Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/E40rcYJvh4ABfi8nQUF3Ua8Y3l0.roa
File: E40rcYJvh4ABfi8nQUF3Ua8Y3l0.roa (raw, json)
Hash identifier: +dxiWUD9SHUn6nQwazKHEKuahbt7roG6ojvutVPvzig=
Subject key identifier: 13:8D:2B:71:82:6F:87:80:01:7E:2F:27:41:41:77:51:AF:18:DE:5D
Certificate issuer: /CN=f694668ba76cf550c4139c17300160077dcea059
Certificate serial: 018CC801EC47786908DA7702DC73BB2E6DC9
Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/E40rcYJvh4ABfi8nQUF3Ua8Y3l0.roa
Signing time: Tue 02 Jan 2024 02:30:18 +0000
ROA not before: Tue 02 Jan 2024 02:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 89.35.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:ec:47:78:69:08:da:77:02:dc:73:bb:2e:6d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f694668ba76cf550c4139c17300160077dcea059
Validity
Not Before: Jan 2 02:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=138d2b71826f8780017e2f2741417751af18de5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:ef:aa:e0:83:d7:13:d9:e7:c3:da:ba:f8:
96:ad:a7:39:a1:ee:84:03:f7:f5:bb:8a:fe:3b:fa:
09:fd:e8:03:f7:66:17:ac:72:e7:b9:10:dd:6a:50:
58:44:9d:c4:9f:18:97:48:fb:c3:a7:89:7b:cb:c7:
55:0e:be:ed:66:63:f8:67:84:6e:e8:88:c4:c1:5c:
5a:9f:b7:8b:47:81:42:5d:68:62:c0:58:5e:42:50:
99:4b:97:a8:e9:39:f3:8a:20:cc:b5:ea:11:91:eb:
03:88:fc:73:86:ac:fd:75:ad:ca:4c:dc:6d:b4:f9:
92:a5:c5:2d:23:81:62:0e:39:20:65:fe:f9:46:bd:
1d:07:14:a6:30:54:e2:44:25:3d:b6:7b:aa:35:a8:
91:c6:5c:b0:b9:24:3b:e8:4f:87:fe:93:aa:f7:21:
82:bb:68:a5:ad:09:33:3f:3d:c0:8c:98:cd:45:b1:
1a:64:14:8c:61:96:9e:3d:de:44:10:7b:15:9c:80:
6a:8e:2f:cb:7b:3b:43:0f:a4:35:74:88:36:36:1c:
3a:47:89:c5:c0:19:74:8f:82:66:a7:d0:47:05:dc:
aa:67:fa:c3:b4:03:bf:5b:94:7c:45:56:77:53:46:
e7:43:ff:8f:e8:f5:fe:b7:e5:57:89:40:07:c6:93:
0e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8D:2B:71:82:6F:87:80:01:7E:2F:27:41:41:77:51:AF:18:DE:5D
X509v3 Authority Key Identifier:
keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/E40rcYJvh4ABfi8nQUF3Ua8Y3l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.39.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:c7:f2:df:f9:70:33:b7:d6:71:3e:04:18:c1:59:67:04:3b:
32:13:61:a0:45:47:ab:2f:c7:f8:94:c9:87:c1:ff:a9:3c:a5:
a8:ee:e1:25:eb:c1:d5:ed:ad:e5:32:27:ff:e8:3f:cf:70:b7:
5b:fc:3d:9f:5a:4d:f8:39:c0:a3:2b:00:d7:b9:05:d3:59:32:
d8:90:b4:17:a6:16:84:78:6e:b5:80:64:d9:21:0b:29:05:5a:
e2:39:5c:59:10:17:22:88:bc:3c:01:ae:39:d9:7f:e5:9a:43:
a1:37:ca:d0:6e:50:11:33:4d:db:52:a3:d2:b0:62:95:38:43:
93:a2:ae:ee:41:91:56:a3:28:a1:cb:4f:89:81:6e:4e:6d:96:
cb:29:61:9a:dc:fd:9a:33:5a:52:08:56:2a:d6:03:e0:81:9e:
85:78:ba:73:5f:92:45:22:0e:72:d2:9c:f1:2f:f9:c6:30:d4:
df:f3:fb:72:46:c5:ae:92:e1:eb:11:b2:c2:48:52:06:da:1e:
be:60:41:67:3a:9c:99:c0:b7:7a:9a:42:91:0b:2b:55:4a:f5:
1c:91:17:ad:b7:a6:08:d6:ed:90:03:80:56:b0:50:4c:43:e6:
5a:cd:3f:ab:46:ae:fe:3e:f7:93:44:f4:db:a3:a7:67:1a:e8:
dc:9b:af:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:05:02 2024 by rpki-client on console-ams.rpki-client.org