Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/T3ImmJb6TU3Vdy6BsAF4qC_20ds.roa
File: T3ImmJb6TU3Vdy6BsAF4qC_20ds.roa (raw, json)
Hash identifier: pTYrgI+v5etvkP1DnLdvJuNvP04bVVPAfvJxUx4P/Ac=
Subject key identifier: 4F:72:26:98:96:FA:4D:4D:D5:77:2E:81:B0:01:78:A8:2F:F6:D1:DB
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018CC56F00221A799905BCE775B24B274C20
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/T3ImmJb6TU3Vdy6BsAF4qC_20ds.roa
Signing time: Mon 01 Jan 2024 14:30:35 +0000
ROA not before: Mon 01 Jan 2024 14:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41703
IP address blocks: 89.252.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:00:22:1a:79:99:05:bc:e7:75:b2:4b:27:4c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 14:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f72269896fa4d4dd5772e81b00178a82ff6d1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:67:aa:07:d3:ac:94:f7:9e:8d:8a:ab:06:6b:
9a:dd:d1:f7:f8:98:ae:5e:93:58:76:51:97:0e:b9:
d6:d7:d2:ad:95:cb:4e:39:ce:3c:cb:22:35:bd:f7:
1e:38:40:97:1d:2e:7f:c7:b8:e1:4d:27:b1:e0:0e:
eb:9c:a8:83:39:c8:91:b8:fa:3b:7c:34:3f:5a:2c:
7f:73:30:79:f0:4a:40:d8:45:e6:51:11:31:b4:1c:
6d:1e:3f:ac:58:40:07:1d:e5:82:f3:e9:a0:c4:1c:
74:40:00:fe:6f:e5:99:23:1d:ed:81:40:82:c4:be:
72:c4:48:06:8c:76:a4:db:73:91:45:f1:3d:07:2d:
3f:35:fa:e9:da:a1:a2:e5:34:4b:95:6d:1f:02:20:
f9:19:b2:21:cb:75:9a:cc:ea:66:ff:fc:60:b9:53:
44:db:82:38:19:70:67:a0:fd:2c:d4:2b:91:41:4c:
1b:1b:58:a9:4f:36:9d:da:66:63:48:f1:ff:c1:ff:
52:28:6a:91:4b:a1:0a:5d:d7:a5:9f:15:c4:8c:37:
4b:25:eb:b3:58:17:72:52:cc:58:93:07:9a:3f:3a:
79:7b:20:5f:d8:a3:f4:4a:b5:b1:52:3e:95:db:ff:
db:2f:16:d7:ae:2b:77:ce:b5:86:2a:a6:57:0b:51:
e4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:72:26:98:96:FA:4D:4D:D5:77:2E:81:B0:01:78:A8:2F:F6:D1:DB
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/T3ImmJb6TU3Vdy6BsAF4qC_20ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:30:31:a8:e8:3e:bc:32:58:38:6d:63:77:20:62:ec:33:ca:
f6:70:8a:8b:bd:86:e0:78:3d:b4:3b:91:ab:64:aa:8d:2d:21:
14:17:de:e7:0c:ee:b6:ac:71:aa:b2:3f:1f:16:05:ec:4a:06:
64:78:d5:78:f5:c7:64:90:93:d0:d0:5d:5b:9f:10:0c:34:a7:
72:22:fe:c2:19:22:4b:76:63:02:60:bf:36:29:5e:df:74:bc:
4b:33:ac:8a:89:86:94:8f:32:2a:00:0a:68:66:85:0d:d3:0f:
a8:8f:3c:bc:b1:b8:13:18:ef:90:3e:e4:5f:6f:bf:ab:46:ed:
01:9d:a6:bd:cf:10:aa:d8:d3:21:9f:f9:1b:95:cb:26:07:5f:
79:28:c7:fc:d7:62:1a:c2:27:d4:ed:f1:c4:e8:82:43:14:89:
15:53:12:e8:8c:4a:5a:90:e7:c5:f7:8a:f7:a2:4e:42:54:43:
3f:aa:3c:f2:f8:07:31:2e:51:1f:cf:85:4c:22:8b:0f:28:4b:
4a:51:f9:2c:b9:99:d9:3a:03:34:6e:4e:78:fd:11:01:3a:6c:
7d:33:c6:00:eb:32:62:2f:76:46:9e:ca:4e:b9:9b:7e:9b:2c:
77:8a:de:54:53:78:d8:69:de:fd:55:c8:15:2f:62:2f:b8:53:
33:32:97:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 11:51:40 2024 by rpki-client on console-ams.rpki-client.org