Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/0brTatYR4FiDv9F-vwVsILShtAg.roa
File: 0brTatYR4FiDv9F-vwVsILShtAg.roa (raw, json)
Hash identifier: /4pEhsXUagZAvwAQC+qJk/qF1HoJtYUzJTxlSOjCWAA=
Subject key identifier: D1:BA:D3:6A:D6:11:E0:58:83:BF:D1:7E:BF:05:6C:20:B4:A1:B4:08
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018CC56F06EF8862ACC267F44BEA202999A6
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/0brTatYR4FiDv9F-vwVsILShtAg.roa
Signing time: Mon 01 Jan 2024 14:30:36 +0000
ROA not before: Mon 01 Jan 2024 14:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201215
IP address blocks: 89.252.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:06:ef:88:62:ac:c2:67:f4:4b:ea:20:29:99:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 14:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1bad36ad611e05883bfd17ebf056c20b4a1b408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:a3:76:58:1e:e7:f2:4e:57:b7:9f:80:72:
7f:e3:7e:dc:04:1f:24:05:19:c3:a8:76:1f:d9:ad:
4a:a4:a7:02:36:ff:6d:10:c5:be:5b:74:cc:d0:cb:
07:f4:71:ce:ed:27:a7:db:84:83:de:1f:c6:f2:f4:
87:81:0a:fe:1e:91:2d:d8:c9:ae:4e:f3:36:92:20:
1b:6b:2e:57:19:03:60:10:2f:58:80:72:d8:4c:44:
7c:07:04:75:1d:ab:b7:e5:89:71:7c:d2:02:b7:91:
23:86:9b:bb:f8:34:17:c4:9e:96:a2:08:33:38:dc:
c9:f0:81:70:27:d4:ac:b3:ac:05:9b:3d:89:d6:b9:
08:d1:f9:24:13:54:9e:86:81:52:ee:ca:96:6e:e0:
37:e2:be:a2:3f:99:85:20:03:45:0e:6b:2e:34:36:
42:40:d1:50:cb:6d:08:16:4b:86:20:22:71:ed:91:
e5:3c:40:15:48:d0:c5:65:6f:b3:b8:1f:8b:0e:37:
cf:59:d3:8f:da:72:1e:80:a7:43:09:66:64:7f:a6:
60:1c:e8:4e:31:51:99:15:18:db:f3:3d:b3:be:85:
18:9e:3b:77:f5:df:8f:de:91:3c:b8:f5:9b:a9:d4:
b5:a3:86:bb:ad:45:b6:bb:33:1f:07:13:ba:d1:1e:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BA:D3:6A:D6:11:E0:58:83:BF:D1:7E:BF:05:6C:20:B4:A1:B4:08
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/0brTatYR4FiDv9F-vwVsILShtAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.202.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e9:fb:3c:00:9c:31:c4:0c:5b:7a:bf:33:2c:05:9d:8f:b7:
03:4c:d1:f8:0f:d8:57:e8:bb:2a:80:ab:d7:80:17:2a:34:9a:
ed:bb:31:bc:23:06:12:d9:e5:82:06:f2:5f:13:20:f5:90:60:
35:60:6d:82:8f:f5:07:db:7c:3d:dc:57:e0:a2:6b:19:a4:98:
ae:cf:39:6b:25:11:43:ca:c8:11:a3:e1:48:10:6e:37:14:14:
86:51:f1:17:dc:70:45:4d:5d:98:59:a2:03:13:56:5d:74:85:
26:63:7b:15:7b:63:16:52:51:ad:c2:52:5d:0e:97:a0:e3:0c:
c2:56:6e:7f:fa:15:cf:be:71:8f:df:24:e8:c0:b2:4a:54:06:
75:f7:41:34:95:cd:d5:a3:2a:dc:e6:0f:ab:25:bd:76:ff:a2:
25:3e:b2:42:74:bf:a6:3d:df:5c:a9:5f:8e:de:61:da:9f:b0:
03:1f:bf:33:f0:a4:fe:0e:7a:e1:0e:92:c6:61:4b:c5:00:0c:
77:66:a3:26:90:3f:16:bf:80:88:0c:fc:16:ae:04:52:dd:e8:
2c:bb:1b:a7:65:3c:1d:e6:54:f8:ad:f3:59:df:85:dc:5f:25:
48:07:3d:50:96:17:75:69:68:12:9b:32:ce:81:06:fa:87:b9:
19:b7:5d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:43:08 2024 by rpki-client on console-ams.rpki-client.org