Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pVu4G_QM5pagPGOXW-BLpkYXrd4.roa
File: pVu4G_QM5pagPGOXW-BLpkYXrd4.roa (raw, json)
Hash identifier: jvRpID73RIQ+vSx+43dLoFa+1kJRCPbnjnR2dpPymvU=
Subject key identifier: A5:5B:B8:1B:F4:0C:E6:96:A0:3C:63:97:5B:E0:4B:A6:46:17:AD:DE
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018DE427C77E03A6B11EA012620D5EB26BA4
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pVu4G_QM5pagPGOXW-BLpkYXrd4.roa
Signing time: Mon 26 Feb 2024 06:43:48 +0000
ROA not before: Mon 26 Feb 2024 06:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14445
IP address blocks: 89.37.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e4:27:c7:7e:03:a6:b1:1e:a0:12:62:0d:5e:b2:6b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 26 06:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a55bb81bf40ce696a03c63975be04ba64617adde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0d:06:35:04:cc:22:c5:cf:1b:ed:3c:12:bb:
d8:2d:00:cc:2c:4a:51:d3:40:a2:b1:39:0f:79:5e:
f5:70:4d:00:8c:72:59:f9:7e:0b:52:1a:50:f1:08:
b2:0c:4a:9c:96:01:4c:08:81:27:a4:76:9b:4a:91:
c2:1a:18:e4:48:83:c0:d4:2f:cd:19:04:7a:52:fb:
6b:1d:5e:78:d8:08:cc:a9:b4:a5:8b:9d:84:a3:18:
f4:23:35:26:b1:cd:51:4e:34:72:d1:f4:2e:6e:e3:
ef:ec:1a:25:a7:4f:90:5f:d6:ba:a6:a8:5a:6b:1e:
f4:f9:1f:af:99:0c:b4:46:03:81:0f:5e:33:c3:c4:
06:3e:b1:18:0a:6f:24:0c:fe:11:48:53:d3:b5:5d:
49:6f:3e:d7:3c:d8:f2:20:5f:a8:41:5e:6c:e1:74:
62:39:72:3a:53:7a:1e:4a:81:06:19:12:3e:fd:21:
df:98:5f:48:ca:08:35:d0:ab:bb:05:22:e0:7b:c7:
ef:59:f4:ea:d4:d0:d6:b3:a2:c7:06:2c:45:74:8a:
e5:7e:56:db:47:dd:c7:e8:87:51:d5:43:75:6a:15:
88:4d:76:88:1f:64:81:44:66:f7:39:46:34:81:aa:
c3:22:f2:e6:3d:5f:11:83:03:ef:bd:2c:e9:1a:ef:
4a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5B:B8:1B:F4:0C:E6:96:A0:3C:63:97:5B:E0:4B:A6:46:17:AD:DE
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pVu4G_QM5pagPGOXW-BLpkYXrd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.119.0/24
Signature Algorithm: sha256WithRSAEncryption
31:61:0b:79:9b:42:dc:5a:10:12:af:94:f3:78:3b:af:d5:86:
7a:13:68:03:74:cb:91:f5:06:d0:81:a1:fa:e7:3f:db:07:9c:
97:54:4f:a6:f3:d1:39:b7:5f:34:24:75:6c:1a:df:44:27:23:
34:62:29:9a:46:54:9d:9d:75:fd:bc:57:6c:87:0a:a9:75:dc:
34:05:61:37:e7:a1:85:bb:ab:b7:8e:38:ff:6f:63:9d:76:5b:
d0:ea:dc:7c:49:13:39:78:ab:6b:d7:5a:78:ea:1f:87:67:f5:
50:5a:33:9d:81:46:db:77:e5:22:8e:e5:35:0d:06:8d:b6:a0:
e1:63:21:26:36:24:3c:0b:49:a8:67:3e:bf:1b:8a:40:62:ae:
90:4b:09:45:af:1c:d4:c1:52:e5:8e:5b:ca:4d:32:c2:06:89:
a4:e3:59:56:6f:c7:75:e7:c8:56:16:55:62:8b:10:f6:05:da:
c1:ee:05:13:1a:7b:a2:54:c3:69:9c:99:35:97:97:73:78:10:
d6:e4:19:c8:75:4d:7d:65:19:92:8b:70:69:77:64:9a:91:ae:
28:89:75:8a:2f:79:0f:14:60:1c:3b:fe:94:dd:57:9a:cf:b8:
b1:27:c9:9d:1e:3c:af:41:e2:e4:51:28:12:02:2b:c1:63:6b:
07:ed:ae:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:36:39 2024 by rpki-client on console-ams.rpki-client.org