Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/iWeUWPVoe6n4PWQDW0PBOab_zt4.roa
File: iWeUWPVoe6n4PWQDW0PBOab_zt4.roa (raw, json)
Hash identifier: 878iwm8fKQ7mw0T0cyU/bWo6BYwH8z/3BItEo1BvS2w=
Subject key identifier: 89:67:94:58:F5:68:7B:A9:F8:3D:64:03:5B:43:C1:39:A6:FF:CE:DE
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 018CC7958CE603B9FD98E19E824DBE5599AA
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/iWeUWPVoe6n4PWQDW0PBOab_zt4.roa
Signing time: Tue 02 Jan 2024 00:31:56 +0000
ROA not before: Tue 02 Jan 2024 00:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206403
IP address blocks: 89.223.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:8c:e6:03:b9:fd:98:e1:9e:82:4d:be:55:99:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 2 00:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89679458f5687ba9f83d64035b43c139a6ffcede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:c0:62:08:cf:f7:bc:a4:47:3a:9b:cd:a2:
f2:47:64:38:4d:bb:73:dd:d1:ff:fe:40:b0:38:82:
e2:1c:8c:0f:3d:69:59:24:c2:0b:d5:17:d1:38:75:
45:38:a1:98:a9:61:93:dc:54:0b:aa:d6:21:96:c3:
66:b9:ce:eb:c9:e8:62:fa:b8:3c:de:db:b6:49:4b:
4e:a4:7e:28:20:db:4c:a5:4f:da:96:67:80:da:f8:
30:b6:5f:f0:da:4f:4c:ed:37:27:8e:d6:7a:15:1c:
4a:44:2d:b6:4d:95:c5:51:86:77:8b:3a:aa:77:c5:
fe:87:cb:11:9f:09:78:16:ac:c0:df:83:87:15:4b:
10:d0:78:b6:13:16:21:ef:9b:89:4f:77:7c:a3:0a:
0a:e9:3c:22:81:e4:8c:19:eb:50:6a:f5:59:cc:12:
44:14:4e:58:aa:c7:13:4a:d4:39:3d:4d:d7:97:62:
5b:bc:a2:39:ad:44:a5:6f:61:b3:eb:ca:9b:e1:2b:
eb:99:4c:ef:f6:34:cb:f9:28:1f:3a:8e:68:f9:7f:
30:2c:82:fd:15:d6:9c:7d:76:ca:ff:90:90:63:28:
41:25:65:8d:13:98:36:ae:9c:c0:1e:43:0a:ca:00:
34:2d:1d:d2:23:71:3d:4d:ee:62:74:f8:9c:c5:f2:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:67:94:58:F5:68:7B:A9:F8:3D:64:03:5B:43:C1:39:A6:FF:CE:DE
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/iWeUWPVoe6n4PWQDW0PBOab_zt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.16.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e6:c5:f6:ab:f7:a7:73:23:99:a5:aa:c8:1b:ad:dc:af:98:
e9:97:2e:05:1f:2c:64:f6:b4:f9:55:af:0d:38:33:ff:f7:26:
40:9b:eb:47:56:71:01:d2:8a:d7:38:6b:f1:3b:ba:b7:3a:25:
dd:fb:90:e8:55:7b:ba:0a:76:df:53:ce:3c:bf:f2:66:e4:4f:
8f:e3:ad:7e:75:37:95:b5:de:e7:ac:fa:90:8c:d2:85:19:8e:
ee:0b:93:2f:34:13:b2:70:a4:3b:d0:1d:08:5b:b5:a7:e8:12:
4a:3c:63:4f:66:fa:cb:d0:8e:94:cf:37:a3:95:2a:15:08:8b:
d6:13:ab:f1:94:83:bc:ee:9b:2d:77:8e:69:43:c5:79:06:2d:
a2:3e:a0:fc:0d:c0:ee:f6:98:61:c2:b9:41:6e:78:05:fa:88:
c4:24:c1:09:23:07:1b:2b:0a:62:57:f8:28:d7:94:73:57:fa:
36:9b:d9:66:4e:6c:cb:d8:e8:34:14:28:2c:41:03:65:ee:f5:
91:e0:51:e0:be:cb:3a:6c:fd:37:a8:62:f9:74:0c:63:d9:55:
21:79:a8:89:a1:31:57:2f:fb:7e:4a:81:5d:0b:64:2f:e0:f1:
9a:72:82:ea:44:90:2d:63:28:7e:6d:9c:0f:d9:ed:df:b9:d4:
fc:ea:09:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:17 2024 by rpki-client on console-fra.rpki-client.org