Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/GuC40DY1xRXUcI_WAkI5u_4rMi8.roa
File: GuC40DY1xRXUcI_WAkI5u_4rMi8.roa (raw, json)
Hash identifier: KH2LjRF9C1ArkpW96duae/WooNbbdFLGVuMGHaRcJfg=
Subject key identifier: 1A:E0:B8:D0:36:35:C5:15:D4:70:8F:D6:02:42:39:BB:FE:2B:32:2F
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 018CC7952F697A838AB2ACBDBE6AF030293B
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/GuC40DY1xRXUcI_WAkI5u_4rMi8.roa
Signing time: Tue 02 Jan 2024 00:31:32 +0000
ROA not before: Tue 02 Jan 2024 00:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13335
IP address blocks: 89.35.174.0/23 maxlen: 24
89.35.2.0/23 maxlen: 24
89.191.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:2f:69:7a:83:8a:b2:ac:bd:be:6a:f0:30:29:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Jan 2 00:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ae0b8d03635c515d4708fd6024239bbfe2b322f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:6a:cc:6c:33:d4:a3:98:1d:28:57:27:a0:
b9:2e:67:61:5e:9c:6b:87:c3:8c:fe:31:e7:3e:a4:
ed:21:36:a0:a6:84:53:13:55:fb:75:f6:c8:eb:58:
fa:87:46:a4:e7:46:07:e9:8e:a7:1e:79:b0:fb:0c:
83:a4:ad:c7:86:ec:14:f8:00:51:e1:7a:a8:d5:34:
d3:80:fa:2a:d1:fb:25:cc:95:4b:72:e1:23:57:dc:
2d:a4:45:25:ca:35:55:7b:ee:ee:15:11:09:a3:d0:
b5:02:6e:39:ca:63:3f:dd:80:27:0a:5d:4c:8a:eb:
c2:ff:7b:34:19:a2:41:30:53:84:29:61:30:9f:56:
51:1e:aa:92:e8:0a:72:5f:0c:db:33:ed:52:25:8f:
d5:18:6b:c2:1c:37:ae:e5:4f:25:8e:7f:18:a2:a1:
8c:56:ac:ec:a4:0f:38:01:de:a2:ce:85:bd:11:8a:
be:02:2e:5a:47:55:b7:18:f2:89:f2:15:63:20:2e:
71:46:68:e3:2a:4d:0d:91:89:61:ea:44:1a:da:52:
0e:95:e5:d2:e9:0f:8d:07:d7:2d:2f:36:ea:5a:5c:
b4:fc:6c:a0:f3:23:66:08:b2:80:d7:48:0b:b3:2d:
a9:fb:57:e8:21:4e:e5:c8:f9:ff:f1:de:fc:92:36:
28:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E0:B8:D0:36:35:C5:15:D4:70:8F:D6:02:42:39:BB:FE:2B:32:2F
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/GuC40DY1xRXUcI_WAkI5u_4rMi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.2.0/23
89.35.174.0/23
89.191.64.0/19
Signature Algorithm: sha256WithRSAEncryption
92:31:d5:2d:20:76:8e:04:2b:2f:25:77:9d:b8:4c:bb:a0:62:
f8:59:38:24:9b:15:3a:9d:e9:06:68:01:27:24:1d:48:71:f8:
a4:35:c8:4e:d3:bb:c7:1f:1e:7f:fb:fe:4b:58:33:70:13:f4:
a9:2c:26:6e:fd:39:3b:fa:a4:cf:db:7a:ca:9b:28:e9:08:29:
be:28:7a:cb:26:3a:c9:73:01:47:40:2f:ef:57:62:07:78:48:
62:be:99:94:ee:14:79:04:03:f4:67:49:e9:81:41:b8:13:56:
3a:cd:83:3f:26:c3:9a:24:7f:f4:64:6e:de:68:b9:13:2d:e9:
fe:e6:8d:70:4c:46:6f:1d:90:ee:ce:0a:c8:33:e1:13:ec:16:
f2:95:d1:b8:96:94:27:c0:bb:57:48:f2:dc:78:72:a1:2f:1a:
66:e2:b1:b1:c0:e2:e6:f0:32:61:86:84:b3:0d:dd:8f:12:6a:
02:5b:9e:22:a6:cc:5c:98:43:ef:59:1b:2d:60:0e:85:98:7d:
54:64:17:b4:09:f4:d1:01:aa:e7:30:87:f6:03:90:0e:bc:74:
96:15:b8:f3:3a:eb:ac:2e:eb:50:2d:75:0f:80:5c:8f:e2:f0:
99:eb:e2:ba:85:98:0f:04:e7:b0:11:8c:dc:4d:6c:51:a1:a3:
f2:2f:31:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 06:58:56 2024 by rpki-client on console-fra.rpki-client.org