Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/a0GbkxRen59EF8BmNvXRXyAE0lw.roa
File: a0GbkxRen59EF8BmNvXRXyAE0lw.roa (raw, json)
Hash identifier: LzNyViAHeUGR8lXQtA+2yfmTbBDlskaeJ04vKwwza4A=
Subject key identifier: 6B:41:9B:93:14:5E:9F:9F:44:17:C0:66:36:F5:D1:5F:20:04:D2:5C
Certificate issuer: /CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Certificate serial: 018CC6B91A7289D2E59752865D4B95A903C3
Authority key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/a0GbkxRen59EF8BmNvXRXyAE0lw.roa
Signing time: Mon 01 Jan 2024 20:31:08 +0000
ROA not before: Mon 01 Jan 2024 20:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13065
IP address blocks: 89.28.224.0/21 maxlen: 21
185.9.56.0/22 maxlen: 22
212.109.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:1a:72:89:d2:e5:97:52:86:5d:4b:95:a9:03:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Validity
Not Before: Jan 1 20:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b419b93145e9f9f4417c06636f5d15f2004d25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2b:72:1e:71:04:0a:ef:6a:93:ff:8c:e2:e4:
fe:bf:2c:63:e6:98:0d:4e:98:61:c5:ba:b6:ae:6b:
19:bd:14:f9:b9:b2:73:f9:7d:66:bc:b1:d3:9f:42:
a6:5a:ab:22:82:9a:bb:d9:46:eb:70:af:66:8c:7a:
67:5c:67:38:af:da:66:b6:51:df:0a:97:b8:0c:8a:
f0:e5:7b:9c:35:11:c1:91:e8:ca:5e:52:e7:99:35:
d5:51:b2:0f:7a:38:cf:bc:a8:3b:aa:3e:d3:17:20:
39:88:bd:df:ab:11:20:44:ca:87:70:08:84:24:0a:
b6:2a:57:d9:80:24:93:0a:d0:1c:0d:0f:b7:56:9a:
48:55:e7:78:a7:86:7e:3c:5a:23:6b:fa:4e:3c:4a:
45:29:a0:7b:79:a7:9e:7c:a2:9a:e4:a6:a7:76:f6:
49:ed:6c:73:13:d6:6d:24:03:c3:9b:df:4a:34:a1:
d0:40:18:c2:3b:d3:ed:5e:2a:d7:08:99:80:69:22:
b5:23:36:0a:c9:24:f4:17:1f:ac:8c:df:10:3d:6c:
52:ff:8b:3d:03:64:54:9f:5a:92:5f:c7:d3:b6:ac:
5f:21:a6:84:ae:a5:27:9e:9d:17:e9:a6:15:43:f9:
b2:de:17:ec:e5:45:18:f9:2d:23:22:34:e2:5b:1a:
6e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:41:9B:93:14:5E:9F:9F:44:17:C0:66:36:F5:D1:5F:20:04:D2:5C
X509v3 Authority Key Identifier:
keyid:96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/a0GbkxRen59EF8BmNvXRXyAE0lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.224.0/21
185.9.56.0/22
212.109.144.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:08:56:f5:d5:cc:f9:04:fd:87:8f:4d:c0:16:cd:75:1c:a0:
8f:26:a0:14:4e:08:5a:c0:2a:5e:71:cd:fd:14:57:43:f3:4c:
86:da:f4:15:3d:da:94:45:8e:f6:39:83:3d:a0:bf:7a:aa:13:
0d:75:8d:ac:47:6e:db:19:13:85:17:9c:f9:c0:d6:7a:86:d9:
cd:88:c9:58:5b:2a:b9:0c:1c:80:7c:5d:1e:ed:c2:b7:88:17:
dd:b4:cd:76:e1:d5:81:76:6f:3a:28:81:b5:95:73:0b:ec:2d:
79:42:67:51:dc:fc:73:09:8c:f9:94:e0:67:11:e2:9a:9e:a1:
1f:f8:f8:40:39:56:24:a8:64:e9:2d:19:a1:ec:09:4f:ab:89:
a0:9c:a7:a5:0b:8c:d8:a3:5a:06:0d:a4:f1:dd:8e:7b:28:4e:
30:0c:42:58:33:1f:b9:48:d7:2c:87:43:7d:33:b6:69:8a:f5:
6e:c3:bf:38:0d:a9:66:36:9c:5f:f5:b4:52:86:26:48:06:ae:
d7:07:25:2f:fb:ed:c1:6c:0e:b3:ad:d1:25:8c:97:f2:99:0e:
40:5b:e4:81:98:1d:ce:23:37:b3:ba:e5:50:ce:3a:81:06:d0:
6f:ce:59:69:bb:b0:46:a0:62:2a:c4:17:b3:ce:0e:a8:f9:32:
45:0b:b1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:43:30 2024 by rpki-client on console-ams.rpki-client.org