Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/atptZcPoQrO5SQZnR7Z1RGiqa_A.roa
File: atptZcPoQrO5SQZnR7Z1RGiqa_A.roa (raw, json)
Hash identifier: T+JUXDM5z+SypfRdhtn6szux+OF3aytMoROjyucE4d8=
Subject key identifier: 6A:DA:6D:65:C3:E8:42:B3:B9:49:06:67:47:B6:75:44:68:AA:6B:F0
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D283DA5D21113016DCDA8FB8F6D9A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/atptZcPoQrO5SQZnR7Z1RGiqa_A.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58022
IP address blocks: 89.37.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:28:3d:a5:d2:11:13:01:6d:cd:a8:fb:8f:6d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ada6d65c3e842b3b949066747b6754468aa6bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c7:7d:88:6e:93:c9:15:e4:2c:78:67:c6:e5:
b2:1c:72:38:29:56:03:1f:db:8f:d9:63:dd:b9:3d:
93:6d:11:4e:63:a4:4c:22:b3:42:1f:b1:1c:25:2c:
b4:99:d2:e5:cf:df:48:b5:90:68:33:cb:66:7f:3b:
93:92:df:8f:16:08:e3:6c:31:6c:cb:ff:a5:ff:2e:
1f:ab:13:89:63:ab:8f:6e:19:4f:ac:dc:d2:21:d4:
31:48:b5:d8:f2:d6:e4:0a:ab:96:f8:dc:cb:ee:62:
e6:54:02:a0:a7:b4:b7:44:d7:60:41:c2:7f:5b:22:
71:39:d2:a0:4c:74:45:f2:3a:84:4e:62:24:61:ba:
1d:71:ac:9d:23:3c:fd:a7:f2:34:da:fe:0b:a4:67:
86:8c:e1:9d:bc:84:8d:80:09:08:4d:08:00:f2:e1:
59:25:50:05:27:c6:cd:64:72:8a:af:ed:bc:2c:ee:
07:4c:a2:2e:57:3b:e4:c1:fe:0b:cc:74:03:cd:c2:
90:5d:f7:5e:2c:e4:b3:4a:8b:a7:ac:58:6e:fa:13:
05:eb:66:a6:a8:7f:b3:74:a1:e6:52:52:d1:90:ff:
57:ca:39:16:bf:6b:6f:a6:2e:29:ae:3f:fe:41:e5:
93:de:54:10:91:75:7e:73:57:77:56:21:78:c3:f6:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DA:6D:65:C3:E8:42:B3:B9:49:06:67:47:B6:75:44:68:AA:6B:F0
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/atptZcPoQrO5SQZnR7Z1RGiqa_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.112.0/22
Signature Algorithm: sha256WithRSAEncryption
01:a7:15:38:f8:8e:06:52:b6:fe:33:95:fb:7f:32:d7:54:59:
28:2a:70:ea:2c:43:3c:c3:84:1c:f3:ff:1c:79:be:f7:8f:6d:
50:c6:e0:38:1b:ae:f5:32:1c:60:17:fd:6f:b0:00:4b:c3:42:
30:47:16:c0:d4:65:1e:d7:37:4a:60:9c:18:0e:2c:bd:73:c1:
56:1c:9d:16:fb:12:cc:06:fd:8a:47:1c:10:34:e3:32:b1:d7:
07:03:8d:88:69:f7:b1:ff:96:a6:8a:5a:8b:df:f5:23:2e:df:
f5:44:75:43:43:f3:69:aa:04:51:e8:b6:46:99:91:82:c2:f8:
97:fd:88:af:3c:2e:92:3f:b1:62:93:e6:5f:7f:89:b6:a9:2c:
c7:45:11:20:51:b1:a2:28:74:e1:42:51:11:8f:6a:db:c0:8b:
59:fc:ef:f9:3a:e5:cb:0c:9b:8f:ab:40:7b:f5:32:d9:05:f4:
8f:61:95:7b:7a:ca:79:9f:e9:b5:75:fd:b3:4e:7c:74:1c:55:
f4:8a:72:01:b8:8d:44:fd:cb:a7:23:f2:f4:e5:7d:78:0e:b2:
50:e7:07:5e:33:af:b4:84:ad:04:d2:63:25:24:5d:5b:30:ee:
25:fa:30:b0:db:df:ba:4b:17:f6:4d:5f:02:e8:f5:31:25:61:
8c:ba:05:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:00:20 2024 by rpki-client on console-fra.rpki-client.org