Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/uR9gIWyuZVoccF3fnC8sUvA2qgM.roa
File: uR9gIWyuZVoccF3fnC8sUvA2qgM.roa (raw, json)
Hash identifier: y2m0PgPvM7vweLurTltDriSZ31JBDLTeEW9yQ32LOsA=
Subject key identifier: B9:1F:60:21:6C:AE:65:5A:1C:70:5D:DF:9C:2F:2C:52:F0:36:AA:03
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 0190D5095CD2D706E7895B3B65057923E300
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/uR9gIWyuZVoccF3fnC8sUvA2qgM.roa
Signing time: Sun 21 Jul 2024 11:24:38 +0000
ROA not before: Sun 21 Jul 2024 11:24:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214922
IP address blocks: 89.47.197.0/24 maxlen: 24
89.47.198.0/24 maxlen: 24
89.47.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d5:09:5c:d2:d7:06:e7:89:5b:3b:65:05:79:23:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jul 21 11:24:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b91f60216cae655a1c705ddf9c2f2c52f036aa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:dc:aa:6e:c5:8a:b1:77:44:7c:65:e0:01:
21:0c:23:8b:2b:3f:a9:da:12:aa:12:e7:46:0b:68:
40:68:d6:bc:2b:3d:97:f7:d5:6d:f2:68:fc:7a:91:
a7:43:62:c1:5f:cd:48:66:33:31:17:07:f0:09:1c:
62:a4:de:44:f8:b7:cb:61:58:f2:42:48:71:9b:81:
37:f2:67:2a:25:38:26:ac:6b:0f:fe:ec:ec:fe:8b:
5e:11:7c:19:34:24:db:4d:06:f1:04:02:91:3a:34:
eb:a4:65:f9:60:93:e6:a6:46:2b:89:fc:2a:e6:3c:
d2:1b:56:17:66:9c:af:a8:e8:65:64:d7:53:8a:3c:
b9:89:28:2f:62:ec:cb:a7:64:8a:ba:f1:94:9f:85:
79:de:d0:39:6c:ac:5a:39:f6:92:64:8d:86:6d:f9:
bc:2d:1d:db:41:a5:c6:34:7f:de:e8:21:a5:5f:03:
4e:7a:21:31:7a:2d:21:5f:03:3f:59:79:64:f7:94:
18:1a:8a:dd:61:cf:bd:3f:a4:47:05:1f:23:c8:5c:
f5:b1:77:ac:c3:58:45:73:bc:5f:4f:08:37:89:aa:
7d:c2:f9:b2:04:d5:63:c8:84:cf:ce:3d:48:07:eb:
17:a7:16:e6:4d:39:39:9a:4f:3b:3b:ed:f5:89:ac:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1F:60:21:6C:AE:65:5A:1C:70:5D:DF:9C:2F:2C:52:F0:36:AA:03
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/uR9gIWyuZVoccF3fnC8sUvA2qgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.197.0-89.47.198.255
89.47.200.0/24
Signature Algorithm: sha256WithRSAEncryption
58:bb:f2:dd:66:ba:0f:60:03:b0:e7:9b:93:2c:b8:55:ed:95:
06:82:d6:46:5a:dc:3e:8e:bd:0f:5f:0b:2e:77:1a:4b:46:a1:
a3:1b:c1:2c:a8:47:ec:06:d3:4e:ff:e8:fb:23:e8:26:16:45:
f2:3b:c4:62:fe:96:14:2c:5e:70:76:6d:99:6d:f3:bf:a0:ea:
cd:ec:7a:7d:88:54:7f:78:66:04:af:fb:7f:21:15:5c:05:81:
45:a7:bb:d0:2d:35:85:11:f3:52:b4:7c:43:95:89:6c:6d:36:
2e:3f:cf:ac:65:5d:fc:2c:55:62:d9:00:13:0c:e6:aa:8d:8c:
31:2d:9b:8c:40:5d:aa:28:75:93:2d:c9:8e:86:02:a2:c3:0e:
3b:fe:02:40:97:87:1e:9d:a2:52:14:6b:23:28:8a:21:db:9b:
88:83:64:2d:45:87:06:91:9b:34:46:7d:13:e5:37:55:13:8c:
ce:69:f9:ba:94:26:ea:f6:cd:55:8e:d7:e1:ac:dd:ca:1e:94:
2c:ac:0a:c5:09:be:1f:d7:2b:32:7a:a5:ea:2a:54:43:15:ed:
92:40:a2:69:c5:73:86:ef:de:20:f1:49:33:11:2c:1d:97:42:
e5:ec:08:f1:30:d7:c0:0b:27:45:ef:92:4a:23:79:f8:39:e5:
ac:17:b7:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:00:29 2024 by rpki-client on console-fra.rpki-client.org