Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/2SGloiO8aFZSbinn_5lEoXO9QZ8.roa
File: 2SGloiO8aFZSbinn_5lEoXO9QZ8.roa (raw, json)
Hash identifier: dmAgsS3ascKALaQtI/oHaBzo+QN1aDEA0yfSlgWO0Uk=
Subject key identifier: D9:21:A5:A2:23:BC:68:56:52:6E:29:E7:FF:99:44:A1:73:BD:41:9F
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 018DE556D089CF4B9234ACBE95FA6101DB83
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/2SGloiO8aFZSbinn_5lEoXO9QZ8.roa
Signing time: Mon 26 Feb 2024 12:14:48 +0000
ROA not before: Mon 26 Feb 2024 12:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49493
IP address blocks: 89.26.160.0/20 maxlen: 24
89.26.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:56:d0:89:cf:4b:92:34:ac:be:95:fa:61:01:db:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Feb 26 12:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d921a5a223bc6856526e29e7ff9944a173bd419f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:35:79:3e:be:fc:29:4c:98:5f:69:7e:e3:
73:61:ab:3b:78:94:b2:ca:1f:07:87:42:b7:fa:c7:
b3:6a:3a:08:4c:2f:b4:a7:74:7b:1d:ae:dc:42:98:
31:5c:d2:5a:b6:0d:fd:9b:0a:2f:32:a9:4b:09:6a:
2b:a0:61:24:1b:ef:f2:93:72:3a:38:8d:b6:f9:b2:
d6:b3:8b:2d:c8:81:81:86:44:04:ed:b1:b5:3b:0f:
0f:18:da:06:d0:ed:c7:cc:ed:bb:f5:78:46:dc:14:
51:32:6d:f2:60:64:97:ca:7c:57:b7:2e:0c:28:58:
22:17:5e:61:62:78:e1:69:17:17:d9:f1:21:d6:e0:
28:5c:c1:bb:ee:b6:78:c5:1b:3c:05:8d:4b:fe:78:
50:37:2a:aa:4f:c6:df:4e:84:df:4c:52:a7:a3:44:
45:15:65:8a:f0:0d:8a:31:ae:0a:99:5d:c1:6f:4c:
27:3c:f0:bb:c5:6c:3d:1b:ec:5b:83:05:df:3c:57:
f4:b6:97:65:cd:24:1f:0e:f7:0d:48:2b:c4:fb:cf:
f4:79:c1:b6:59:3c:47:b3:96:e0:98:47:3b:1b:a1:
3e:e7:26:a4:ff:53:11:50:d0:8e:90:76:e1:58:b4:
97:a2:2e:93:41:49:58:fd:01:4d:05:98:a1:f0:56:
c0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:21:A5:A2:23:BC:68:56:52:6E:29:E7:FF:99:44:A1:73:BD:41:9F
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/2SGloiO8aFZSbinn_5lEoXO9QZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.26.160.0/19
Signature Algorithm: sha256WithRSAEncryption
12:75:a6:47:99:96:8f:68:c9:f2:55:50:0e:56:7d:08:85:62:
f3:52:12:15:f5:81:74:5c:81:68:4b:3d:7e:56:eb:cb:1c:88:
b2:a1:a5:fe:41:3c:7d:e9:d1:f6:13:fd:88:6c:5d:9f:02:0e:
ac:6e:30:bb:75:3d:c9:c7:a7:f3:e7:b0:88:e9:16:58:7d:d4:
a5:ca:51:32:6d:00:0e:11:1e:33:69:81:ce:1a:1e:0d:e3:f0:
c6:e7:02:9c:5d:24:ee:e9:6e:ab:e5:7e:83:b0:1f:fa:ad:ee:
2a:62:ef:0d:4f:d6:68:65:a3:8a:27:7c:3e:a4:f8:ff:d8:ac:
d1:38:bc:06:57:8e:c9:d2:2c:86:f8:43:90:a1:c8:8d:88:1f:
df:5e:77:a2:e7:0b:89:0b:fe:62:62:08:f3:91:08:4a:91:7f:
d7:00:ba:af:7f:9b:b1:8d:23:48:88:42:91:14:26:32:5a:e2:
c1:2e:2c:49:16:ee:7e:7d:f8:58:49:53:af:1a:15:7e:ce:b4:
d1:72:74:2b:6c:8d:a7:d4:04:f1:e2:28:d7:00:b8:8e:85:07:
bf:77:ab:a4:4c:40:21:57:23:15:30:c4:f2:e5:9d:95:a3:ab:
50:5a:68:08:56:80:58:7d:94:47:14:fd:8e:56:17:9e:5b:9e:
5b:64:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:34:31 2024 by rpki-client on console-ams.rpki-client.org