Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/WQ7T-zRPa52kcwADLAxKjLrf0Jo.roa
File: WQ7T-zRPa52kcwADLAxKjLrf0Jo.roa (raw, json)
Hash identifier: WXVJzTMMttNxXK73kOufdSuu9RzSbo/8c6PmVxRz0ac=
Subject key identifier: 59:0E:D3:FB:34:4F:6B:9D:A4:73:00:03:2C:0C:4A:8C:BA:DF:D0:9A
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018E035F6AF3B3C96B8A78935563CDA79C34
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/WQ7T-zRPa52kcwADLAxKjLrf0Jo.roa
Signing time: Sun 03 Mar 2024 08:12:48 +0000
ROA not before: Sun 03 Mar 2024 08:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210538
IP address blocks: 89.47.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:03:5f:6a:f3:b3:c9:6b:8a:78:93:55:63:cd:a7:9c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Mar 3 08:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=590ed3fb344f6b9da47300032c0c4a8cbadfd09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:7f:8f:b3:a3:8b:40:cb:b5:98:c9:48:91:
02:7c:2b:cd:98:80:24:e5:87:13:1a:c1:67:64:34:
f5:4a:1b:f5:2b:70:f8:a3:e9:69:dc:7c:ec:91:df:
b7:8d:e3:e6:63:cb:fc:c0:96:8a:79:65:27:8f:78:
4c:66:74:b6:a5:4e:fa:4a:47:7f:72:43:a6:3c:6d:
29:00:93:49:9e:56:5c:0a:b1:c6:ce:f7:b6:aa:79:
cf:91:34:09:57:28:ed:2e:f5:bd:8a:8c:0d:de:8e:
30:1a:88:d5:18:53:01:10:d2:f4:20:66:f1:82:7b:
37:2f:44:f7:a6:bf:11:df:6a:e1:e4:41:bb:0d:3f:
3a:e4:37:1f:8f:c1:b6:1c:1c:bb:f5:96:17:3c:22:
55:40:77:c6:f3:87:57:4e:72:87:d9:4a:eb:6d:11:
0c:ea:6b:e0:df:ae:ec:f8:b4:59:50:2f:04:d9:f8:
34:d6:df:61:e5:ca:02:0e:d7:84:2c:56:63:ff:84:
c4:25:08:61:cf:4d:74:fe:15:f7:7c:ca:97:11:5d:
09:7d:48:13:2e:77:fd:fe:96:5c:fc:87:59:73:4b:
a8:24:75:af:01:22:ed:a4:7a:46:e5:10:4c:56:d2:
ef:b7:79:29:cc:91:20:6f:27:65:c9:d9:39:82:b1:
91:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0E:D3:FB:34:4F:6B:9D:A4:73:00:03:2C:0C:4A:8C:BA:DF:D0:9A
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/WQ7T-zRPa52kcwADLAxKjLrf0Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.113.0/24
Signature Algorithm: sha256WithRSAEncryption
75:01:1e:71:c9:24:d2:e7:a7:92:b2:d0:43:a8:97:0c:e2:22:
2b:72:38:19:53:79:4f:df:5f:9f:26:58:aa:d2:8a:a0:b5:9a:
1a:f3:1c:5a:9e:66:93:03:c9:15:eb:60:5d:dd:b3:3b:ce:8c:
0d:23:ec:17:ca:38:64:ee:a5:3c:64:b3:6b:b7:26:36:31:35:
8d:22:f3:a7:54:67:92:0a:2e:38:79:7c:8f:1f:97:2a:09:2d:
0d:3d:08:15:19:7e:fd:09:8f:87:52:38:65:1a:9f:f1:ef:e0:
ab:45:9a:c7:f8:20:63:3a:1f:6d:89:5e:16:f3:30:bd:10:b4:
b3:bd:d8:9f:8e:fe:f1:e6:bb:1e:94:08:d1:1d:39:01:f7:fa:
c8:d7:9b:19:04:b5:63:22:ee:c4:e5:47:0c:9e:3c:f4:e0:01:
ed:a4:1f:4a:7c:a2:3f:0e:ad:3f:d1:1f:1e:67:47:f1:51:07:
c3:64:76:28:0e:e6:e0:7b:27:aa:59:3b:11:42:d3:d3:f9:6d:
2a:f9:b3:32:27:20:e3:fa:a4:95:87:61:8a:9f:14:f6:44:90:
9d:0a:30:56:ba:ce:fc:37:49:ba:d7:1c:4a:72:10:f7:7b:bc:
02:30:ae:4f:25:a2:5c:05:0b:36:2d:23:a9:7e:15:9d:a3:fb:
69:37:37:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:42:18 2024 by rpki-client on console-ams.rpki-client.org