Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/HAd-EbSLOya2mDfdR8s4kAucfEg.roa
File: HAd-EbSLOya2mDfdR8s4kAucfEg.roa (raw, json)
Hash identifier: lVcwxybfTBQtrW5SXimeEsWJXQ075HqHTqJJNTVvKbw=
Subject key identifier: 1C:07:7E:11:B4:8B:3B:26:B6:98:37:DD:47:CB:38:90:0B:9C:7C:48
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D28689C9BE6BCFCF84A4714FCFCCC
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/HAd-EbSLOya2mDfdR8s4kAucfEg.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60604
IP address blocks: 89.35.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:28:68:9c:9b:e6:bc:fc:f8:4a:47:14:fc:fc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c077e11b48b3b26b69837dd47cb38900b9c7c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:01:aa:a1:fb:c4:05:c3:9d:7c:e0:a5:a2:80:
8f:22:ca:2d:b2:e3:62:7d:9f:4f:da:5f:bc:5f:6a:
09:a6:3f:fc:f1:71:da:3f:c1:32:6e:7a:71:03:1d:
b6:7b:b6:79:94:40:84:9e:5c:ac:e4:eb:89:b0:80:
08:0e:16:a6:c2:b3:0d:8f:9b:b5:0f:a0:73:4e:cd:
8f:67:f6:c1:47:c0:68:01:cf:c9:d0:13:27:1d:fd:
a3:3c:5f:a7:1c:34:97:9a:f5:16:35:6b:94:9b:d5:
d9:52:ea:33:74:61:9c:70:e2:9f:53:be:0d:7d:37:
5a:a3:51:15:be:3c:33:35:6a:46:fa:49:8a:3f:dd:
64:04:26:61:53:ee:71:be:d3:6b:0c:88:5b:23:9a:
3f:77:c5:cf:d7:d6:e7:97:94:2b:2b:69:0b:e6:8b:
d9:48:f7:d2:40:8b:a1:e9:a2:5e:25:6c:27:dd:b6:
b7:15:95:c1:fb:29:8d:ef:94:24:53:53:03:f3:d5:
bf:d5:08:cd:20:f7:88:72:9d:99:d1:58:36:07:e2:
5b:0c:b5:4e:52:31:a3:7c:bf:ca:17:94:1d:51:ce:
ef:55:44:b2:d1:20:dd:8b:87:27:18:50:ed:c0:d7:
26:a6:5f:e3:7b:e0:97:89:b6:7d:3b:b4:ba:a4:13:
33:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:07:7E:11:B4:8B:3B:26:B6:98:37:DD:47:CB:38:90:0B:9C:7C:48
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/HAd-EbSLOya2mDfdR8s4kAucfEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.158.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a2:70:1d:7d:9a:42:18:21:c0:45:a5:6f:43:0e:fa:57:5e:
8b:0c:88:9c:c2:1e:62:c3:47:67:b8:89:98:05:7b:38:1c:6f:
85:79:7f:9d:0e:0f:dc:8b:9c:62:68:41:86:fc:81:ef:b9:06:
59:4f:ff:b0:94:f1:4b:6a:28:df:24:d7:a5:7e:cd:a6:e7:72:
38:00:0c:96:ff:d2:4c:20:a4:c3:f5:f3:e7:49:ea:08:c3:fe:
9a:ba:2b:2e:3d:2e:d4:02:71:b7:43:9d:98:5f:bb:15:13:81:
e9:e9:10:60:97:72:2d:18:50:75:37:5f:36:6a:f6:0e:86:23:
ea:ad:43:0e:05:18:63:ab:3c:80:db:75:97:8f:1d:9a:c3:9a:
4a:d9:0a:d5:d7:e2:cf:e0:d9:8d:1c:b1:4b:4a:ad:40:57:1b:
a8:45:a6:81:b8:01:1a:ef:e3:f4:fe:b2:0e:98:2d:1f:72:f8:
73:3b:ba:4e:8b:e4:5f:cf:36:c8:99:a4:6f:1d:6b:b4:c0:82:
7f:1d:13:a7:b2:4d:d4:df:2e:11:7f:bf:67:48:e6:28:65:04:
8f:2d:64:39:b5:a3:14:ac:ee:e4:7a:f3:d6:20:c5:ec:ce:48:
8e:95:3a:25:d2:35:c4:11:8f:44:6d:f5:a8:a8:a7:1e:3d:62:
8e:58:70:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:39:39 2024 by rpki-client on console-ams.rpki-client.org