Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/XaD_PuCUSfX8rNij_et366xCJeM.roa
File: XaD_PuCUSfX8rNij_et366xCJeM.roa (raw, json)
Hash identifier: 3jjIzVvH9wfWKeCwI8we92edi9sw90B/joTlFBfNBgs=
Subject key identifier: 5D:A0:FF:3E:E0:94:49:F5:FC:AC:D8:A3:FD:EB:77:EB:AC:42:25:E3
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0190E855F17BD52A0A499904725871E5BD11
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/XaD_PuCUSfX8rNij_et366xCJeM.roa
Signing time: Thu 25 Jul 2024 05:21:04 +0000
ROA not before: Thu 25 Jul 2024 05:21:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 89.42.87.0/24 maxlen: 24
93.113.183.0/24 maxlen: 24
93.119.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e8:55:f1:7b:d5:2a:0a:49:99:04:72:58:71:e5:bd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 25 05:21:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5da0ff3ee09449f5fcacd8a3fdeb77ebac4225e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:85:3e:5a:46:c3:fb:6b:91:51:62:bd:a1:
d0:63:be:86:df:9f:28:05:e1:dd:af:e3:5e:ff:18:
74:5e:ef:8c:45:5b:2d:fb:86:33:70:f9:a6:00:e0:
10:b7:68:59:d6:2c:be:38:d5:98:05:9c:c8:74:2c:
75:fe:bd:2d:a4:fb:63:c4:d6:a3:5e:f1:84:0e:4c:
8b:3e:9d:ab:bd:ef:55:98:8e:73:9a:7b:9d:10:5a:
1f:30:d5:59:21:a2:ca:d4:fe:35:0d:09:2d:12:d2:
fe:5d:19:a8:b0:5b:d9:18:fb:5d:3f:87:51:11:9a:
32:a0:8e:54:5b:40:50:09:96:ae:7e:91:c5:9f:14:
6b:cd:62:50:55:20:d5:cc:de:5f:41:31:11:6c:63:
ef:d4:6a:b5:db:5d:42:75:d7:9c:c2:ac:85:7e:b4:
37:94:9e:ee:e6:81:d6:0c:ae:d3:ae:a7:90:ff:77:
ff:cc:5a:1b:bf:a5:50:ce:22:6a:f7:26:c4:10:e1:
dd:b8:95:36:30:08:2e:0f:41:f2:c6:76:8c:1e:93:
95:c9:db:f7:e5:9f:f0:c6:fc:9d:cd:c8:0a:7e:1b:
40:8e:6a:81:b1:71:88:1e:fe:8e:bf:fd:5b:db:28:
76:bf:ef:2d:4b:af:88:6c:8e:a3:b5:81:7d:bb:d9:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A0:FF:3E:E0:94:49:F5:FC:AC:D8:A3:FD:EB:77:EB:AC:42:25:E3
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/XaD_PuCUSfX8rNij_et366xCJeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.87.0/24
93.113.183.0/24
93.119.106.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c2:ec:15:2e:c9:af:72:3d:85:a9:61:f1:00:43:a5:f6:3f:
a0:64:46:7c:fe:ad:70:46:87:be:3c:38:e3:e3:ad:2f:db:b1:
43:6a:52:32:9f:6e:e4:c5:6b:be:8c:1c:5a:3a:91:cc:2c:33:
17:9d:e9:44:62:0a:37:b0:0c:1b:c1:78:ac:2e:67:3b:dd:b5:
f7:5c:63:c0:c0:1e:01:4b:a7:d9:94:0e:68:86:41:9e:a0:eb:
5d:ad:d5:1d:63:ab:9c:f2:93:c2:a3:a8:79:57:8e:b2:f9:3a:
80:e4:36:f5:13:72:83:ca:b7:f5:12:19:4d:ee:20:1e:b1:fe:
28:e7:bf:70:4b:eb:45:84:b3:a0:78:7b:b4:4a:eb:40:f4:1f:
92:16:6c:ab:2c:d2:59:fd:7e:35:35:06:f1:0a:9e:9c:f0:f9:
88:64:15:16:ca:59:c1:2b:e9:18:91:ff:57:17:4c:64:8a:0c:
5f:c9:9b:f1:d1:00:60:31:94:b5:41:de:fd:38:94:54:ff:33:
1a:09:e3:94:dc:de:ff:e1:00:58:45:b9:27:15:be:2b:75:a3:
33:38:81:9a:a5:f9:e0:c2:3e:02:9d:5d:43:de:c8:a9:dd:33:
44:38:e6:c9:e4:33:9d:db:6a:3b:6f:7c:67:96:76:6b:68:af:
82:02:64:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:14:49 2024 by rpki-client on console-ams.rpki-client.org