Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/A8TDmzophZLMXJub8ZXFZSOKDuY.roa
File: A8TDmzophZLMXJub8ZXFZSOKDuY.roa (raw, json)
Hash identifier: d4gn29gvK8snNi0n35ySruaPM99+8ao0qDdxochi/JA=
Subject key identifier: 03:C4:C3:9B:3A:29:85:92:CC:5C:9B:9B:F1:95:C5:65:23:8A:0E:E6
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018CC2DB66333C52084B56880347C8A9C566
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/A8TDmzophZLMXJub8ZXFZSOKDuY.roa
Signing time: Mon 01 Jan 2024 02:30:07 +0000
ROA not before: Mon 01 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61971
IP address blocks: 89.23.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:66:33:3c:52:08:4b:56:88:03:47:c8:a9:c5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03c4c39b3a298592cc5c9b9bf195c565238a0ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:52:7b:51:fc:e1:8e:9d:13:81:2c:ed:0f:bf:
4f:cb:9c:70:cc:df:02:a1:08:f2:ef:d0:67:b0:6e:
d5:fa:5c:30:bc:7b:3b:19:57:bd:05:4c:42:e2:c7:
70:26:76:fc:5f:81:29:1b:8f:cc:6f:49:8e:c8:77:
8c:0c:ab:58:c5:ea:d1:6f:c1:b2:42:0d:3d:3b:2c:
10:37:51:83:3a:97:c0:61:4a:3f:92:f1:1a:dc:f8:
82:7a:5d:04:57:83:a0:c7:63:2d:ec:c5:7d:c5:4c:
a8:ca:f1:fc:41:77:6c:88:16:8e:0a:6a:46:c8:2f:
49:ff:0a:7f:d8:e9:7c:7c:47:80:18:cf:5c:b0:4e:
b3:d9:42:b1:cb:6e:14:30:8a:c8:e9:5d:f2:6a:c3:
dd:8e:53:b4:66:52:12:94:8e:06:f6:b0:4e:83:6a:
fc:e2:de:d8:83:93:92:ef:93:cc:6a:80:36:87:49:
9e:61:50:ba:c4:66:73:f9:c3:54:cd:05:da:e4:1c:
c0:3b:77:ea:09:df:66:a2:75:e7:b0:38:8f:7f:01:
90:8a:16:56:94:23:c7:54:52:03:17:fc:ea:e6:8b:
f5:6b:e7:ee:cc:e9:cb:ea:24:9c:78:75:b5:36:83:
2d:d2:53:57:45:3e:65:07:ca:18:15:45:29:3a:52:
bc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C4:C3:9B:3A:29:85:92:CC:5C:9B:9B:F1:95:C5:65:23:8A:0E:E6
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/A8TDmzophZLMXJub8ZXFZSOKDuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.120.0/24
Signature Algorithm: sha256WithRSAEncryption
79:24:26:6a:cb:fb:22:a2:c6:0f:44:5f:d5:9c:d1:11:43:d9:
8f:ca:eb:bc:ed:29:46:ba:b4:a7:fb:c5:fa:92:75:1d:e2:47:
ca:fe:ea:e2:4e:ab:7f:8b:00:5f:b6:2f:46:e9:c4:18:54:1d:
e8:46:20:76:4a:de:2d:a9:2f:b9:ed:b5:3b:00:7e:3b:2c:85:
d3:a5:ff:24:48:5a:11:13:31:a9:8f:2d:9a:a1:cb:9c:c2:ec:
ff:4a:86:6e:e5:28:11:30:64:ed:64:42:eb:bf:25:cf:a1:ae:
6f:3b:76:86:5c:6b:cb:ac:55:79:c0:45:94:3a:a1:37:e3:34:
ba:bb:6f:7b:00:97:52:af:02:7b:e2:36:a1:0e:08:8b:8a:86:
6e:b3:ce:af:9b:c7:3a:8b:dd:cf:1b:14:9c:75:08:0c:7e:02:
9d:32:0c:79:a7:df:1d:58:51:75:42:d5:14:49:09:24:e3:0a:
21:e6:ce:ef:3c:78:3b:0e:a0:17:ba:18:80:1c:45:1b:7d:0a:
84:ab:a0:1d:33:d7:cb:0d:3c:f9:cb:43:2f:be:f6:df:c3:bb:
68:f9:54:f6:6a:0d:f5:06:79:5b:b6:b5:fd:53:1b:db:0e:5a:
42:5a:a4:d6:04:dc:89:c2:ae:a7:1f:b2:6c:9b:31:d9:f1:7a:
bb:eb:99:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:57:28 2024 by rpki-client on console-ams.rpki-client.org