:fa:8a:fb:7f:70:f8:26:
c0:fd:c6:d6:f7:94:59:43:73:4a:49:64:4f:6f:b0:
21:96:aa:93:a8:49:a0:bd:70:f7:e6:80:00:7d:37:
20:70:ac:54:77:e0:04:54:ad:59:ec:92:1e:27:a0:
19:80:90:f4:9c:e9:21:f3:e9:8a:32:ee:d3:82:bc:
ff:6e:43:f8:fb:0a:8a:19:90:ab:fd:7f:6d:84:80:
d6:33:9f:d3:e2:69:69:24:93:7b:11:5e:7d:0a:cf:
20:15:8a:3a:ae:71:9b:f3:bf:e1:6b:de:c3:f7:25:
7a:36:2a:fd:f4:70:12:6d:25:1c:1e:e0:a7:eb:0a:
3a:30:9a:f0:b8:14:b8:e2:47:83:cb:e1:97:17:09:
41:cc:c3:06:62:e8:6d:85:a0:99:93:b1:9a:38:a5:
01:7f:31:90:9e:4f:67:06:11:96:55:63:04:30:c7:
58:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8D:A1:31:80:53:67:B1:A3:CF:18:05:1D:52:8A:A3:A3:48:34:1C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/542hMYBTZ7GjzxgFHVKKo6NINBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.100.0/24
93.119.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c8:dc:8f:b8:11:6c:db:1e:d9:ad:20:e2:24:a9:79:7f:e1:
20:89:8b:a3:bc:ad:94:e4:96:e8:29:32:39:32:47:6f:68:17:
f2:88:58:d9:0a:e0:09:8f:7c:f9:fa:24:74:f9:c8:f6:52:f5:
45:7e:56:f3:e2:25:f6:f8:6d:31:3c:3f:79:c4:2b:6e:6c:e8:
e8:e4:df:5a:a1:c1:d8:76:53:52:fb:61:7e:98:d4:1d:b0:04:
ed:6e:2f:66:1e:f8:75:87:c6:bc:e8:bf:35:fd:12:ba:83:ec:
ec:f0:91:00:2b:62:ed:c5:29:b0:5a:ea:0d:ff:64:74:c4:f8:
6d:02:f0:57:9c:47:af:7b:f9:d2:5b:a4:48:82:fd:c4:6f:fa:
2e:f5:b1:72:64:96:f2:98:a3:25:0f:40:45:3a:42:52:e4:86:
55:f9:63:ae:74:f3:0a:15:90:f2:44:d0:49:c3:af:ff:cb:51:
9d:95:b8:c4:0f:67:5a:e7:47:5d:6b:4b:9c:dc:d9:89:70:72:
07:e9:fb:b5:49:b9:4c:c0:d7:8e:b7:7c:72:b2:e9:0c:15:9e:
e5:03:52:b4:91:f2:de:a4:21:52:cd:f0:0d:ca:65:18:b7:c2:
5f:22:4e:14:da:6a:46:aa:3f:26:59:f3:8c:63:01:e0:8c:46:
97:70:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:18 2024 by rpki-client on console-ams.rpki-client.org