Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/OBq3QiKoiS_9MioP_M034WVdc-Y.roa
File: OBq3QiKoiS_9MioP_M034WVdc-Y.roa (raw, json)
Hash identifier: n9BwvYknqMEAyBcKYlw/Upt3dICCQU2bw43v0/3H2ck=
Subject key identifier: 38:1A:B7:42:22:A8:89:2F:FD:32:2A:0F:FC:CD:37:E1:65:5D:73:E6
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018CC2DB6B94C2E3ABAB28764C50D8305DC5
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/OBq3QiKoiS_9MioP_M034WVdc-Y.roa
Signing time: Mon 01 Jan 2024 02:30:08 +0000
ROA not before: Mon 01 Jan 2024 02:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 89.23.103.0/24 maxlen: 24
2a11:fc80::/30 maxlen: 30
2a11:fc84::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:6b:94:c2:e3:ab:ab:28:76:4c:50:d8:30:5d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 1 02:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=381ab74222a8892ffd322a0ffccd37e1655d73e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:1a:83:cd:41:dd:e8:7c:1b:5e:a8:a7:a3:
46:33:27:11:5a:68:4f:2e:38:be:5d:0e:9c:ed:d8:
c0:8a:c7:51:25:4b:18:63:2f:dc:c3:1c:88:14:fa:
c0:7c:5a:46:bd:3c:e6:f9:af:17:5a:cb:ab:b6:91:
fb:4b:da:0e:34:84:f6:9c:ca:db:3a:0c:8d:45:a2:
30:d9:65:79:ad:56:76:f1:75:3b:17:13:15:46:6f:
44:c4:56:9e:cc:be:68:12:2d:86:9f:57:db:ec:e9:
e5:52:d5:d7:9e:c8:1b:7c:49:59:ff:da:0a:bd:af:
a3:d7:69:58:c7:7e:dd:b1:6d:15:ba:72:de:f4:52:
ad:ee:eb:7a:b1:57:75:ac:32:0b:cb:05:73:39:11:
aa:da:91:28:18:1e:4f:e8:57:90:75:9d:a6:a7:3a:
47:dd:0a:0a:0f:8f:86:92:ea:e8:a3:0d:aa:e7:6d:
28:bb:e3:43:2e:e2:ac:c9:8c:82:3e:e4:60:e9:8a:
a1:3e:ea:80:bb:c6:20:27:e0:5d:b5:8d:d1:9e:f4:
46:61:4c:91:c4:8e:c3:b7:79:39:2b:cc:1c:ae:3b:
fc:ed:ea:9e:8b:88:a6:63:87:e8:d4:d5:1a:87:c6:
58:87:88:da:90:7b:03:80:c8:8c:54:51:a8:96:62:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1A:B7:42:22:A8:89:2F:FD:32:2A:0F:FC:CD:37:E1:65:5D:73:E6
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/OBq3QiKoiS_9MioP_M034WVdc-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.103.0/24
IPv6:
2a11:fc80::/29
Signature Algorithm: sha256WithRSAEncryption
aa:c4:21:20:ec:2f:6a:6d:c2:28:89:1b:b6:55:02:d7:18:60:
05:0f:d5:4b:c9:3a:55:29:ed:6c:6c:e4:56:7f:66:38:ac:15:
39:77:86:48:d2:9f:b6:8f:59:fd:09:c7:c1:c9:ba:cb:46:98:
61:43:2d:fe:62:52:f9:02:ab:d9:0e:78:21:f8:b5:aa:7a:d3:
60:51:06:a7:2d:59:63:22:ea:f6:1b:c8:1c:11:81:83:81:f8:
6c:e0:90:35:ae:b0:c9:bc:d2:7a:c8:0b:a0:c8:a2:a9:58:74:
bf:52:3b:f8:f5:81:86:9d:ba:85:2c:57:e6:cf:75:0e:b6:04:
b5:24:42:cf:6b:74:b2:f0:d2:78:24:ef:0a:e0:1a:f6:80:21:
d8:81:07:b7:a4:ef:9e:a4:e3:49:38:5d:00:ed:f3:aa:e1:67:
fc:cb:55:e5:d1:3b:e2:77:97:35:47:16:b0:f7:9d:80:e1:cd:
ef:bf:b0:c3:80:f8:63:86:ec:2b:ac:c4:96:8f:c1:bb:10:13:
7d:b1:74:1e:29:46:0e:e1:8a:e0:56:01:16:c5:17:73:84:b8:
29:52:d4:f3:40:32:c3:87:97:fb:d9:7f:75:54:65:ae:5d:49:
74:86:0d:34:30:e9:17:c5:84:42:3c:80:b3:7c:70:05:d8:0c:
0d:b7:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:02:20 2024 by rpki-client on console-ams.rpki-client.org