Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/0pBzJasZaaux6iwhqxlqdhCjquY.roa
File: 0pBzJasZaaux6iwhqxlqdhCjquY.roa (raw, json)
Hash identifier: l6Xiq186QWMpLDj4F9O1nyIrzB8HOHcS0pGrkIt1tyU=
Subject key identifier: D2:90:73:25:AB:19:69:AB:B1:EA:2C:21:AB:19:6A:76:10:A3:AA:E6
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 018EC28530BB4DF0B78ACDFA7BCBF1E19EA7
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/0pBzJasZaaux6iwhqxlqdhCjquY.roa
Signing time: Tue 09 Apr 2024 11:01:32 +0000
ROA not before: Tue 09 Apr 2024 11:01:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 89.184.16.0/21 maxlen: 24
89.184.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:85:30:bb:4d:f0:b7:8a:cd:fa:7b:cb:f1:e1:9e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: Apr 9 11:01:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2907325ab1969abb1ea2c21ab196a7610a3aae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:04:e7:9c:9e:47:33:d6:fa:c8:b9:63:1d:42:
97:bc:ac:cb:ec:99:3d:8a:b3:c7:c4:1e:2b:29:a2:
7b:10:d1:f2:13:f5:28:de:36:4e:be:d8:96:08:26:
28:0d:56:c8:cc:00:53:a7:09:23:ce:7d:ae:15:05:
cb:0f:ae:89:0d:d2:cc:41:74:15:2d:20:f4:c6:4d:
20:4f:db:36:a5:3a:8a:bd:1b:9d:da:60:0e:d3:eb:
ed:b8:37:5a:64:be:57:cf:27:18:10:07:9c:f8:a1:
ea:3a:18:64:4c:7e:85:40:fb:2c:65:b1:d4:87:30:
2a:16:73:8e:e5:7f:ad:90:af:9a:25:bd:01:46:86:
00:57:ab:e8:aa:c5:35:30:8a:90:24:e3:53:19:38:
43:9b:d7:50:6e:8a:14:a6:25:a3:0f:b8:43:44:a2:
58:80:62:fb:38:ca:c8:4f:a8:70:d0:7c:e8:34:6d:
ea:bf:41:dd:71:3a:8f:5b:6c:26:16:20:cf:08:c6:
64:0f:77:c3:4a:89:bc:46:51:bb:4a:88:59:82:16:
a5:4e:95:65:4f:03:4b:53:be:c6:bc:54:00:fb:a5:
1a:bb:96:c2:b0:1b:f2:67:48:b7:2a:e3:21:31:7d:
49:91:1e:01:06:5e:d2:c8:26:65:0b:d1:d8:ab:6f:
a0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:90:73:25:AB:19:69:AB:B1:EA:2C:21:AB:19:6A:76:10:A3:AA:E6
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/0pBzJasZaaux6iwhqxlqdhCjquY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.184.16.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:be:00:65:3a:55:8d:49:e2:cc:92:3e:93:a2:1c:8b:42:df:
b2:9c:7d:df:e1:22:4d:49:44:d9:b0:39:6b:74:4d:31:8f:00:
06:77:cb:ba:43:a3:ef:57:77:08:8a:aa:04:5f:fc:74:ad:98:
bb:e5:b3:02:d9:48:fe:bb:31:8b:6e:3c:c1:e6:aa:cc:c3:fd:
f2:3d:4e:e1:c5:7e:23:ad:06:2c:03:8a:95:dc:1f:bb:a9:54:
66:8f:67:57:59:f3:e1:12:b2:89:72:24:cc:80:0e:a3:6f:85:
04:f2:8a:f0:41:8a:bc:73:32:c9:39:85:b4:c1:5e:8f:95:b4:
46:e3:a3:1e:cf:00:33:8f:8a:4d:94:fa:9b:c4:80:e9:81:1a:
44:de:28:73:ca:b7:e4:75:5e:8c:be:0e:3e:8e:f1:09:85:90:
7b:8e:b3:3b:71:6c:94:5c:fc:76:8b:25:19:35:2e:b6:8c:0f:
f5:ab:e8:52:ca:17:8d:05:9d:b1:93:e7:d7:8f:fe:f9:fb:60:
d6:7e:23:b7:54:b3:1a:ac:08:42:7d:85:eb:ef:a1:e6:63:a5:
fd:d8:ad:1d:81:37:bd:5b:7a:71:cd:e4:c6:a2:d1:e8:93:dc:
08:c4:74:31:8a:a2:b3:46:61:11:60:ff:7c:dd:44:70:b9:ce:
fa:9c:5b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 01:46:07 2024 by rpki-client on console-ams.rpki-client.org