Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/ibU6pDWbqBkDxTZNDRWc3tg9RXs.roa
File: ibU6pDWbqBkDxTZNDRWc3tg9RXs.roa (raw, json)
Hash identifier: VJWotTfXivUwS+LqgheMrXL+/hpyIrB9X5QtamS7mac=
Subject key identifier: 89:B5:3A:A4:35:9B:A8:19:03:C5:36:4D:0D:15:9C:DE:D8:3D:45:7B
Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial: 018CC5DC2F46A2C76F186821678CD7C19FE9
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/ibU6pDWbqBkDxTZNDRWc3tg9RXs.roa
Signing time: Mon 01 Jan 2024 16:29:50 +0000
ROA not before: Mon 01 Jan 2024 16:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61429
IP address blocks: 81.23.240.0/23 maxlen: 23
185.6.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2f:46:a2:c7:6f:18:68:21:67:8c:d7:c1:9f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Validity
Not Before: Jan 1 16:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89b53aa4359ba81903c5364d0d159cded83d457b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2f:da:44:2a:9a:b7:b4:7d:38:9c:75:20:fc:
6e:b5:d9:89:46:de:19:27:c9:d1:4a:58:0c:3a:cf:
4f:56:f9:f6:ff:2f:9e:31:dc:92:6b:47:55:f7:d1:
df:54:14:92:e7:ac:50:18:95:ad:f8:37:5c:a0:50:
71:b9:fe:96:8d:92:9f:30:16:f7:0a:2b:20:00:fb:
a2:ac:de:f2:f6:fe:4f:ba:b6:59:9f:aa:ab:c2:50:
75:a3:a1:c3:1f:7d:9f:06:3d:7a:77:04:d6:91:f4:
cf:c2:4e:26:23:43:12:8c:d5:05:d7:3d:cb:19:91:
2a:74:9b:37:2f:f9:28:09:f5:75:b0:0b:9d:2b:59:
a2:36:d4:76:17:f3:ff:8f:60:36:3e:e1:7a:25:39:
28:0c:f1:6e:d9:d6:f4:53:2d:5c:34:7b:d6:83:38:
12:06:a6:17:8b:68:3b:45:66:7d:e3:b4:53:f3:b5:
e6:2a:1e:ac:80:b1:32:39:ca:df:a6:57:16:67:aa:
90:bc:b1:49:05:e7:b9:42:49:1b:8e:25:17:f4:e5:
b0:4e:76:8c:cf:4a:f9:86:1e:e0:cb:eb:9c:45:0f:
0e:f7:c0:ba:91:5d:d3:79:7c:f7:d7:d7:c3:e0:6e:
2e:5a:43:ee:ce:57:be:72:2b:10:8d:f1:5c:55:b7:
2f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B5:3A:A4:35:9B:A8:19:03:C5:36:4D:0D:15:9C:DE:D8:3D:45:7B
X509v3 Authority Key Identifier:
keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/ibU6pDWbqBkDxTZNDRWc3tg9RXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.240.0/23
185.6.108.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:d0:03:2c:89:47:10:41:e0:37:34:fb:19:16:4a:91:5a:b2:
4d:1e:00:85:49:55:92:59:9f:2c:b2:f1:79:1d:39:9b:44:f1:
4a:9e:99:ca:c0:a2:d1:ff:5d:14:73:92:b4:78:4b:f6:8e:65:
f7:92:80:c4:1f:68:93:c6:2b:83:b6:21:29:b5:79:fb:92:c5:
f0:5a:58:17:2b:2f:b4:32:9a:15:a3:dc:2f:98:30:d6:e4:3f:
39:2d:a1:d0:1d:bd:3b:c1:12:98:4b:8a:33:53:34:e3:f3:e0:
80:e5:9c:1c:09:28:b5:c3:a8:e0:e8:d9:7d:4a:bc:1f:a4:e8:
91:b1:52:18:bd:48:ec:fc:47:4a:e3:19:c5:73:75:79:d6:1b:
12:70:39:59:7d:c4:d9:b8:1c:89:30:c3:e7:70:49:34:13:a9:
90:28:36:45:5e:95:24:7c:9f:ca:64:53:cc:ce:fa:0c:16:3f:
71:c1:c5:59:ed:1c:38:1e:d7:04:79:a5:51:d6:54:80:1f:00:
59:89:cb:63:26:73:ce:db:c0:86:ed:67:3a:f1:7f:a4:f0:5c:
00:34:54:e2:e0:61:d8:fc:e4:ed:d8:ba:c4:ef:01:c5:33:9f:
33:2b:b9:6f:13:10:4a:ab:ef:e4:19:59:05:6d:ae:33:b4:3e:
e3:96:03:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 03:37:00 2024 by rpki-client on console-fra.rpki-client.org