Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/cpXvJO60o6cM-i3u6MsNBFfBN-A.roa
File: cpXvJO60o6cM-i3u6MsNBFfBN-A.roa (raw, json)
Hash identifier: s9qBTfeDJZLzPZs4LaORpit0xUlmEkp35vzpQbgg+zI=
Subject key identifier: 72:95:EF:24:EE:B4:A3:A7:0C:FA:2D:EE:E8:CB:0D:04:57:C1:37:E0
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 018CC3B71B2181A1521255A04B4676D2CDCA
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/cpXvJO60o6cM-i3u6MsNBFfBN-A.roa
Signing time: Mon 01 Jan 2024 06:30:06 +0000
ROA not before: Mon 01 Jan 2024 06:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9050
IP address blocks: 89.39.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1b:21:81:a1:52:12:55:a0:4b:46:76:d2:cd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Jan 1 06:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7295ef24eeb4a3a70cfa2deee8cb0d0457c137e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b3:c8:a5:fb:a0:42:04:c4:a2:0f:80:0d:7a:
6b:be:ab:5c:9b:06:25:4f:19:4b:87:1d:14:dd:89:
98:28:93:61:77:ef:e1:aa:ce:be:ad:f6:95:f5:5a:
34:20:45:ec:7a:3e:14:08:df:9c:b3:13:0f:15:05:
76:c4:35:26:30:e1:38:77:e2:bd:f2:5d:15:20:4b:
38:18:62:1d:86:10:53:c7:74:20:74:8b:41:82:a6:
81:9b:04:ac:2a:5a:55:80:ac:45:c0:5b:ab:d3:2f:
49:83:df:2c:74:2e:07:62:88:c7:f4:9d:3f:a2:4d:
51:bd:25:f2:d9:1e:fa:c7:b5:ec:75:2e:65:5e:57:
b1:60:0f:b7:2b:a2:48:e6:fe:fd:3a:d7:ce:7a:f2:
ce:15:68:7c:03:35:d2:70:74:0d:7c:4b:06:a0:ec:
e5:e3:c2:cf:a8:9f:66:26:06:e1:6e:1e:ea:9c:95:
3b:16:1e:3b:38:ec:7f:c0:35:ab:4d:f0:8f:4a:14:
f1:c7:83:18:49:f0:ac:dc:38:80:8e:60:c5:50:0c:
bd:eb:b3:0d:3c:bb:f4:f8:f0:1d:df:43:6b:13:b9:
55:47:91:6e:01:dc:75:dd:2e:2c:11:1f:55:02:e5:
59:20:2b:95:12:14:5e:4b:60:4c:aa:3c:b9:76:b0:
cf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:95:EF:24:EE:B4:A3:A7:0C:FA:2D:EE:E8:CB:0D:04:57:C1:37:E0
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/cpXvJO60o6cM-i3u6MsNBFfBN-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.67.0/24
Signature Algorithm: sha256WithRSAEncryption
28:43:cc:dc:3f:ef:99:19:6d:83:36:b8:92:6d:28:3c:8f:b7:
5c:a6:97:5a:61:65:db:a1:c9:fb:47:c3:14:4f:a0:71:99:f7:
c4:e1:f1:d4:a6:9e:44:41:23:fa:31:77:b0:b9:72:f2:08:76:
c8:a2:16:25:66:ed:ed:a8:51:03:19:d5:5a:59:ea:04:56:63:
f1:8f:72:01:d7:e6:e7:6f:ca:95:34:2c:4f:70:0f:75:97:0a:
d3:77:79:b6:34:ed:da:b5:64:f7:78:5a:dc:75:1a:d9:99:55:
c8:6c:80:40:5c:bb:a9:51:30:84:83:01:31:10:99:1c:1e:84:
da:0a:4f:ea:e9:87:06:f6:02:4b:67:c4:4a:b5:3c:4b:46:b3:
4d:9c:ec:1a:2f:48:4c:01:75:76:50:ca:b7:7f:91:5d:e0:9b:
f5:c4:44:41:c8:c8:10:18:84:66:ad:ad:6c:f4:11:ec:f1:54:
2c:53:e1:3e:ed:69:83:1e:e8:9c:bb:e8:9c:6b:ef:44:5a:0d:
8b:de:16:8d:ff:a4:94:6d:9b:b1:16:eb:18:ca:ff:89:89:0e:
1f:fc:53:49:d4:25:e0:e3:9c:0f:3e:79:88:01:02:c7:d9:a7:
76:48:56:3f:d1:d2:36:83:de:c7:b1:74:77:7a:0c:15:c3:3a:
7c:18:ed:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:11:54 2024 by rpki-client on console-ams.rpki-client.org