Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/gngOYDeihWoZ9_i87i_K2TzuLv8.roa
File: gngOYDeihWoZ9_i87i_K2TzuLv8.roa (raw, json)
Hash identifier: aZMTNPynVs4XsOmtSt173kPg9jJEKkQYVwyFGaMUVh0=
Subject key identifier: 82:78:0E:60:37:A2:85:6A:19:F7:F8:BC:EE:2F:CA:D9:3C:EE:2E:FF
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 018CC5DCB331460D2FF0D9A7F85F585F4DC2
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/gngOYDeihWoZ9_i87i_K2TzuLv8.roa
Signing time: Mon 01 Jan 2024 16:30:24 +0000
ROA not before: Mon 01 Jan 2024 16:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198404
IP address blocks: 89.140.152.0/24 maxlen: 24
95.39.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:b3:31:46:0d:2f:f0:d9:a7:f8:5f:58:5f:4d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 1 16:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82780e6037a2856a19f7f8bcee2fcad93cee2eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:23:cb:60:a3:02:6d:70:3b:5e:eb:80:7b:
d6:c2:3a:eb:02:37:bc:68:f7:23:63:eb:8b:7a:82:
62:91:77:5f:b4:26:f0:ce:7c:52:2d:3c:5c:10:cd:
07:2f:0e:42:13:68:56:6c:79:d0:da:dc:5e:08:3e:
8e:73:7f:d1:83:71:23:1f:7d:bb:b8:69:99:7d:cd:
11:bf:e8:8c:c6:3e:31:64:6e:90:29:50:ac:70:99:
62:5c:f6:31:7a:c9:5f:96:2f:7f:8d:73:1f:31:79:
4e:76:44:e3:26:e0:4d:4b:01:92:0b:57:a1:3b:ca:
7c:f8:15:ae:1e:ca:81:84:2f:8b:f9:4b:64:a9:6c:
eb:37:ac:ac:eb:aa:de:c0:27:23:b6:21:bb:c8:64:
29:71:97:70:5e:c8:f0:80:53:13:18:6b:fb:d0:05:
eb:c2:82:df:44:10:b0:f5:b1:cb:5a:75:a2:a0:a7:
e8:2f:2e:4e:95:c7:c8:23:ef:8b:dc:7b:26:6f:9b:
1b:1d:1c:2c:cd:11:64:64:13:9c:98:0f:ae:30:82:
ca:6e:1f:ba:e8:2f:25:e7:fc:46:22:f1:12:e4:79:
29:d1:91:a4:15:e7:49:53:f6:23:3c:1f:ee:79:9f:
29:7d:08:b6:11:b2:63:fa:d5:3a:1f:c3:04:ef:c7:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:78:0E:60:37:A2:85:6A:19:F7:F8:BC:EE:2F:CA:D9:3C:EE:2E:FF
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/gngOYDeihWoZ9_i87i_K2TzuLv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.140.152.0/24
95.39.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:41:08:f5:3a:ff:1c:96:5a:f5:e0:a6:90:36:4a:cf:e1:f6:
62:18:29:37:d5:29:1f:ac:3d:20:23:39:72:33:bf:30:a8:da:
09:63:95:c0:51:64:6e:0d:fb:c6:13:a0:35:51:45:a5:f0:16:
39:e7:8b:93:30:1d:ac:bf:33:3a:4b:c9:8d:9c:e8:77:de:9d:
f9:a9:15:04:16:e9:f7:21:f6:89:ad:c3:e0:b4:51:9e:c8:61:
ec:55:77:a5:aa:a8:7d:d5:da:38:44:1d:cf:23:67:27:a3:09:
84:a5:5b:a5:c1:e1:68:34:3c:69:a5:01:21:1d:80:d1:c2:bf:
3b:be:81:a5:79:cb:33:dd:c3:90:ea:a5:51:60:76:2e:80:33:
2a:9a:46:2e:a0:8b:77:59:6e:00:b0:fd:06:03:c1:c2:22:b1:
a2:59:22:e1:6a:27:4c:cd:ff:ec:29:80:27:da:c4:59:f4:3e:
10:37:ac:f3:53:68:3d:f2:b4:e8:8f:40:62:06:be:cb:a1:7c:
50:37:d5:d8:7e:18:a2:11:5a:f4:bc:6c:c1:87:5f:eb:e0:e9:
c8:6c:a0:ec:0f:83:ea:bf:77:e2:eb:5b:bc:c7:7e:75:96:5e:
2e:6a:be:40:49:97:23:7d:73:67:25:ac:42:3a:73:02:3c:81:
a2:0d:06:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 20:43:17 2024 by rpki-client on console-fra.rpki-client.org