Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/PA8X7ujywpI2xVooIEls0d3x9Fo.roa
File: PA8X7ujywpI2xVooIEls0d3x9Fo.roa (raw, json)
Hash identifier: I9iHxJNkEZRtnzhUlak1AOm0MlCG9L6Cbq//QCjutYA=
Subject key identifier: 3C:0F:17:EE:E8:F2:C2:92:36:C5:5A:28:20:49:6C:D1:DD:F1:F4:5A
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 018CCA2A91BB06A2D79A48768F282F260A28
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/PA8X7ujywpI2xVooIEls0d3x9Fo.roa
Signing time: Tue 02 Jan 2024 12:33:56 +0000
ROA not before: Tue 02 Jan 2024 12:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44815
IP address blocks: 89.167.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 19:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:91:bb:06:a2:d7:9a:48:76:8f:28:2f:26:0a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 2 12:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c0f17eee8f2c29236c55a2820496cd1ddf1f45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e1:8a:f8:2e:23:bb:f8:05:28:58:81:a7:e9:
3a:02:f6:f0:bd:e0:f4:2b:bc:c3:21:4f:b7:0c:0f:
d2:0c:a9:1a:e4:b6:f4:30:71:38:1b:3e:72:76:d9:
08:78:63:c9:b3:50:05:6e:43:62:48:f3:30:38:e1:
73:56:74:81:14:fd:ce:12:fb:da:92:b3:7e:1d:a1:
1b:f9:a4:b1:d1:23:7f:e2:5b:c5:a9:49:c1:d8:b7:
a8:71:1b:2e:ad:d4:90:9a:3d:59:50:4f:eb:9e:12:
da:80:b5:2c:b4:e8:e1:1f:6f:83:7a:b1:aa:e8:af:
7e:3d:3b:f9:c7:7f:cf:bf:92:74:7e:93:b5:58:de:
d7:8d:ac:66:9f:df:2b:70:a0:d6:75:b2:c9:dd:07:
1f:62:f1:28:1b:bb:00:34:32:8a:4a:d9:5e:9a:e8:
e7:90:5c:f3:56:ce:da:5c:04:33:2c:80:30:ab:33:
a8:c4:1a:3a:2f:b8:68:26:ba:ff:62:ef:32:56:e5:
98:77:d5:1b:f0:60:39:1c:25:bb:44:37:a6:b8:6e:
b7:d9:a0:c1:2a:c2:32:ac:27:cf:79:22:a6:ed:13:
79:56:69:f9:fb:72:43:89:ad:13:6a:69:0c:19:c6:
ea:f9:31:32:0e:a3:23:a6:9b:1a:7c:59:b9:20:5b:
41:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0F:17:EE:E8:F2:C2:92:36:C5:5A:28:20:49:6C:D1:DD:F1:F4:5A
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/PA8X7ujywpI2xVooIEls0d3x9Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.220.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2b:1c:7d:fa:84:15:41:b5:d2:57:c9:65:b1:2e:51:da:22:
67:62:52:c2:1f:4c:c1:43:50:00:c4:5f:96:48:5c:af:98:72:
9e:bd:d4:e9:ad:0b:7d:15:fc:f5:0d:d3:4d:42:de:c9:9d:3b:
d9:ea:44:7d:66:f6:86:82:2c:c9:19:96:d7:a7:11:9e:53:a4:
2e:25:0c:20:70:ca:e0:5b:ea:29:23:0f:2b:d7:10:7a:a3:26:
d7:f9:11:4c:22:40:d5:99:fa:d9:6a:6d:9a:81:de:7c:9d:4d:
c5:85:43:96:24:aa:78:81:06:eb:cc:d5:56:02:70:18:28:2e:
90:c2:b9:1b:88:8c:c2:ef:0f:f0:46:70:49:92:c9:87:05:3c:
43:db:5b:45:0f:66:16:6c:fb:de:6d:26:8a:b8:41:bf:d3:eb:
dd:8d:ef:78:c7:f1:40:a8:a3:14:05:8f:c3:1d:ba:c8:95:df:
e2:cd:50:be:1b:c2:9b:8f:29:8c:84:4b:e8:fb:cb:5d:16:c1:
e9:8c:0e:28:6e:e0:2f:b8:f3:0c:7f:a7:12:79:20:57:4d:2f:
f3:73:6d:c1:3c:a6:9f:5e:44:74:b3:cd:7d:09:62:6b:c1:a5:
aa:cb:01:88:16:bf:c1:72:76:48:a7:31:25:51:df:87:1a:6b:
fd:35:a9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:47:07 2024 by rpki-client on console-ams.rpki-client.org