Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dlU5KwEwzQ0c1FgKZcJZlE4Zboc.roa
File: dlU5KwEwzQ0c1FgKZcJZlE4Zboc.roa (raw, json)
Hash identifier: zBdPyhCMrvI1aDlH4fCwt0PNV0pkz56tRolS+1Ig7BI=
Subject key identifier: 76:55:39:2B:01:30:CD:0D:1C:D4:58:0A:65:C2:59:94:4E:19:6E:87
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC50120F12905F05E17B33C2B75D225A0
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dlU5KwEwzQ0c1FgKZcJZlE4Zboc.roa
Signing time: Mon 01 Jan 2024 12:30:34 +0000
ROA not before: Mon 01 Jan 2024 12:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199654
IP address blocks: 89.33.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:20:f1:29:05:f0:5e:17:b3:3c:2b:75:d2:25:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7655392b0130cd0d1cd4580a65c259944e196e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:75:4e:2f:bb:e8:ce:d3:ab:d5:f1:12:ec:
83:52:e8:00:6e:99:60:5a:69:b4:fc:b7:92:e9:21:
6f:73:5d:a0:88:60:58:38:f1:f3:c0:b8:7d:90:03:
c9:82:e2:27:a2:c9:e5:e7:87:1a:b2:ef:c0:8a:e4:
b8:75:1a:18:30:1d:05:94:4d:34:98:c7:64:39:4f:
ca:48:86:4a:d8:01:92:0f:19:23:4f:39:b7:02:02:
18:13:0c:8d:93:9e:e1:09:82:01:00:3b:ec:0c:3b:
73:a7:32:ba:92:e4:10:61:7b:ec:42:fd:9a:78:0c:
08:f9:61:8e:08:22:44:ee:d3:ed:78:f5:67:e8:c9:
09:c6:dd:80:c3:b2:e2:81:d7:91:71:24:97:03:9f:
02:be:85:54:fc:2e:0e:d8:a8:6d:2c:cc:e6:85:4d:
bd:d9:84:94:9b:c2:27:4b:46:83:3d:52:4c:15:b7:
2f:48:96:57:fb:6b:3f:94:3a:2e:d1:04:dd:83:68:
61:35:34:94:fb:1b:3e:2c:b5:c1:64:6e:1c:6c:63:
44:f3:a0:f0:da:d0:22:d7:38:aa:0b:3d:2f:73:85:
e5:83:19:ca:2c:a7:9b:0c:bc:64:c6:43:86:3c:7f:
ec:14:18:2a:69:7a:fc:cb:3e:b9:d4:2a:00:13:2e:
d9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:55:39:2B:01:30:CD:0D:1C:D4:58:0A:65:C2:59:94:4E:19:6E:87
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dlU5KwEwzQ0c1FgKZcJZlE4Zboc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:33:f8:ba:dd:50:1c:8f:76:a6:18:69:7b:38:0e:04:c7:85:
48:b2:c1:0b:82:4f:66:9b:05:5f:7d:ce:fe:7a:a6:e1:12:8a:
7d:0b:cd:57:e2:d7:af:e7:9b:f1:fc:61:5b:fd:b1:61:85:b0:
a8:64:e4:88:dc:25:73:03:a3:49:cf:d8:01:4c:83:04:11:6b:
ad:db:09:b5:1d:16:f4:b6:c2:f8:d9:78:af:a7:2b:06:cf:d5:
e7:77:b4:f1:94:c8:35:f6:5d:96:2e:f2:d8:86:e7:91:4d:7b:
07:f6:2f:6a:ef:d6:54:bf:84:b2:0d:c7:f8:0d:55:f8:99:5d:
80:08:3d:e0:6a:1a:36:70:c7:56:d6:61:1d:6f:fc:55:43:99:
b4:2f:e6:8e:06:27:dd:c4:f6:4e:63:23:28:6d:3d:0c:2a:e2:
dc:8c:98:da:c4:7d:94:c5:b2:98:b1:ac:5c:29:be:68:42:e2:
68:47:4a:8b:d1:e3:02:61:d9:f5:b9:0d:7f:9f:7a:1b:4d:5f:
17:2b:c0:ba:f6:a6:0d:13:a0:c2:01:2c:91:fe:af:6f:c2:41:
03:fc:1b:91:03:1e:61:1b:17:71:34:25:6d:15:4f:13:1e:1c:
d6:eb:0b:7f:44:4f:96:f6:49:d3:63:0b:f8:8c:16:6e:7b:4c:
67:a7:ad:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:51:20 2024 by rpki-client on console-ams.rpki-client.org