Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/zfEl2n15l6qN4hoPTnvSl-KbSLA.roa
File: zfEl2n15l6qN4hoPTnvSl-KbSLA.roa (raw, json)
Hash identifier: eswGjoCLBiBqp2yd/+Rp7EfhglmpUjEj3QsWeEoGiuo=
Subject key identifier: CD:F1:25:DA:7D:79:97:AA:8D:E2:1A:0F:4E:7B:D2:97:E2:9B:48:B0
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018CC649CC3636AE8D885BB069DB94F3A8C5
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/zfEl2n15l6qN4hoPTnvSl-KbSLA.roa
Signing time: Mon 01 Jan 2024 18:29:34 +0000
ROA not before: Mon 01 Jan 2024 18:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202662
IP address blocks: 89.185.24.0/22 maxlen: 24
89.185.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:cc:36:36:ae:8d:88:5b:b0:69:db:94:f3:a8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 18:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdf125da7d7997aa8de21a0f4e7bd297e29b48b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:6d:0c:4f:d9:8f:ed:06:43:c7:66:73:d5:
57:fa:a4:d5:c0:a0:02:8a:a3:64:f0:78:3d:93:86:
10:a3:5d:d3:6d:65:2b:f9:21:ed:04:52:24:83:a9:
af:5b:ae:09:06:ce:f1:44:86:c4:2e:4e:ef:36:dc:
90:25:c6:e7:aa:dc:e6:f7:6e:d7:a0:dd:9f:cb:c0:
00:4a:68:65:37:63:73:23:44:90:3b:dd:90:1f:a2:
8e:b4:28:86:50:b3:6d:e6:36:fe:05:04:55:8e:b4:
6c:2f:7d:2c:fe:8f:80:16:56:21:96:89:da:81:12:
e9:69:63:67:17:2d:6c:b0:80:fb:50:24:1e:37:84:
70:7e:63:1c:e6:fc:bc:74:cb:0a:dc:e0:c3:10:23:
7c:67:f3:cc:b1:6e:dc:9c:2e:13:19:9f:5d:ce:a1:
14:03:67:5d:06:05:6b:d3:c9:c2:07:e2:9f:85:ce:
42:a7:ca:a9:a5:76:0a:00:d0:aa:e8:90:c3:6b:16:
b6:53:05:5a:0d:4f:c0:df:ff:07:d9:f1:e1:0e:f9:
b5:05:39:c3:95:d5:12:a8:0c:f7:ec:29:a5:89:ed:
da:9e:9a:b1:32:71:6a:84:e7:6c:92:c7:84:5b:53:
a8:9a:36:74:49:f1:80:92:bf:5e:a2:21:51:bc:46:
8e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F1:25:DA:7D:79:97:AA:8D:E2:1A:0F:4E:7B:D2:97:E2:9B:48:B0
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/zfEl2n15l6qN4hoPTnvSl-KbSLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.24.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:3e:11:5b:8c:18:f5:5c:85:84:09:c7:91:67:20:b6:20:b7:
36:2a:1a:3a:45:f1:de:93:c2:8f:a1:15:d6:17:e6:19:5e:83:
6b:bf:e7:8a:31:7c:04:4d:2b:de:32:37:d3:61:1f:a6:61:14:
55:03:36:44:b7:82:af:3c:2c:db:4d:50:e6:10:07:30:37:c4:
8e:b7:d9:c3:a0:2a:98:ab:45:73:30:2b:00:2e:70:e1:21:1c:
ae:f3:d1:97:8a:6c:7a:1d:38:db:65:97:eb:f1:08:28:f6:52:
16:8e:c3:da:46:f7:5a:e1:c8:6e:22:ad:f0:a7:4e:c4:36:ef:
22:b3:db:f8:32:b9:58:0d:61:4c:9c:82:ef:45:ad:b8:35:7b:
9e:6a:f9:fa:a0:5d:45:18:29:e8:28:bd:54:1d:56:b1:aa:4d:
25:f7:f3:17:39:15:03:12:45:ff:df:b6:e9:93:de:27:e3:f1:
4f:03:ff:4f:f1:38:34:51:a9:0c:9f:22:21:e7:16:0a:00:53:
17:ee:27:c5:39:11:e7:3d:5d:6c:d7:02:82:1c:8c:ed:14:a1:
40:c8:5c:25:62:36:a0:2c:d7:80:37:1f:38:83:54:ca:ca:51:
f5:d1:a2:34:2b:04:24:9a:ae:d5:3d:e6:bb:fa:e5:79:cc:c3:
84:e9:64:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:46:52 2024 by rpki-client on console-ams.rpki-client.org