Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/4qwUMVt26BVgq1btEYLYDhhCZZA.roa
File: 4qwUMVt26BVgq1btEYLYDhhCZZA.roa (raw, json)
Hash identifier: 4bOBwI3QiE5wHhBTVNAeR2jgSoSHYNdIDRssIh/SdO0=
Subject key identifier: E2:AC:14:31:5B:76:E8:15:60:AB:56:ED:11:82:D8:0E:18:42:65:90
Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial: 018CC6B9234D20B6172732A70A1606483636
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/4qwUMVt26BVgq1btEYLYDhhCZZA.roa
Signing time: Mon 01 Jan 2024 20:31:10 +0000
ROA not before: Mon 01 Jan 2024 20:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209510
IP address blocks: 152.89.172.0/23 maxlen: 23
152.89.174.0/23 maxlen: 23
2a09:35c0:200::/40 maxlen: 40
2a09:35c0:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:23:4d:20:b6:17:27:32:a7:0a:16:06:48:36:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Validity
Not Before: Jan 1 20:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2ac14315b76e81560ab56ed1182d80e18426590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:43:da:6d:e0:6d:1e:5b:58:45:d1:c7:33:
18:88:b3:ff:4d:73:cd:2f:cf:04:53:2f:02:95:ad:
86:90:fa:6a:d0:5a:81:51:8d:7e:31:14:bd:e1:ac:
fd:3f:fa:b9:0f:1e:fd:95:4c:5c:67:0d:67:c9:ac:
54:11:5e:7d:da:d3:16:4c:85:ff:7f:bc:3f:b0:77:
49:57:ed:3e:07:90:63:5b:25:30:11:ec:27:1f:1b:
1f:25:08:97:42:09:34:d2:a9:8f:61:47:62:79:4f:
fb:7d:29:62:ae:cd:a2:34:c2:e3:d5:78:40:22:8e:
4f:ac:12:04:53:71:29:0a:ee:ae:fd:41:e2:92:55:
dc:d7:90:d2:64:52:14:2c:90:0b:29:bc:8c:29:49:
53:32:c6:ad:af:81:8b:8a:38:3d:c1:c7:4b:56:1a:
30:1a:b0:1b:09:02:78:cb:98:bc:53:93:6f:89:a6:
5d:5f:62:f2:7b:f2:0a:3e:da:6c:ed:b2:02:fa:44:
15:28:03:d0:92:3e:72:48:81:f5:14:b3:2f:18:96:
50:14:87:44:ea:a5:ae:29:4b:48:95:22:bb:39:71:
f7:cd:a8:4b:cb:04:0d:95:4a:94:51:eb:43:7a:90:
34:68:d8:0c:5c:4c:1e:c2:cf:fa:cb:0a:ab:30:48:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AC:14:31:5B:76:E8:15:60:AB:56:ED:11:82:D8:0E:18:42:65:90
X509v3 Authority Key Identifier:
keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/4qwUMVt26BVgq1btEYLYDhhCZZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.172.0/22
IPv6:
2a09:35c0:100::-2a09:35c0:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
31:b8:34:f7:6c:92:f2:11:15:95:35:90:38:fb:94:f2:68:45:
e4:25:c0:08:24:e1:1d:5d:29:a3:09:e1:f7:9c:ee:fc:fd:ea:
d4:dc:39:cb:95:a7:b2:d9:6a:68:1a:09:7e:2c:2e:b1:2f:e9:
bb:1e:f0:b4:05:9e:e3:61:53:b7:29:ac:ec:1b:17:d9:12:d3:
98:49:80:42:e0:1f:4c:c6:0a:88:57:da:14:d9:2e:16:a1:e1:
03:59:b7:7a:54:ef:bd:9e:ba:39:ca:7b:72:e4:c7:04:dc:0d:
7b:0d:61:61:fd:b6:5c:9c:9d:da:75:c8:4a:e7:ee:75:a5:3f:
ce:b3:61:d8:00:15:94:1e:3b:e0:6a:3f:c5:2d:fc:44:9a:21:
eb:14:e6:39:c7:cc:7a:ed:82:f7:3f:64:14:36:c3:b0:71:f7:
85:69:25:bb:43:41:b8:c8:3d:6d:ba:4d:98:c3:9b:db:90:9b:
78:55:5b:58:dc:ed:29:22:03:5a:f9:6e:2c:66:5c:f9:ed:67:
7a:bd:6b:7b:c8:3a:bd:87:4f:37:a0:82:4f:55:6b:bb:cb:bf:
b4:8a:12:af:ff:40:98:68:17:6a:e5:42:42:be:ed:3a:17:0f:
53:3e:72:b8:fd:6d:f6:20:8c:ba:d7:28:6d:cd:d7:2b:90:84:
fa:44:46:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:11:09 2024 by rpki-client on console-fra.rpki-client.org