Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aQ7_ZNvjK-AbPtnBDabyPvhZo24.roa
File: aQ7_ZNvjK-AbPtnBDabyPvhZo24.roa (raw, json)
Hash identifier: Tb3jx/prB5408cZwY783CdnUiRAx5BR1aAOk1mloR20=
Subject key identifier: 69:0E:FF:64:DB:E3:2B:E0:1B:3E:D9:C1:0D:A6:F2:3E:F8:59:A3:6E
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D23E18F62E01560A3B6BC1BE562C2
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aQ7_ZNvjK-AbPtnBDabyPvhZo24.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41763
IP address blocks: 89.42.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:23:e1:8f:62:e0:15:60:a3:b6:bc:1b:e5:62:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=690eff64dbe32be01b3ed9c10da6f23ef859a36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:eb:da:d3:61:b4:5b:a7:97:0b:f6:a5:b1:
48:75:20:56:c7:47:aa:b2:93:0d:53:f3:7c:e1:f2:
da:55:1a:ab:fd:45:70:41:c7:7a:e2:11:06:82:65:
d3:ee:18:48:2b:b1:1a:7b:25:5e:91:68:77:f2:29:
36:ec:80:85:1f:86:e6:4b:e1:d7:dc:e3:aa:11:73:
15:57:f6:3f:2d:43:e5:3f:fa:5a:29:af:db:32:23:
a0:5c:8b:4e:da:a2:27:57:3e:fd:e2:e0:5f:6d:e7:
eb:29:7c:1a:0f:4a:7d:97:89:ac:93:8d:d5:af:26:
3f:b3:75:d5:49:f1:40:e8:64:f0:82:40:bb:59:83:
80:fe:90:e7:99:4e:f8:43:67:ef:3f:b0:57:f4:d8:
a9:ee:4f:39:10:d8:c5:08:11:23:90:fc:54:b5:26:
4d:73:4d:1c:26:41:16:74:7f:d9:87:23:f9:32:e5:
45:1d:d4:fd:15:52:db:c0:3e:42:88:5b:ec:e7:79:
91:08:45:8e:14:14:69:34:59:0d:a5:c7:fe:97:83:
ed:53:89:d7:d0:dc:a4:ad:fe:9a:cb:98:80:01:2e:
01:8b:59:7a:93:fa:cc:22:36:c8:3f:27:6e:68:e9:
07:e1:3f:28:a8:24:24:b8:f8:96:65:93:15:99:1f:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0E:FF:64:DB:E3:2B:E0:1B:3E:D9:C1:0D:A6:F2:3E:F8:59:A3:6E
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aQ7_ZNvjK-AbPtnBDabyPvhZo24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.192.0/22
Signature Algorithm: sha256WithRSAEncryption
32:9b:04:a5:b6:ff:58:04:78:01:cb:a4:f0:93:71:b8:d1:1d:
9b:5b:95:35:aa:f8:c5:34:b6:91:fd:1b:ed:d1:69:af:79:cd:
bd:ec:4a:ea:57:d0:e3:01:76:82:42:b5:d9:53:8a:d9:b2:2e:
11:3b:ce:33:01:50:ae:4e:bb:54:8e:3d:45:e9:ae:cc:f1:b3:
3b:65:97:db:37:0d:5a:2e:f2:f5:70:ed:2e:60:00:23:7c:5a:
f4:14:cc:1b:e1:6b:de:12:9c:6f:cf:3d:47:04:f0:95:ea:c8:
13:94:d1:e6:63:00:47:d1:fd:90:28:6e:a5:a2:28:10:b2:8b:
7c:c1:5c:6a:21:30:7b:0b:ff:e8:94:a8:35:bc:2a:16:f2:38:
ba:5c:40:70:da:bc:50:ad:95:66:59:a3:e5:7f:df:e3:bf:9a:
9a:95:0b:b2:58:66:8d:48:d3:e0:43:22:11:c9:0b:56:ea:a3:
45:37:11:32:be:59:fa:e1:01:11:ba:68:41:a1:4b:03:c4:69:
9c:27:95:f1:71:22:9a:8b:0d:66:85:b3:29:9c:93:a7:e1:45:
3e:c0:6a:26:4f:68:13:b7:38:60:b5:3a:ee:c4:b1:1e:34:44:
fb:dc:0b:85:2c:1f:3c:35:79:e8:3f:c1:4d:49:1a:d5:bc:94:
43:c3:1d:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbSPhj2LgFWCjtrwb5WLCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjQwMTAxMDAyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTBlZmY2NGRiZTMyYmUwMWIzZWQ5YzEwZGE2ZjIzZWY4NTlhMzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVXr2tNhtFunlwv2pbFIdSBWx0eq
spMNU/N84fLaVRqr/UVwQcd64hEGgmXT7hhIK7EaeyVekWh38ik27ICFH4bmS+HX
3OOqEXMVV/Y/LUPlP/paKa/bMiOgXItO2qInVz794uBfbefrKXwaD0p9l4msk43V
ryY/s3XVSfFA6GTwgkC7WYOA/pDnmU74Q2fvP7BX9Nip7k85ENjFCBEjkPxUtSZN
c00cJkEWdH/ZhyP5MuVFHdT9FVLbwD5CiFvs53mRCEWOFBRpNFkNpcf+l4PtU4nX
0Nykrf6ay5iAAS4Bi1l6k/rMIjbIPyduaOkH4T8oqCQkuPiWZZMVmR+3ewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGkO/2Tb4yvgGz7ZwQ2m8j74WaNuMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvYVE3X1pOdmpLLUFiUHRuQkRhYnlQdmhabzI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWSrAMA0G
CSqGSIb3DQEBCwUAA4IBAQAymwSltv9YBHgBy6Twk3G40R2bW5U1qvjFNLaR/Rvt
0Wmvec297ErqV9DjAXaCQrXZU4rZsi4RO84zAVCuTrtUjj1F6a7M8bM7ZZfbNw1a
LvL1cO0uYAAjfFr0FMwb4WveEpxvzz1HBPCV6sgTlNHmYwBH0f2QKG6loigQsot8
wVxqITB7C//olKg1vCoW8ji6XEBw2rxQrZVmWaPlf9/jv5qalQuyWGaNSNPgQyIR
yQtW6qNFNxEyvln64QERumhBoUsDxGmcJ5XxcSKaiw1mhbMpnJOn4UU+wGomT2gT
tzhgtTruxLEeNET73AuFLB88NXnoP8FNSRrVvJRDwx2H
-----END CERTIFICATE-----
Generated at Fri May 17 19:05:51 2024 by rpki-client on console-fra.rpki-client.org