Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/aRyYS4UuUN8w4eHt-qmuglDNkpM.roa
File: aRyYS4UuUN8w4eHt-qmuglDNkpM.roa (raw, json)
Hash identifier: LEWFYdysHP5aW1SkQg2Jak7e7B61JGjKOpwDVfX5PRc=
Subject key identifier: 69:1C:98:4B:85:2E:50:DF:30:E1:E1:ED:FA:A9:AE:82:50:CD:92:93
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 018E5279E9B588DB3D54D9DEA9D25A455636
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/aRyYS4UuUN8w4eHt-qmuglDNkpM.roa
Signing time: Mon 18 Mar 2024 16:51:45 +0000
ROA not before: Mon 18 Mar 2024 16:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 89.185.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:52:79:e9:b5:88:db:3d:54:d9:de:a9:d2:5a:45:56:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Mar 18 16:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=691c984b852e50df30e1e1edfaa9ae8250cd9293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:35:c6:23:86:4d:48:37:6b:11:5c:18:26:
5b:2e:f5:81:8f:cd:fd:4a:8f:13:42:25:1d:3b:b5:
bb:21:1a:01:1a:61:83:05:de:ad:6f:57:80:62:45:
36:bc:ab:8f:d3:14:f8:32:f7:87:ca:1e:a6:6d:99:
e1:14:d9:89:b9:5d:98:47:46:76:cf:08:2b:3f:c6:
8b:0c:4d:4c:0c:83:f4:80:8e:c6:5f:71:b7:00:54:
72:d1:06:f8:a1:ac:75:c8:81:a5:a6:13:f7:77:0d:
51:0a:cd:36:7c:f0:0a:35:83:77:6b:63:76:88:0a:
10:36:fe:e7:05:1a:a1:23:6a:02:cf:8e:e8:bc:22:
1b:9d:e7:a3:38:08:36:9d:92:e9:ee:ab:8f:ae:5e:
cd:6c:c2:3f:74:83:50:c4:c3:4a:0f:71:90:e7:03:
a5:3d:98:59:77:6c:46:6b:ca:a7:f5:4e:1c:8c:ba:
aa:7f:8e:e6:ae:9e:f6:c2:8f:2e:31:88:1f:ca:65:
51:ba:e9:ad:ca:4a:ea:78:79:5b:f9:56:82:77:d6:
cf:b5:6d:8d:38:46:b1:a0:1c:98:7c:d6:4a:51:01:
5c:73:ed:60:e5:75:87:e9:f0:bd:e4:0d:67:d5:1d:
ac:69:98:31:33:b4:3c:71:dc:d1:69:b4:45:eb:9a:
ec:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1C:98:4B:85:2E:50:DF:30:E1:E1:ED:FA:A9:AE:82:50:CD:92:93
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/aRyYS4UuUN8w4eHt-qmuglDNkpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.84.0/24
Signature Algorithm: sha256WithRSAEncryption
84:2d:32:ac:3d:d6:8e:17:b7:59:fa:65:0e:3d:5b:61:0f:c5:
41:63:88:e0:50:79:44:64:8c:50:46:29:f7:4f:f4:c1:00:a0:
19:22:bf:81:01:2b:69:b1:bd:96:3e:06:5d:f1:12:56:b5:47:
51:f9:67:00:63:07:76:34:95:ff:0b:de:db:2a:03:66:ed:90:
d1:50:90:22:f5:8c:16:ef:45:cc:d4:5e:1b:1d:ed:21:0a:16:
0f:51:13:49:a6:9c:ef:53:67:28:e1:9a:7d:3c:9a:f4:36:80:
3a:73:35:02:f9:38:32:66:a8:bf:cf:8f:cc:96:25:98:b6:89:
76:c4:f2:07:f1:ff:f2:da:33:aa:c7:77:c3:0d:19:c6:fc:76:
93:86:0d:ef:96:c0:b0:6c:8a:f6:8b:ec:93:a2:59:f0:55:da:
c3:a3:67:a9:a4:a0:d8:12:12:8b:0e:d2:9e:c6:b0:19:e3:49:
b5:91:8d:0e:2a:a6:3a:de:25:d6:2a:bd:d5:c2:41:56:3a:38:
89:8e:9c:bb:02:a5:ba:0b:8a:39:65:52:29:6c:6e:68:17:48:
96:a7:bc:ea:16:f8:ad:a9:93:52:4a:1a:fc:f7:a5:69:aa:b1:
78:2e:54:a3:e8:11:99:9f:97:18:6d:1e:68:0c:79:b3:46:c9:
99:c9:d2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 12:18:09 2024 by rpki-client on console-ams.rpki-client.org