Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/bzPASYh78ZfXE5pqTC81zP3fRY8.roa
File: bzPASYh78ZfXE5pqTC81zP3fRY8.roa (raw, json)
Hash identifier: 6tADDhEwLreOzjplEue0BeSX3gxjiuPr9DLrtGAtS/I=
Subject key identifier: 6F:33:C0:49:88:7B:F1:97:D7:13:9A:6A:4C:2F:35:CC:FD:DF:45:8F
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0191E10ECC56C7F68034FC4257A6EB40100F
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/bzPASYh78ZfXE5pqTC81zP3fRY8.roa
Signing time: Wed 11 Sep 2024 12:28:48 +0000
ROA not before: Wed 11 Sep 2024 12:28:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34858
IP address blocks: 89.23.121.0/24 maxlen: 24
192.145.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:0e:cc:56:c7:f6:80:34:fc:42:57:a6:eb:40:10:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 11 12:28:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f33c049887bf197d7139a6a4c2f35ccfddf458f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ff:5b:97:51:0d:a2:9b:ec:17:d7:9f:d8:9d:
5a:03:06:3d:ef:25:69:14:75:00:0d:cf:82:05:20:
51:a0:7f:71:4c:8d:10:07:83:e8:e2:75:43:a6:8f:
d7:79:d2:2a:f7:e4:ee:44:9a:91:51:7c:da:30:7c:
ba:5d:5f:61:0d:af:b3:f7:3b:da:64:b7:85:ae:ee:
43:ee:ec:4a:bc:da:e3:05:20:b1:00:12:e9:2d:1e:
41:b1:8c:dd:cd:75:1e:b3:c2:a8:28:a8:28:e1:f9:
27:1c:38:79:21:87:e3:15:8e:f4:ac:56:4b:28:0d:
b7:8e:7b:ce:a9:32:14:e2:06:88:81:f4:01:82:7c:
1d:b8:e3:8f:70:58:ab:90:cd:18:2d:73:89:84:27:
a9:b8:5d:3c:22:75:d2:5a:f7:24:c1:ca:2e:3e:da:
a4:ff:bf:79:7e:5c:31:75:a3:c1:0d:14:14:fe:c3:
8e:a6:f6:dc:14:84:4d:1c:63:4c:cc:54:8e:ac:17:
92:2f:5b:99:06:25:e1:ae:7e:18:46:1e:13:a2:46:
19:15:1a:85:8d:0a:a2:dc:d1:3b:47:48:cd:6e:63:
9f:b5:6f:fb:24:65:96:a5:25:f3:c1:e6:ca:2b:0c:
e9:28:15:0b:c0:60:91:5a:e3:17:ae:d7:b3:e7:c6:
f4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:33:C0:49:88:7B:F1:97:D7:13:9A:6A:4C:2F:35:CC:FD:DF:45:8F
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/bzPASYh78ZfXE5pqTC81zP3fRY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.121.0/24
192.145.96.0/24
Signature Algorithm: sha256WithRSAEncryption
30:42:65:a9:19:53:47:42:e8:93:3e:f0:30:27:f5:bb:e0:95:
44:45:94:07:58:9b:df:f6:cc:15:25:63:26:74:21:97:e3:83:
8a:52:c7:bc:c7:3e:56:bc:a4:5a:36:0f:1b:87:65:99:09:98:
b7:ca:5a:34:0e:71:9b:f3:e7:af:ff:c1:54:13:0b:26:0e:09:
c1:6e:2b:28:74:53:f5:a0:6e:6a:0c:23:f8:b7:f6:db:bf:9c:
5e:bc:73:51:d7:99:e8:8c:1c:51:b6:91:51:38:4d:a8:4e:3f:
4d:9a:34:63:87:be:0d:68:48:25:80:f7:79:74:89:de:89:02:
3c:98:5b:3f:10:f5:da:21:83:0f:76:b7:b3:7f:c1:4d:c6:25:
46:19:68:ad:75:88:63:01:71:06:af:15:a3:36:6c:5c:7a:db:
3b:82:6b:ce:08:16:1c:b1:79:6c:a8:a3:d8:73:e0:87:06:ac:
ea:8e:52:b3:24:02:d4:83:fe:0b:95:fd:7d:85:f2:9a:94:7f:
ca:ad:15:cb:95:b3:a3:d0:d8:4a:86:e5:f9:76:de:38:c0:df:
99:3d:af:33:15:75:c5:f8:5a:20:0c:62:41:ae:ab:d3:99:c6:
12:e2:7a:73:30:1c:eb:cc:c3:95:ca:1b:e3:e8:7b:03:0f:0c:
d5:d5:24:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:13 2024 by rpki-client on console-ams.rpki-client.org