Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ljrPjWcM4maAtYqjp_c1V2UmsO4.roa
File: ljrPjWcM4maAtYqjp_c1V2UmsO4.roa (raw, json)
Hash identifier: gxp+joPazuMdU32Cc+FosVij2vfdnl8JiPSVyKXJVnI=
Subject key identifier: 96:3A:CF:8D:67:0C:E2:66:80:B5:8A:A3:A7:F7:35:57:65:26:B0:EE
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D2B9982646CFA42A297661255032D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ljrPjWcM4maAtYqjp_c1V2UmsO4.roa
Signing time: Mon 01 Jan 2024 00:29:43 +0000
ROA not before: Mon 01 Jan 2024 00:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199106
IP address blocks: 89.37.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2b:99:82:64:6c:fa:42:a2:97:66:12:55:03:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=963acf8d670ce26680b58aa3a7f735576526b0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6f:17:1b:8b:c1:11:0b:22:38:11:5a:49:7d:
c5:b2:52:c6:29:ae:b0:ce:2b:91:32:e3:ee:86:e6:
7c:78:52:27:8a:37:cb:f8:b8:33:36:7d:13:26:79:
d7:96:fa:5b:57:4c:52:3a:e1:af:a1:7d:51:70:b5:
85:0b:50:f5:ef:41:51:ab:94:f7:23:e9:39:8d:c0:
8f:28:c5:06:1b:43:f7:01:4d:c5:28:4e:61:a2:bc:
8a:a2:14:2d:35:bd:c1:7c:9d:de:08:33:91:d8:05:
4b:46:23:90:b8:b9:94:b2:f7:74:69:8a:7c:2e:6f:
6f:43:cb:d8:7f:af:0b:8b:37:f5:18:30:12:92:27:
26:23:47:4c:ba:41:b7:b4:e4:2d:37:ad:cf:be:28:
4c:a6:2e:d6:b4:3d:e9:9b:d6:db:f5:39:1f:2c:d6:
c6:5e:b5:3c:86:95:47:dc:b4:73:9c:d9:e6:52:0e:
05:75:10:48:7c:3e:08:85:6c:ee:b8:6b:f2:f2:db:
67:6c:6f:94:ea:a2:5c:37:b4:1b:00:f6:c7:76:8d:
a6:ef:df:83:12:93:15:53:15:a2:15:0a:0e:de:69:
2b:d8:36:f8:05:06:c3:77:e1:f9:53:89:ad:2c:75:
27:89:12:47:f6:28:f3:19:43:47:5e:7f:5e:a5:db:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3A:CF:8D:67:0C:E2:66:80:B5:8A:A3:A7:F7:35:57:65:26:B0:EE
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ljrPjWcM4maAtYqjp_c1V2UmsO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.118.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a1:8d:f8:f2:69:b0:15:de:12:5f:f8:62:1e:f4:54:4a:d5:
12:bf:10:87:5f:83:f1:1a:75:13:5a:7f:7c:c4:db:a0:52:83:
e9:a0:ed:f3:71:01:24:ef:c7:73:14:d8:fc:fd:a2:2c:33:5b:
47:a2:c3:ee:17:d7:33:9c:72:29:64:d8:1b:8d:a2:a8:fd:ec:
70:be:39:50:4d:bf:1e:14:c1:c0:77:0e:e2:1c:55:e6:60:a1:
ac:c0:61:a3:2a:37:90:c3:c7:a5:70:b2:d4:31:7d:cc:72:ae:
eb:0a:cf:c9:97:b8:ad:68:85:21:0e:69:4b:9f:06:d8:30:46:
94:a2:4a:8c:33:9f:c9:48:af:32:39:0c:a9:e2:60:df:d9:43:
1b:fb:89:5c:98:e0:08:ca:d7:d6:5c:79:aa:43:8b:e1:ca:7f:
55:7b:a1:b5:e4:89:d4:64:c8:72:66:e7:af:98:67:0f:60:f5:
e8:06:16:0e:c4:cd:91:4c:34:4b:2e:3d:13:4a:95:94:47:0b:
7d:c1:8f:e9:bc:0e:2c:6e:34:52:a9:3d:9e:cf:f1:50:4b:d8:
1e:5e:84:df:3b:2e:16:63:1b:9f:f9:45:b8:65:40:ae:6e:e2:
4d:2f:7a:48:18:2a:7b:71:9f:a2:e4:82:09:97:06:98:27:d1:
b6:d4:3b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:43:54 2024 by rpki-client on console-fra.rpki-client.org