Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/znVTYOS_jea3EX0KIy2LYBKttNc.roa
File: znVTYOS_jea3EX0KIy2LYBKttNc.roa (raw, json)
Hash identifier: 2xnkkBcgLHESQTw1wvulCp8jo6uDktLtrmo7+8GMPBg=
Subject key identifier: CE:75:53:60:E4:BF:8D:E6:B7:11:7D:0A:23:2D:8B:60:12:AD:B4:D7
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 018DE5A0F8BC25774D38659A5CA64D09253A
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/znVTYOS_jea3EX0KIy2LYBKttNc.roa
Signing time: Mon 26 Feb 2024 13:35:48 +0000
ROA not before: Mon 26 Feb 2024 13:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 89.50.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:a0:f8:bc:25:77:4d:38:65:9a:5c:a6:4d:09:25:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Feb 26 13:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce755360e4bf8de6b7117d0a232d8b6012adb4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:61:80:f2:d2:50:63:bd:23:f6:0d:0f:9d:
75:f2:d6:96:d8:f6:27:c5:8a:80:30:26:3c:52:a3:
9f:1f:87:04:69:b9:cb:63:86:71:b0:59:6c:b4:24:
71:21:89:15:c7:cd:dc:28:08:c7:88:0c:3c:8e:20:
7f:03:af:bb:15:fd:6b:58:13:e8:3e:66:28:a5:a6:
d1:63:e1:70:96:cf:4d:9e:6e:80:9b:8c:c4:eb:70:
d1:40:bc:ea:3a:df:55:51:8c:d3:57:a5:af:1c:ce:
66:9c:95:b4:8d:8d:88:64:04:93:52:e0:b1:2a:85:
38:8d:77:84:fb:73:b7:82:b8:95:6d:d6:9a:65:d5:
5d:f9:fd:c2:7b:18:0d:55:71:e8:99:e2:f9:c3:b8:
72:f7:37:7d:ee:1a:6a:c2:b8:81:76:d5:1e:ad:00:
ae:60:44:0d:b2:a1:7d:2a:3a:c6:ba:fa:cf:16:18:
dc:9b:20:51:ee:e8:a9:1c:02:33:e0:de:27:0d:b3:
b0:7b:fa:ee:e7:86:98:d9:7e:7b:dc:a3:1a:1c:a1:
80:30:1b:c5:91:e8:09:9a:c2:fb:f5:6a:1b:b1:7f:
78:89:a2:e1:35:02:8e:4a:a0:01:2b:3b:17:f0:b6:
c8:8b:5e:bf:5c:10:c8:b9:72:32:26:b3:cf:54:4a:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:75:53:60:E4:BF:8D:E6:B7:11:7D:0A:23:2D:8B:60:12:AD:B4:D7
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/znVTYOS_jea3EX0KIy2LYBKttNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:2d:63:d7:e0:d0:f6:ef:ee:a9:e5:a3:09:39:43:1d:76:89:
12:27:ff:b6:16:7e:fb:14:2a:4c:60:2b:5b:70:73:9b:03:55:
63:50:ca:51:e2:dc:df:92:0e:99:15:b6:16:7c:2a:80:bb:65:
db:16:c6:06:e5:74:a9:7e:ae:cd:c4:10:19:5d:23:27:36:a2:
26:dd:a6:be:2d:f8:b9:3d:f0:73:34:50:84:42:94:71:a5:d4:
3e:cb:3c:73:41:5e:16:13:55:1f:25:e7:3e:04:1a:f9:3f:ae:
ef:85:eb:64:27:86:ab:cf:f2:59:6e:3f:87:80:9d:41:1f:2a:
4f:a8:b9:84:67:96:0d:f8:cc:60:fb:c4:a1:fa:d6:b1:e8:62:
02:ce:27:0d:81:f0:cb:4f:c2:d8:d6:2d:cd:3a:ed:1c:e2:fc:
de:e8:b6:45:fd:7c:31:2b:42:48:32:4c:a7:bf:1c:a5:5d:61:
e7:b3:4f:18:6c:6a:f9:94:9f:5d:20:2e:61:91:60:eb:36:6f:
63:22:25:f4:3a:65:ce:1e:4d:b2:1c:a3:5f:d4:10:d3:93:e5:
5f:90:29:ec:5a:73:ac:00:0b:54:f7:26:d0:79:0e:5c:89:4a:
24:41:99:1b:bc:f8:fe:c9:25:8e:57:74:a2:8c:24:8d:4c:c3:
01:92:20:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 07:23:51 2024 by rpki-client on console-ams.rpki-client.org