Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/vbEVM6qLg8L03GP-lXkznHQ5QG8.roa
File: vbEVM6qLg8L03GP-lXkznHQ5QG8.roa (raw, json)
Hash identifier: j4uLdwibf3dFA1QSghGCp4nlyoU+UOGSGQaZI89PqiE=
Subject key identifier: BD:B1:15:33:AA:8B:83:C2:F4:DC:63:FE:95:79:33:9C:74:39:40:6F
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018CC2DB6BDD2A751CC89BF27F8B47641F66
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/vbEVM6qLg8L03GP-lXkznHQ5QG8.roa
Signing time: Mon 01 Jan 2024 02:30:09 +0000
ROA not before: Mon 01 Jan 2024 02:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211134
IP address blocks: 89.23.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 04:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:6b:dd:2a:75:1c:c8:9b:f2:7f:8b:47:64:1f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 1 02:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdb11533aa8b83c2f4dc63fe9579339c7439406f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:05:7a:53:47:4d:84:e1:2b:1e:40:a4:02:
f9:2f:76:38:39:e6:e6:d8:dc:8d:05:64:11:ff:2c:
a2:cd:30:43:5f:38:9b:1a:17:d7:4b:b1:88:4d:f3:
17:a3:04:8b:a6:8f:20:a2:fe:97:ea:22:2b:3c:b3:
d3:f6:27:79:d2:bd:87:5e:ce:c6:a0:60:1f:17:bc:
8d:a6:8c:73:79:d2:6f:93:1a:62:39:08:ea:99:40:
54:2d:a9:fb:c2:42:42:96:e4:e2:01:6b:56:43:ba:
a2:d1:3c:40:92:b3:5e:03:9c:1a:38:18:28:3b:eb:
03:08:9c:32:4e:dd:1c:57:a5:da:23:bb:5f:8a:4c:
29:97:6b:1e:57:09:81:e7:df:0c:ad:dc:db:c5:8b:
54:0c:8a:79:8c:85:2a:59:41:4c:62:1c:b9:b5:d2:
db:e8:d2:29:48:1b:c4:bf:22:92:68:ba:58:81:2b:
71:86:c5:3d:f5:4d:1d:ec:3b:8e:c5:9c:0a:89:45:
df:ab:69:6a:f8:dd:50:8a:aa:5a:37:64:5e:33:f9:
20:79:32:bc:25:a6:48:1b:d3:78:38:83:64:9e:c8:
b4:34:a4:ba:ce:52:1b:61:fa:2c:a3:51:74:52:6e:
89:6a:96:55:85:39:b3:90:af:21:6b:3c:37:db:b6:
f7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B1:15:33:AA:8B:83:C2:F4:DC:63:FE:95:79:33:9C:74:39:40:6F
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/vbEVM6qLg8L03GP-lXkznHQ5QG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.122.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e9:e6:13:70:db:ef:82:28:9d:f9:ea:83:83:de:ed:5e:f5:
c7:f7:2b:30:c0:54:49:46:d3:4d:8c:b7:50:2e:f0:de:24:1d:
92:42:01:cc:e6:07:09:b3:ad:92:24:da:ef:93:0f:89:ae:ed:
a3:7b:3e:d2:eb:5c:45:84:19:5e:b2:f2:8f:20:51:10:9e:6e:
7f:fb:c3:66:ca:30:18:21:f1:4a:62:ee:ca:40:52:e9:54:8c:
ba:a3:f4:ba:bf:eb:ae:86:65:c4:19:23:66:16:f6:17:ce:2d:
b6:e5:9b:2d:84:91:16:42:53:15:ed:d2:27:69:8f:e0:e2:df:
b8:9d:f1:4d:d1:2c:1f:35:c3:b7:ff:f2:2f:28:fe:a7:1b:76:
2f:f1:dd:3e:32:2d:1e:8d:11:c6:2d:ae:b5:7f:99:47:91:14:
ba:5a:0d:b8:65:a4:67:bd:11:36:75:2d:a8:e6:3d:29:79:54:
fd:76:eb:96:b8:76:e6:fe:ca:4d:fa:b0:0c:89:c4:de:9a:af:
9d:d4:29:44:51:39:53:e6:b3:d0:0f:3f:06:2d:22:77:3f:4a:
dd:23:9a:a0:4c:20:ee:c6:3b:06:e9:64:a5:14:c2:fe:5d:29:
10:bf:82:82:95:07:59:b3:fb:5a:dd:59:f4:95:2f:1e:e7:5d:
a9:38:a9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:09:03 2024 by rpki-client on console-ams.rpki-client.org