Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/cZj-HNImjzeepSd-eyEk-wDHFA0.roa
File: cZj-HNImjzeepSd-eyEk-wDHFA0.roa (raw, json)
Hash identifier: qeZ5WTaQ8ORGZhgY/qzhK0uNEpn1JhubrYLQw4oZ5J0=
Subject key identifier: 71:98:FE:1C:D2:26:8F:37:9E:A5:27:7E:7B:21:24:FB:00:C7:14:0D
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 018CCA2A900A188B357AD1FD94AB8DB161BE
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/cZj-HNImjzeepSd-eyEk-wDHFA0.roa
Signing time: Tue 02 Jan 2024 12:33:56 +0000
ROA not before: Tue 02 Jan 2024 12:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21509
IP address blocks: 89.167.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:90:0a:18:8b:35:7a:d1:fd:94:ab:8d:b1:61:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 2 12:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7198fe1cd2268f379ea5277e7b2124fb00c7140d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3e:c5:4d:72:20:a8:85:12:c4:7e:51:c5:ca:
47:4d:b0:fd:b6:fa:fd:bb:6c:b2:87:8d:4d:a0:3d:
cb:82:bf:d1:8b:52:4f:35:9e:cf:0c:8c:0f:1a:63:
24:83:07:90:40:7c:44:1f:8f:7b:fc:3b:98:3a:52:
56:86:cb:f2:36:f8:46:97:74:03:cf:94:10:cf:6f:
11:9a:eb:cc:16:85:3c:64:17:89:c5:c5:32:d4:8a:
24:13:57:96:d1:bd:e9:77:16:9f:cc:c8:85:03:9c:
16:0e:c4:cb:ac:0a:43:16:36:2c:9d:ac:5e:ce:fd:
30:e5:b4:7b:3d:24:1d:23:6a:25:08:9b:2d:6b:4a:
f0:5b:32:bd:ff:2a:39:06:35:2a:2e:ed:c0:b0:1b:
be:e4:4b:5a:f9:88:8c:8c:10:a3:1a:62:7e:f8:96:
9e:9f:ca:b7:a1:6d:9e:16:99:66:5d:e4:7a:63:77:
f1:12:2f:84:e5:4d:9d:44:82:dd:40:4c:25:00:02:
12:1e:de:74:6d:2a:43:ee:c0:38:19:71:75:7d:8c:
8d:2a:ba:04:1c:30:07:c8:f6:b3:f7:b3:83:9c:f4:
1e:53:eb:9c:2d:4a:3c:99:17:db:69:2b:d0:ed:f8:
89:16:a9:7b:ae:1b:93:d0:79:71:01:36:c3:76:bd:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:98:FE:1C:D2:26:8F:37:9E:A5:27:7E:7B:21:24:FB:00:C7:14:0D
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/cZj-HNImjzeepSd-eyEk-wDHFA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.135.0/24
Signature Algorithm: sha256WithRSAEncryption
89:fa:28:a2:eb:af:6e:b4:96:26:97:f8:1e:8f:e7:8c:73:df:
24:c8:92:0f:71:71:91:f9:07:2d:c9:c4:1f:8b:f0:01:3d:c2:
0e:5d:da:2c:34:b3:62:dd:92:b3:18:68:c8:74:07:ac:7b:89:
0a:fa:4e:30:b1:a3:0a:f5:b7:80:8c:44:a3:dd:0f:d7:09:a7:
f9:23:50:a2:d2:ca:05:47:6b:b6:2e:0d:5e:5d:64:2c:d8:e2:
86:80:5b:ed:a9:26:4a:98:cd:4e:59:62:45:5b:f7:20:d0:9f:
9b:f6:ec:95:5f:25:1a:58:b5:22:ff:cd:95:cb:e5:2a:f0:b5:
d7:91:73:ee:19:e6:7a:06:12:bb:fb:00:1e:d0:ba:f1:1d:6c:
ee:b7:fc:3c:fa:40:76:ac:f4:ed:5f:41:bf:ad:f1:9d:2e:a8:
fd:9f:bf:2b:b2:bc:54:60:a3:2a:7c:fd:0b:88:b0:f1:4c:12:
67:a7:3e:7f:7e:7a:ba:91:c3:b7:23:ec:f5:4b:45:f0:15:c2:
38:ba:f9:29:8f:50:b5:95:0a:d1:16:ee:8e:00:70:52:68:d3:
6d:94:ec:71:60:1e:9c:7a:c1:ca:5f:de:26:39:38:c7:f8:d8:
fa:14:ed:78:06:8a:68:aa:5f:e1:81:88:b7:6e:72:3f:bb:6d:
ea:25:2d:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKpAKGIs1etH9lKuNsWG+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0
MDdhODAwHhcNMjQwMTAyMTIzMzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTk4ZmUxY2QyMjY4ZjM3OWVhNTI3N2U3YjIxMjRmYjAwYzcxNDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz7FTXIgqIUSxH5RxcpHTbD9tvr9
u2yyh41NoD3Lgr/Ri1JPNZ7PDIwPGmMkgweQQHxEH497/DuYOlJWhsvyNvhGl3QD
z5QQz28RmuvMFoU8ZBeJxcUy1IokE1eW0b3pdxafzMiFA5wWDsTLrApDFjYsnaxe
zv0w5bR7PSQdI2olCJsta0rwWzK9/yo5BjUqLu3AsBu+5Eta+YiMjBCjGmJ++Jae
n8q3oW2eFplmXeR6Y3fxEi+E5U2dRILdQEwlAAISHt50bSpD7sA4GXF1fYyNKroE
HDAHyPaz97ODnPQeU+ucLUo8mRfbaSvQ7fiJFql7rhuT0HlxATbDdr3edwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHGY/hzSJo83nqUnfnshJPsAxxQNMB8GA1UdIwQY
MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt
NWQ1NjA5ODljZjdiLzEvY1pqLUhOSW1qemVlcFNkLWV5RWstd0RIRkEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi
LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWaeHMA0G
CSqGSIb3DQEBCwUAA4IBAQCJ+iii669utJYml/gej+eMc98kyJIPcXGR+QctycQf
i/ABPcIOXdosNLNi3ZKzGGjIdAese4kK+k4wsaMK9beAjESj3Q/XCaf5I1Ci0soF
R2u2Lg1eXWQs2OKGgFvtqSZKmM1OWWJFW/cg0J+b9uyVXyUaWLUi/82Vy+Uq8LXX
kXPuGeZ6BhK7+wAe0LrxHWzut/w8+kB2rPTtX0G/rfGdLqj9n78rsrxUYKMqfP0L
iLDxTBJnpz5/fnq6kcO3I+z1S0XwFcI4uvkpj1C1lQrRFu6OAHBSaNNtlOxxYB6c
esHKX94mOTjH+Nj6FO14Bopoql/hgYi3bnI/u23qJS3C
-----END CERTIFICATE-----
Generated at Tue May 7 08:30:07 2024 by rpki-client on console-fra.rpki-client.org