Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/EcGSdB2JFNp6VND79KXqUJJ0lv4.roa
File: EcGSdB2JFNp6VND79KXqUJJ0lv4.roa (raw, json)
Hash identifier: ZZH/v2a3Kax2zGJwXjIEUNjmCA87qcXCbomZQl89MuQ=
Subject key identifier: 11:C1:92:74:1D:89:14:DA:7A:54:D0:FB:F4:A5:EA:50:92:74:96:FE
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D2B72FE0B46846B437459779F98C6
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/EcGSdB2JFNp6VND79KXqUJJ0lv4.roa
Signing time: Mon 01 Jan 2024 00:29:43 +0000
ROA not before: Mon 01 Jan 2024 00:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198883
IP address blocks: 89.33.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2b:72:fe:0b:46:84:6b:43:74:59:77:9f:98:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11c192741d8914da7a54d0fbf4a5ea50927496fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:b2:95:19:ab:d2:71:c7:19:f7:4a:aa:57:
4a:d0:98:a9:67:4a:45:ae:37:87:39:09:06:60:3e:
ba:66:17:53:c5:68:ce:e7:3f:14:4b:28:05:db:97:
e6:96:4e:f2:0b:6e:1d:70:a9:a7:2a:28:bb:8d:8c:
df:fc:0a:90:c9:87:00:bf:39:41:51:9e:60:29:83:
89:f7:a0:74:11:5d:b8:e0:f1:3f:6e:b0:fc:4e:ca:
5b:e7:c7:07:e4:5c:9a:e5:8a:45:b9:34:e3:83:b3:
72:fd:45:e1:3a:c3:b8:43:fc:c1:9f:b1:a7:85:cc:
ad:3e:63:f3:7d:1b:5a:9f:7d:6d:9e:cf:11:0e:b2:
cd:85:1c:ae:eb:fc:f1:df:cb:24:b2:c4:2b:b2:54:
b9:28:de:06:57:39:58:ed:01:c8:43:33:83:35:91:
5f:da:da:94:2e:b3:1f:d3:e7:19:ff:55:61:ef:c9:
55:ac:1c:96:24:37:21:ad:9b:15:c1:64:d5:45:b4:
c7:65:e6:60:5d:a2:67:67:9d:62:57:51:42:33:36:
cb:6e:18:49:18:be:70:fa:6e:d5:b1:06:36:f4:51:
1f:18:7e:e2:e0:6c:3a:ce:e3:7a:df:f7:f4:dd:f2:
73:88:5c:31:7b:ff:35:e8:ad:83:87:f5:7c:03:d5:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C1:92:74:1D:89:14:DA:7A:54:D0:FB:F4:A5:EA:50:92:74:96:FE
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/EcGSdB2JFNp6VND79KXqUJJ0lv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.194.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d4:c5:00:82:1b:b9:75:9c:53:f4:6e:9e:83:77:4c:c8:a4:
86:28:3f:61:22:b4:ca:47:a1:5f:69:c0:bc:5d:81:60:b2:3c:
39:e9:a2:be:1e:3d:d3:33:3c:b4:1c:1c:ed:ed:1a:fa:f7:6f:
9d:cf:98:94:0c:fb:5a:de:2c:87:aa:63:84:b9:6b:68:36:70:
eb:fb:38:51:65:5a:24:89:39:53:c6:63:89:39:8e:6d:68:2b:
6f:41:2d:e7:45:b8:2b:ce:8a:e4:29:a2:a8:eb:6e:6a:43:8a:
55:4c:2e:ac:6c:3f:91:fe:e9:e8:15:ae:03:ac:99:ef:4b:e0:
b7:e1:bd:6d:0a:24:f8:a2:33:66:40:a7:41:2e:59:cf:18:8b:
de:17:03:55:6c:16:1d:36:6c:63:b8:d0:63:bd:d2:3c:be:0d:
17:a8:4a:eb:8d:ce:b0:c7:00:87:36:08:46:bc:ba:08:94:8f:
36:8a:56:0c:70:10:0b:3b:34:1c:29:4c:01:6c:07:97:5d:61:
b8:8b:c7:27:ee:e0:cf:64:a5:88:99:5c:ed:7b:85:08:da:72:
5e:8a:10:d9:a1:e1:ae:00:6b:20:fb:e7:da:8c:6c:08:44:26:
87:56:57:dd:2d:29:20:e0:bf:8e:a5:e5:8b:68:73:5d:37:c2:
00:6c:12:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:18 2024 by rpki-client on console-ams.rpki-client.org