Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/aXyBCyDzTxopE8BUQQ4oeX2Ohi4.roa
File: aXyBCyDzTxopE8BUQQ4oeX2Ohi4.roa (raw, json)
Hash identifier: xK6JzIWIvQO35XXB5Xfwe++PsL3AqOo9xOzrjReAysc=
Subject key identifier: 69:7C:81:0B:20:F3:4F:1A:29:13:C0:54:41:0E:28:79:7D:8E:86:2E
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 018CC802D02A49FE7411DAC24062C2087452
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/aXyBCyDzTxopE8BUQQ4oeX2Ohi4.roa
Signing time: Tue 02 Jan 2024 02:31:16 +0000
ROA not before: Tue 02 Jan 2024 02:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210485
IP address blocks: 89.34.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:d0:2a:49:fe:74:11:da:c2:40:62:c2:08:74:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 2 02:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=697c810b20f34f1a2913c054410e28797d8e862e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1e:43:5c:e3:46:2b:fd:03:41:be:6d:48:3d:
67:f6:94:a2:a9:e8:54:d6:bd:fc:38:0a:9a:89:10:
66:cd:4c:48:c1:5f:15:c0:0c:44:6e:80:3b:91:5e:
55:dc:1f:66:35:7c:5d:07:ed:02:5b:34:bc:59:aa:
c0:e1:62:e7:a9:35:ee:31:7f:f0:11:72:6e:78:a5:
95:b4:3a:62:eb:0a:70:20:96:aa:64:ef:8f:b9:e2:
ef:d5:c8:f2:7b:57:46:02:15:70:3b:23:df:ee:2c:
9a:d9:66:8f:8d:45:d7:e8:f6:f1:f0:0f:e9:5f:42:
60:06:27:c0:22:12:f9:04:6f:89:72:7e:f3:67:a9:
44:0b:84:cd:43:f1:48:10:6b:e2:d3:cf:ce:4d:07:
ff:aa:6e:c9:f9:5b:5c:68:6b:d2:58:ea:6f:15:cb:
1e:e7:5c:5f:fd:a3:a7:02:d9:04:a1:38:10:49:21:
15:49:a5:4a:73:4e:4f:84:fb:d7:bf:ae:51:db:6b:
b9:b4:ca:1e:0a:13:af:10:41:13:f0:c5:ba:7e:28:
cb:76:81:95:c3:5f:62:92:9c:e1:25:83:26:0b:78:
bd:04:84:1c:6d:50:43:20:50:7f:36:36:0d:1d:37:
f1:9f:16:fa:f0:ae:33:6e:7e:b4:eb:e3:f1:bf:ae:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7C:81:0B:20:F3:4F:1A:29:13:C0:54:41:0E:28:79:7D:8E:86:2E
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/aXyBCyDzTxopE8BUQQ4oeX2Ohi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.1.0/24
Signature Algorithm: sha256WithRSAEncryption
18:5f:1f:6e:28:aa:0b:61:76:eb:84:8b:7f:d0:86:82:fa:96:
06:33:88:43:60:da:8d:e4:4c:ff:31:c3:3c:82:e1:b0:de:3d:
54:9a:2d:9e:74:ba:f1:6a:4a:d6:62:51:84:a8:ff:aa:63:d4:
37:4f:b7:41:04:84:4b:c4:b1:a3:a7:b7:19:8f:b1:c1:65:1b:
af:04:43:5a:98:42:30:f4:62:e1:8a:7b:b8:97:53:45:3c:f1:
e0:a8:2e:6c:1d:e9:6a:26:98:eb:67:8d:2b:c6:2b:22:6d:c7:
e7:3b:32:3f:8c:64:3a:a5:73:a2:3d:3d:2c:72:28:b6:79:87:
e2:38:1b:01:4d:78:48:da:e5:05:fa:89:f4:fb:9d:20:14:23:
d0:c4:4d:4e:e4:fc:19:d7:bf:83:b8:42:b5:da:a6:4a:22:31:
16:57:de:ee:59:1c:51:9b:84:8b:45:7b:5a:6c:ce:4a:89:3e:
34:87:6a:3b:be:31:50:8f:8a:51:89:4e:a9:8e:04:7a:47:14:
51:fd:60:48:35:3d:17:37:7e:5a:83:62:27:78:4b:6a:29:a4:
ee:53:ab:a8:aa:7f:8d:d7:48:c4:ca:a6:0c:dd:c9:20:ff:7b:
ec:45:61:cb:c2:0b:81:81:b6:f0:8a:cb:fc:00:86:8b:c0:3f:
72:ba:63:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:29 2024 by rpki-client on console-ams.rpki-client.org