Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uRriqd-tiWgDqwkjqaa9c_4apEI.roa
File: uRriqd-tiWgDqwkjqaa9c_4apEI.roa (raw, json)
Hash identifier: M2fnfv8YNzdQ2k1AUvCmdHRqCxhDwVJBrx17dGCPiuw=
Subject key identifier: B9:1A:E2:A9:DF:AD:89:68:03:AB:09:23:A9:A6:BD:73:FE:1A:A4:42
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018D08E2D8C794C199901BD02242A512ED7C
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uRriqd-tiWgDqwkjqaa9c_4apEI.roa
Signing time: Sun 14 Jan 2024 16:51:40 +0000
ROA not before: Sun 14 Jan 2024 16:51:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215727
IP address blocks: 89.33.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:08:e2:d8:c7:94:c1:99:90:1b:d0:22:42:a5:12:ed:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 14 16:51:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b91ae2a9dfad896803ab0923a9a6bd73fe1aa442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ac:5e:1f:21:14:47:4a:7b:87:d0:d2:38:d2:
60:bf:96:04:be:e7:e5:da:32:fc:38:3f:b9:c1:21:
79:86:2a:ad:d1:f6:ed:e4:e9:03:cf:3d:78:b7:3c:
57:98:8b:57:c4:57:fa:c3:18:d1:a0:b5:fa:8e:38:
27:95:1d:a3:56:9d:7e:4e:52:21:db:39:ec:7d:df:
78:3e:f6:00:b5:ca:63:b7:5d:e8:f8:fc:8c:aa:50:
ac:57:71:b2:2c:30:e0:5b:f7:43:17:1b:54:bd:75:
1b:d5:72:87:c1:40:f5:3b:17:c8:a2:4f:5d:89:40:
1b:0b:b7:7b:d2:ec:3e:eb:4e:96:7d:b8:25:c2:43:
c8:70:f7:8a:ae:8d:30:04:e9:c3:5e:c2:02:68:f9:
a8:af:de:38:02:9b:98:be:54:e5:7d:3f:e6:fd:63:
d9:8a:3a:6d:cf:4e:da:b4:6c:36:37:b4:d9:34:70:
62:b0:38:a9:41:e9:91:c9:d7:8d:83:eb:16:0b:96:
18:f4:69:14:9a:13:e9:1f:ad:f5:2a:09:bd:45:d4:
b7:55:74:7b:ce:b3:ee:0d:61:29:d4:80:97:6e:d7:
e0:e2:f6:79:46:28:4a:39:ad:9d:eb:12:db:64:ec:
04:09:05:e5:3a:8a:c1:66:fa:68:db:c0:16:af:50:
eb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1A:E2:A9:DF:AD:89:68:03:AB:09:23:A9:A6:BD:73:FE:1A:A4:42
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uRriqd-tiWgDqwkjqaa9c_4apEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.194.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ad:7e:2e:26:ac:ae:c9:a9:e8:57:54:e2:1b:ae:b1:d0:e3:
97:12:f0:75:e2:07:1c:31:72:a0:15:ac:2b:68:53:0b:c5:68:
50:ce:a7:3e:81:30:20:83:6f:df:dd:e6:14:1f:ae:71:37:2e:
09:ba:c6:04:b9:9f:ea:e9:0d:e3:79:f8:2a:de:0b:dc:2a:f3:
17:d5:92:ff:5c:f9:d9:32:75:2c:b0:29:34:f8:48:00:b3:91:
28:a5:90:53:05:42:81:3e:ed:95:23:15:6f:61:7b:23:1f:71:
db:b2:0d:4a:bc:97:e5:8e:7e:1d:32:c6:02:be:3e:e0:39:d7:
5d:34:99:47:50:18:c9:fb:70:48:83:64:ad:7b:db:ce:a3:dd:
4d:6a:93:86:66:f2:b6:21:f2:53:4e:99:92:66:ab:fc:57:97:
83:d2:cc:00:f9:cc:1a:47:52:91:5a:e9:62:20:ae:ee:ce:e6:
d7:75:bb:b3:2f:1d:ee:52:96:13:5e:22:ec:07:85:6f:e2:03:
cd:28:26:02:ce:19:a2:87:24:63:49:bb:84:52:f5:37:6b:f4:
da:6e:ef:71:b1:cd:f9:f9:4b:7c:d9:fe:3e:85:7b:c8:3a:ee:
07:bc:66:5f:e9:ba:62:bf:a7:2f:5c:29:37:a5:c0:b7:e4:31:
46:35:33:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:05:51 2024 by rpki-client on console-fra.rpki-client.org