Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/T1obuAQpAZP11gbkygqs9AIXpvM.roa
File: T1obuAQpAZP11gbkygqs9AIXpvM.roa (raw, json)
Hash identifier: ZK1yRMpBWgkvG3drsefwX5sQERm7/5GD8x9xkb/4Tys=
Subject key identifier: 4F:5A:1B:B8:04:29:01:93:F5:D6:06:E4:CA:0A:AC:F4:02:17:A6:F3
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 018CCA2A91FD5B7E97D71DBABC0AFC76600B
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/T1obuAQpAZP11gbkygqs9AIXpvM.roa
Signing time: Tue 02 Jan 2024 12:33:56 +0000
ROA not before: Tue 02 Jan 2024 12:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47480
IP address blocks: 89.167.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:91:fd:5b:7e:97:d7:1d:ba:bc:0a:fc:76:60:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 2 12:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f5a1bb804290193f5d606e4ca0aacf40217a6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:38:0b:1d:3c:e7:30:a3:59:98:0c:69:22:
f3:46:bb:ba:58:c3:1f:9f:2c:14:8c:a8:ce:fe:0e:
41:f1:58:bc:32:5a:b8:14:e7:e2:84:48:a3:7a:54:
71:ef:ad:76:fc:d5:df:d3:2d:23:8a:f6:5a:a8:21:
cf:ee:b4:5f:0d:4b:fa:58:b1:92:b4:64:5e:af:45:
d6:28:75:1e:3a:ea:ee:e8:b4:60:61:9c:97:a0:86:
72:95:1e:b2:3e:73:f2:a1:1e:4b:38:cb:9b:cd:fd:
54:4a:88:6f:c4:76:32:af:9f:ab:96:3f:f6:9a:9d:
ff:8d:d8:78:1d:b6:03:ca:02:9a:1f:5b:8c:61:68:
c6:c0:7a:ff:a7:12:41:db:ef:73:c1:d3:30:df:06:
ae:1b:ee:23:98:9f:86:c5:b1:28:e5:5c:c3:79:94:
61:41:75:90:f0:7f:fd:a5:ac:ae:88:8c:0f:a1:70:
8a:98:97:ed:5a:84:34:5b:c5:ef:26:b4:72:54:97:
7e:62:99:b3:e4:e8:30:3c:ca:3f:2e:49:c4:dc:f7:
ef:b9:c3:5c:c2:52:8b:b6:7a:66:6f:4e:eb:f7:b2:
b9:14:7c:fd:84:03:2c:6a:a2:b3:97:43:e9:83:d6:
64:c5:a8:a3:f8:45:b1:40:8d:c7:32:61:26:af:36:
b8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5A:1B:B8:04:29:01:93:F5:D6:06:E4:CA:0A:AC:F4:02:17:A6:F3
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/T1obuAQpAZP11gbkygqs9AIXpvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.239.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f5:1e:b1:34:0f:74:26:dd:0e:3a:af:d7:dc:12:27:79:63:
b6:9b:3b:59:86:a8:cb:b1:a1:9f:63:58:69:ec:0f:c7:e2:1a:
71:28:18:1e:0a:26:e2:d2:c3:1e:4b:08:9a:e8:4b:b4:96:1b:
c6:ff:0e:49:0f:87:92:9b:1e:91:c7:fe:0a:c4:3e:d3:86:c5:
eb:90:1a:83:13:95:c4:77:cc:e9:3f:f2:16:e1:64:d2:01:b7:
dc:6b:7a:f2:28:15:a3:ea:d8:8e:5e:ac:f0:be:fc:3e:eb:fa:
e7:88:79:80:58:2d:62:d7:90:1a:3c:ac:ea:c1:0f:28:b4:57:
8a:2c:12:9a:dc:83:af:52:05:f9:b9:b7:8f:81:3e:39:c1:f2:
b0:4f:80:15:0f:5a:bb:e8:fb:98:85:d0:9e:21:14:33:c8:6d:
df:67:32:9d:c7:75:64:05:e4:13:64:3c:bd:41:c6:b1:de:fd:
c1:8e:35:aa:fe:6e:63:a9:33:c8:cf:8e:a2:76:3e:0c:21:bb:
31:4f:3f:d6:37:ca:bc:61:fd:d3:9b:10:59:4d:1c:61:16:39:
39:0d:b5:d1:a0:f9:43:da:28:92:a4:ef:d5:da:67:2d:24:ef:
a5:51:c0:8b:53:64:fb:ac:c8:46:7b:9d:68:af:28:02:de:51:
4d:87:f0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:36:25 2024 by rpki-client on console-fra.rpki-client.org