Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/PhtqNs_13-gXvpKLI4diWtwAvkU.roa
File: PhtqNs_13-gXvpKLI4diWtwAvkU.roa (raw, json)
Hash identifier: FiMi0W3bFsylFJqErtYPrlsl8UHwrMW+gAWWDhWEA54=
Subject key identifier: 3E:1B:6A:36:CF:F5:DF:E8:17:BE:92:8B:23:87:62:5A:DC:00:BE:45
Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial: 018CC26D61A060CBEC7C8AA5728682D680DD
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/PhtqNs_13-gXvpKLI4diWtwAvkU.roa
Signing time: Mon 01 Jan 2024 00:29:57 +0000
ROA not before: Mon 01 Jan 2024 00:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212041
IP address blocks: 89.43.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:61:a0:60:cb:ec:7c:8a:a5:72:86:82:d6:80:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Validity
Not Before: Jan 1 00:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e1b6a36cff5dfe817be928b2387625adc00be45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1b:9b:71:5f:5f:7f:34:1c:3d:83:b6:7e:40:
c2:f6:59:ae:2f:fd:02:e6:4f:b9:6b:d7:56:68:57:
fe:a7:3a:26:bf:9f:90:ec:19:33:d8:43:44:49:4c:
4a:a5:ae:36:ae:38:9f:54:39:3b:2b:1f:74:26:fa:
c4:1b:18:2b:8a:31:3e:d4:9a:52:4e:e4:63:d1:9c:
b5:01:58:46:9a:2a:38:26:1f:2d:75:81:c0:18:db:
09:86:ee:87:23:26:18:48:cc:55:42:f0:12:df:df:
63:bd:71:38:19:92:5c:11:30:d2:2f:e2:5c:9d:27:
37:d1:25:e2:30:84:6e:e7:1e:7a:33:01:69:ac:44:
06:26:54:93:3d:50:17:0e:a0:9d:60:a5:7c:16:7b:
49:b1:7c:5f:69:20:af:c2:1a:16:a8:1f:27:57:35:
dd:43:6b:9d:50:28:3d:f1:38:81:a9:2c:95:a0:45:
83:a1:8d:34:3a:55:e2:c4:8f:3a:c7:65:67:ac:60:
48:bc:c9:9e:17:2f:38:dd:8b:e4:b9:48:d8:9e:f4:
21:34:9c:11:23:66:38:7d:c3:5d:fc:07:1e:e9:02:
35:12:85:0b:e3:59:8d:52:bd:53:80:1b:77:cd:27:
15:d3:9a:c7:06:a6:17:99:3d:a3:b0:a6:7c:78:cd:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1B:6A:36:CF:F5:DF:E8:17:BE:92:8B:23:87:62:5A:DC:00:BE:45
X509v3 Authority Key Identifier:
keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/PhtqNs_13-gXvpKLI4diWtwAvkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.152.0/22
Signature Algorithm: sha256WithRSAEncryption
36:91:1c:35:0a:b0:39:65:e2:1b:b3:45:ec:60:ae:a8:95:c4:
d2:5e:d6:fb:f5:31:31:31:0e:a0:79:74:44:21:2c:9e:3b:91:
4b:e5:87:3f:64:4f:91:75:23:2e:2e:2f:30:e5:38:b9:7f:9d:
9e:8e:da:c0:57:51:1e:94:28:27:f2:21:1c:a1:e1:c7:c0:d9:
a7:72:59:f8:ed:42:5a:6b:d4:6f:53:ce:1a:2a:0e:d0:fc:4b:
68:46:b1:84:de:5f:83:fc:6e:f1:10:1d:00:cc:05:57:4f:f1:
0a:2a:6c:3b:4d:f4:88:44:b7:67:ee:75:c4:58:4c:3c:6e:da:
bc:64:59:e4:b3:14:57:51:ec:54:4e:5a:33:62:4f:7e:cc:b1:
88:ee:2e:65:31:06:0b:7b:cb:18:1d:5b:20:21:2c:a2:ce:b4:
03:9d:34:4e:cb:8c:9f:6c:d0:52:a2:08:0b:a8:f0:9e:2e:5c:
d1:92:a7:ac:07:27:32:81:6a:6c:50:87:b9:51:b4:b9:82:14:
10:01:a9:cf:0f:5e:bf:38:2f:5c:ee:2b:a0:07:de:1e:7d:52:
6b:6c:64:ff:ba:3f:7e:15:36:a8:95:c9:92:55:ad:16:07:f4:
6a:33:ef:51:0c:01:54:c5:a1:fd:ec:03:8f:69:28:21:f5:62:
b1:e5:40:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:15 2024 by rpki-client on console-ams.rpki-client.org