Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/s_DDJizQ3TiI67jqXBNw2sapKdQ.roa
File: s_DDJizQ3TiI67jqXBNw2sapKdQ.roa (raw, json)
Hash identifier: enW01zgoGhwaDk423V0FneC+QFsXIZueUaegj6oOCFg=
Subject key identifier: B3:F0:C3:26:2C:D0:DD:38:88:EB:B8:EA:5C:13:70:DA:C6:A9:29:D4
Certificate issuer: /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial: 0193043B646999ED42A780F930FE07BE892E
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/s_DDJizQ3TiI67jqXBNw2sapKdQ.roa
Signing time: Thu 07 Nov 2024 01:27:01 +0000
ROA not before: Thu 07 Nov 2024 01:27:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 89.184.10.0/23 maxlen: 23
89.184.12.0/23 maxlen: 23
89.184.16.0/22 maxlen: 24
193.223.103.0/24 maxlen: 24
193.223.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:04:3b:64:69:99:ed:42:a7:80:f9:30:fe:07:be:89:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
Validity
Not Before: Nov 7 01:27:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3f0c3262cd0dd3888ebb8ea5c1370dac6a929d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:07:1c:1d:5f:a0:26:9f:5d:8d:e8:41:82:
70:85:5a:59:bf:66:b5:66:6b:33:25:4b:1d:5d:3c:
1b:6a:08:66:5e:54:bd:2f:40:94:6d:01:fd:50:0d:
58:85:c7:0e:79:a0:be:ce:4c:f4:cc:d9:5f:10:ec:
df:72:3f:b9:6b:2d:b7:3f:cf:56:93:a3:7b:f3:23:
15:13:2e:76:92:03:47:17:f8:af:28:ef:a3:5a:68:
26:45:cf:e6:5d:2b:3b:41:fe:e9:3b:43:89:c0:1a:
85:bb:fe:76:27:18:08:2a:a1:97:3a:3d:70:df:eb:
3b:70:63:f4:9b:d3:00:48:37:b7:83:28:c0:7e:57:
19:cd:d3:80:3f:6e:43:25:1f:aa:77:2d:e0:c4:63:
c7:79:59:8c:18:c8:95:ab:10:ac:aa:4e:3d:09:5e:
f8:47:d3:e9:30:e3:a8:35:23:1c:d9:7c:9c:66:04:
98:6f:6a:e5:4a:83:b8:3d:9f:29:f2:c2:67:28:5f:
82:ef:78:a3:d1:5f:3d:d7:c6:51:8e:18:4d:8f:c9:
63:2c:51:1a:d9:31:4c:14:57:eb:b6:6b:50:5c:2d:
fd:55:81:62:a6:e7:84:62:72:d7:09:9f:d0:24:42:
39:ed:c4:c7:1c:db:04:51:b2:5b:1e:54:86:29:19:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F0:C3:26:2C:D0:DD:38:88:EB:B8:EA:5C:13:70:DA:C6:A9:29:D4
X509v3 Authority Key Identifier:
keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/s_DDJizQ3TiI67jqXBNw2sapKdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.184.10.0-89.184.13.255
89.184.16.0/22
193.223.103.0/24
193.223.108.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c6:e5:cb:37:e1:bd:02:1c:25:e9:f3:db:41:8b:0f:98:92:
e9:92:24:51:ca:4c:91:b0:27:e5:3c:af:b7:67:d0:38:72:38:
11:a2:d2:58:0c:e4:77:99:a5:51:8b:de:d3:56:a5:55:b4:0e:
a3:c7:ea:ed:8d:a7:07:42:32:66:bb:f6:b4:89:b6:e2:6e:00:
44:ea:74:aa:22:50:e3:bd:e8:2b:45:22:3c:7d:35:61:dd:ff:
52:d3:c3:20:04:13:73:d0:79:0e:9d:36:a8:68:1f:ac:64:b9:
cd:a1:92:90:95:48:fd:74:2d:59:a0:e8:da:c0:4e:7f:9f:e7:
9a:db:a5:3e:9e:4e:4f:a9:4b:b9:c1:5b:10:b8:a9:fd:3c:89:
14:0c:00:31:a5:04:dc:7e:f1:41:b2:5f:69:26:b6:79:1a:04:
48:3c:49:8a:11:63:cc:77:a1:72:74:3b:76:e6:6c:99:9e:d8:
d1:ef:ff:94:cf:ef:7c:25:a2:59:fd:52:0a:3e:ad:33:26:f9:
4c:ad:3e:bf:a0:be:b7:a6:a1:62:f4:d0:ef:f4:fb:a7:a4:b7:
40:35:18:78:93:e8:47:4c:db:34:da:84:31:67:86:1f:c3:35:
f7:80:5f:ed:60:9a:e3:7b:18:43:e6:73:7c:6a:ee:46:a3:f9:
57:6f:96:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:10:58 2024 by rpki-client on console-ams.rpki-client.org