Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/h8X8qlf7MiMnB52ZjuaCoI4ckGA.roa
File: h8X8qlf7MiMnB52ZjuaCoI4ckGA.roa (raw, json)
Hash identifier: iAbJjd2DABH5IP46Ug3WDpIF9kM/COxKgWtP3aUk8uE=
Subject key identifier: 87:C5:FC:AA:57:FB:32:23:27:07:9D:99:8E:E6:82:A0:8E:1C:90:60
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 0190E896079280BC5D6E67C364E36819059C
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/h8X8qlf7MiMnB52ZjuaCoI4ckGA.roa
Signing time: Thu 25 Jul 2024 06:31:04 +0000
ROA not before: Thu 25 Jul 2024 06:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210835
IP address blocks: 89.150.36.0/24 maxlen: 24
89.150.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e8:96:07:92:80:bc:5d:6e:67:c3:64:e3:68:19:05:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Jul 25 06:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87c5fcaa57fb322327079d998ee682a08e1c9060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:e8:6e:d1:1c:4a:d4:3d:10:d1:ce:ab:05:
a2:29:0c:6f:6e:9d:8c:7d:a1:b6:0d:ac:6a:0a:4d:
7b:27:55:b7:28:4a:9c:38:b4:c3:c0:fe:49:e6:01:
59:2d:04:9f:13:8f:e9:91:d6:67:00:52:d3:82:16:
79:eb:88:00:cb:6e:67:28:3f:40:e0:46:4a:d9:0b:
c1:3e:12:ce:b9:15:24:4a:41:f4:99:e3:3f:04:1d:
2c:9b:e8:47:db:81:e3:8f:2e:a0:34:cb:65:a2:f1:
e8:e5:2e:b6:85:87:46:5c:f5:c6:0f:75:d9:d4:3b:
fd:8d:ff:70:0c:94:16:72:57:b1:d7:dc:45:cf:df:
95:26:61:db:cc:92:72:2f:e5:34:a8:ca:f1:e6:62:
9e:21:21:c5:28:41:5b:84:58:ae:ff:f7:56:5f:ea:
f3:d9:be:5f:ce:3d:31:00:03:0c:31:f8:af:70:65:
02:ab:58:67:21:08:13:2b:03:5a:ba:54:14:a1:7d:
47:15:93:83:af:26:9e:ac:5e:b1:f1:9c:0a:4a:35:
5a:18:1e:92:91:03:4d:00:af:d6:7d:74:ff:d4:75:
2c:24:e1:df:2a:fc:8c:08:e4:9e:d8:17:42:3b:90:
dc:50:55:e5:f7:13:f9:ac:71:ac:42:41:a2:25:1e:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C5:FC:AA:57:FB:32:23:27:07:9D:99:8E:E6:82:A0:8E:1C:90:60
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/h8X8qlf7MiMnB52ZjuaCoI4ckGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.36.0/24
89.150.38.0/24
Signature Algorithm: sha256WithRSAEncryption
49:53:0f:59:4a:b9:7d:64:47:57:99:06:2a:28:45:b4:0c:70:
dc:bf:86:01:7e:51:07:6a:b2:56:83:7d:6b:8f:b6:ad:f2:26:
66:d1:fc:68:c7:e8:ee:da:f1:26:b6:d4:e5:ad:4f:eb:8b:ec:
e8:6c:1c:da:f8:38:55:d5:0e:e6:fc:e3:60:5d:ef:62:60:cc:
2d:c8:f0:ab:2c:a7:6c:91:87:e1:bc:ca:3a:f6:fc:34:78:7a:
c7:da:eb:04:53:79:83:c8:13:db:30:84:14:11:8f:3b:03:72:
17:6a:cf:09:a1:4a:40:88:ad:36:68:37:11:91:9f:87:31:7a:
ca:91:27:57:35:a5:de:d1:16:dc:75:de:54:9c:94:67:30:e2:
8b:ae:24:99:63:96:36:75:e9:84:9d:8b:f0:7c:af:f2:4f:bc:
84:c8:10:e3:ca:51:26:0f:89:66:b2:50:b8:3a:f5:0b:e6:ba:
d7:3e:91:75:a2:c4:1b:bc:22:bb:27:8d:ff:a1:20:a3:77:a7:
fd:e9:45:30:b5:6a:c7:be:ac:5a:90:9f:26:a7:35:f9:29:04:
5a:04:7b:fa:01:45:91:d2:71:be:ba:16:e5:f9:a6:8f:45:9d:
23:fb:af:09:f3:68:f8:7e:54:8a:58:3c:76:3f:03:ff:32:4f:
da:d0:da:f0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZDolgeSgLxdbmfDZONoGQWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjZlYTBmZmIyYWVlNGY3NmVlMWExMDQ4OTY5YjhiNTA2
NWRhNDUwHhcNMjQwNzI1MDYzMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2M1ZmNhYTU3ZmIzMjIzMjcwNzlkOTk4ZWU2ODJhMDhlMWM5MDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY7obtEcStQ9ENHOqwWiKQxvbp2M
faG2DaxqCk17J1W3KEqcOLTDwP5J5gFZLQSfE4/pkdZnAFLTghZ564gAy25nKD9A
4EZK2QvBPhLOuRUkSkH0meM/BB0sm+hH24Hjjy6gNMtlovHo5S62hYdGXPXGD3XZ
1Dv9jf9wDJQWclex19xFz9+VJmHbzJJyL+U0qMrx5mKeISHFKEFbhFiu//dWX+rz
2b5fzj0xAAMMMfivcGUCq1hnIQgTKwNaulQUoX1HFZODryaerF6x8ZwKSjVaGB6S
kQNNAK/WfXT/1HUsJOHfKvyMCOSe2BdCO5DcUFXl9xP5rHGsQkGiJR5DMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIfF/KpX+zIjJwedmY7mgqCOHJBgMB8GA1UdIwQY
MBaAFKz26g/7Ku5Pdu4aEEiWm4tQZdpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQt
NTU1ZjNmMThlNTRmLzEvaDhYOHFsZjdNaU1uQjUyWmp1YUNvSTRja0dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQtNTU1ZjNmMThlNTRm
LzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWZYkAwQA
WZYmMA0GCSqGSIb3DQEBCwUAA4IBAQBJUw9ZSrl9ZEdXmQYqKEW0DHDcv4YBflEH
arJWg31rj7at8iZm0fxox+ju2vEmttTlrU/ri+zobBza+DhV1Q7m/ONgXe9iYMwt
yPCrLKdskYfhvMo69vw0eHrH2usEU3mDyBPbMIQUEY87A3IXas8JoUpAiK02aDcR
kZ+HMXrKkSdXNaXe0Rbcdd5UnJRnMOKLriSZY5Y2demEnYvwfK/yT7yEyBDjylEm
D4lmslC4OvUL5rrXPpF1osQbvCK7J43/oSCjd6f96UUwtWrHvqxakJ8mpzX5KQRa
BHv6AUWR0nG+uhbl+aaPRZ0j+68J82j4flSKWDx2PwP/Mk/a0Nrw
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:50 2024 by rpki-client on console-ams.rpki-client.org