Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/1-Ro7RpJqNgh_f_N-UzvVz1Ai6gA.roa
File: 1-Ro7RpJqNgh_f_N-UzvVz1Ai6gA.roa (raw, json)
Hash identifier: Tv0NNUmuL2S4lAzuzjbv0Mg6N7n9MAat5ioJp33bJ+g=
Subject key identifier: F9:1A:3B:46:92:6A:36:08:7F:7F:F3:7E:53:3B:D5:CF:50:22:EA:00
Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial: 018CC6B91C4D4F78651AAD2180A9F8F4AC5E
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/1-Ro7RpJqNgh_f_N-UzvVz1Ai6gA.roa
Signing time: Mon 01 Jan 2024 20:31:09 +0000
ROA not before: Mon 01 Jan 2024 20:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50733
IP address blocks: 89.221.83.0/24 maxlen: 24
89.221.82.0/24 maxlen: 24
89.221.82.0/23 maxlen: 23
89.221.81.0/24 maxlen: 24
89.221.80.0/24 maxlen: 24
89.221.80.0/22 maxlen: 22
89.221.80.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:1c:4d:4f:78:65:1a:ad:21:80:a9:f8:f4:ac:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Validity
Not Before: Jan 1 20:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f91a3b46926a36087f7ff37e533bd5cf5022ea00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:a7:d9:f4:fc:4c:9e:ae:3f:bd:a3:bd:3e:
19:15:2c:8c:a1:a1:e8:77:e6:6c:25:a9:13:b0:b9:
f4:d9:8c:2e:ac:a3:bc:da:4a:e1:cd:61:42:2e:0f:
e0:7f:cf:31:c7:ee:61:57:4b:5a:17:d4:0c:f1:34:
01:15:1a:7d:26:ad:67:66:81:1a:ad:da:69:79:74:
11:a0:7b:69:e6:5a:81:cc:79:35:c5:45:e7:70:2e:
66:c0:87:df:93:10:c7:e1:12:94:d3:00:07:c1:7e:
cb:bc:5c:5a:18:e0:ea:54:dc:6b:2a:ca:63:31:10:
b8:74:ad:11:ce:ff:d1:74:73:37:30:57:f8:4b:94:
b9:49:72:6b:b0:9f:80:3a:d6:5e:d7:23:ee:97:b9:
40:dd:a1:f7:63:2e:ed:0a:45:89:25:23:a9:72:26:
ec:3f:68:62:a6:5b:6d:1d:4c:97:de:b2:03:29:fc:
5c:11:3d:34:9e:71:8f:1d:cb:f3:24:f9:8d:0c:f2:
bf:83:af:d0:64:60:84:95:ce:a6:f2:cc:54:d5:28:
19:c7:56:93:f8:23:5d:c8:ee:3e:5f:97:80:57:ff:
50:f7:ee:f1:35:aa:07:6d:bc:9f:2f:a3:19:1c:12:
8f:31:0e:0d:0a:9a:f8:27:e1:8f:55:ed:76:b5:8c:
e6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1A:3B:46:92:6A:36:08:7F:7F:F3:7E:53:3B:D5:CF:50:22:EA:00
X509v3 Authority Key Identifier:
keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/1-Ro7RpJqNgh_f_N-UzvVz1Ai6gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.221.80.0/22
Signature Algorithm: sha256WithRSAEncryption
90:7b:2c:e8:11:de:95:aa:d0:bc:b3:ff:69:32:f9:9b:8c:1a:
03:8b:7b:0f:e0:a4:d9:1f:98:a7:97:14:bb:bd:d0:53:d3:41:
94:6e:f2:93:39:81:8e:8c:dd:83:db:d2:cb:eb:a4:75:70:bb:
d6:bc:86:df:6d:fd:b3:8a:7f:47:7a:44:3b:5a:b9:f6:9f:96:
06:27:30:a9:cf:02:57:f0:58:f1:19:2b:a6:66:cc:7a:8c:de:
f1:db:df:d6:75:88:56:c8:84:00:b0:e7:81:40:29:35:fc:46:
49:13:b8:a6:28:5c:46:76:f9:a8:5a:b4:f9:cf:18:75:a4:38:
57:91:58:f1:a8:a9:46:ed:f7:78:75:2f:49:4d:b5:cb:f1:c3:
3e:cf:2a:3a:2b:fe:01:92:78:5f:12:e6:a8:bd:84:e3:53:e8:
db:fe:08:95:ef:21:e2:80:a3:f0:ea:23:e7:ba:c8:28:e1:40:
61:b6:5f:ff:5d:8b:16:b0:fb:e9:78:94:ed:29:59:c9:43:6e:
97:ef:85:4b:9d:fd:07:de:38:bc:1b:ed:da:be:de:08:d2:d7:
81:e7:f5:c5:0a:95:6c:44:32:df:c3:9f:7d:f2:f2:6f:f9:2c:
37:6a:e1:ee:d9:d4:9b:0d:be:a3:4d:30:db:82:8e:f0:0c:94:
0b:2c:85:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:57 2024 by rpki-client on console-fra.rpki-client.org