Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ms26lw_7rRM2pe0lsa5T4DJ72Fs.roa
File: Ms26lw_7rRM2pe0lsa5T4DJ72Fs.roa (raw, json)
Hash identifier: sqvtyj93mR3kwLxqKRu06uQv0K8xOUUFZYfj22e+SBU=
Subject key identifier: 32:CD:BA:97:0F:FB:AD:13:36:A5:ED:25:B1:AE:53:E0:32:7B:D8:5B
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018D3B09C360306E575302B41F9EAD61A387
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ms26lw_7rRM2pe0lsa5T4DJ72Fs.roa
Signing time: Wed 24 Jan 2024 10:35:11 +0000
ROA not before: Wed 24 Jan 2024 10:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 89.42.85.0/24 maxlen: 24
89.46.2.0/24 maxlen: 24
89.47.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:09:c3:60:30:6e:57:53:02:b4:1f:9e:ad:61:a3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 24 10:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32cdba970ffbad1336a5ed25b1ae53e0327bd85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:29:21:3b:c5:f0:20:24:78:d9:11:d3:a1:
ca:88:43:c6:91:c0:1a:60:f5:f8:71:e2:a0:ff:7f:
7a:70:44:ac:f4:c3:b8:8b:93:e2:40:83:2b:79:97:
50:2b:c6:8f:60:fb:07:04:18:9d:98:01:89:27:66:
b9:e0:7a:51:11:1b:ab:f6:c3:68:c8:61:e2:e6:83:
f1:3c:61:0f:72:3c:d7:09:86:93:ed:45:b8:76:d3:
5c:85:2d:52:4d:40:a2:b0:68:1a:e6:fc:7a:1d:1c:
64:2e:7d:19:d3:d4:fc:40:39:d2:39:06:a5:55:78:
b1:ea:ac:e8:8f:82:b6:8f:4a:ec:a6:50:cd:c7:48:
6f:39:51:b6:22:61:c3:00:bf:25:b2:ab:b8:f8:36:
3b:3e:93:95:c8:26:5e:be:42:0d:df:33:c9:cf:aa:
ae:ca:17:c8:a3:aa:d9:8d:d8:6a:b6:a8:43:c1:93:
aa:4d:1a:53:ee:f4:48:d9:88:97:35:3c:96:d5:9c:
3b:ee:99:b2:3d:d8:16:b3:90:d6:2d:bc:93:99:c1:
69:67:d7:bc:d3:21:e7:98:b2:57:90:c2:4b:64:8b:
97:87:95:eb:e1:c6:3e:99:a7:c6:5e:18:e7:ff:06:
4a:98:e5:60:76:65:72:51:ea:62:27:58:13:a9:d3:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CD:BA:97:0F:FB:AD:13:36:A5:ED:25:B1:AE:53:E0:32:7B:D8:5B
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ms26lw_7rRM2pe0lsa5T4DJ72Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.85.0/24
89.46.2.0/24
89.47.126.0/24
Signature Algorithm: sha256WithRSAEncryption
36:79:5d:3c:c7:13:71:f6:65:46:fd:7d:8b:f9:9b:05:86:db:
16:8f:c8:2b:1d:9d:22:bc:7f:57:be:d1:fc:17:76:ed:58:72:
69:1a:ab:43:5a:31:f1:94:76:ea:e8:77:64:4d:24:b7:26:ef:
e9:c9:ca:ad:90:4a:fc:4c:a5:4e:29:0a:ce:57:ca:cf:be:98:
d4:47:66:fa:4d:2f:2d:f9:70:7a:8b:4c:7e:6c:39:cb:a0:17:
97:33:b3:0a:af:bf:7c:23:e5:c1:02:85:28:c9:67:7e:f5:d9:
2e:e8:15:fc:ef:f6:e8:2b:70:c0:59:56:53:a6:36:ec:0a:6d:
68:d2:df:3c:0c:c2:3f:54:03:65:61:64:54:de:63:3a:85:78:
13:55:d3:9d:47:12:2b:41:9a:51:bb:71:32:fe:91:66:27:3a:
c6:ae:df:2c:a3:75:38:c1:e8:8a:2b:40:e5:70:d4:d8:cb:6d:
26:1a:1a:0c:89:3e:f2:44:88:43:6f:2d:77:97:ea:5b:71:c0:
ec:18:c2:10:7d:9a:d2:c8:57:dd:16:8c:7c:8b:6a:7a:a4:c3:
91:bd:b4:35:a1:79:f0:75:d7:17:d3:49:1c:81:46:61:b5:40:
fc:38:ca:62:10:ba:bc:27:6b:79:ad:6d:7b:7d:ac:8d:75:11:
35:9f:ad:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:36:26 2024 by rpki-client on console-ams.rpki-client.org