Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/m8-hYOkuas6iUhhJOoyaLAMQq78.roa
File: m8-hYOkuas6iUhhJOoyaLAMQq78.roa (raw, json)
Hash identifier: vwxeK0Z69zGAAHGa7/GTXFSmdgOAn6vWYiP6bgsr+6A=
Subject key identifier: 9B:CF:A1:60:E9:2E:6A:CE:A2:52:18:49:3A:8C:9A:2C:03:10:AB:BF
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 0192668E83F452273B73F9EF93019F4FFA0A
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/m8-hYOkuas6iUhhJOoyaLAMQq78.roa
Signing time: Mon 07 Oct 2024 10:37:48 +0000
ROA not before: Mon 07 Oct 2024 10:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 264617
IP address blocks: 89.249.196.0/24 maxlen: 24
212.42.198.0/24 maxlen: 24
212.42.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:8e:83:f4:52:27:3b:73:f9:ef:93:01:9f:4f:fa:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Oct 7 10:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bcfa160e92e6acea25218493a8c9a2c0310abbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:73:fe:42:fa:44:5d:4b:ba:af:a3:3a:bb:
99:61:34:d4:0f:40:41:97:53:d4:68:1b:10:31:7e:
0a:e3:8a:b0:e7:70:24:b8:ad:d0:34:1b:3f:b3:a0:
17:59:40:f3:52:25:fb:c7:16:85:cc:ec:99:aa:7e:
bf:df:34:0c:9d:a3:e0:ee:1f:07:d8:19:64:a6:fb:
72:57:53:e5:9f:34:88:71:08:e4:59:eb:e1:1c:31:
c4:fc:fa:90:32:38:63:4c:62:61:a7:f9:a6:83:7a:
44:f0:c7:ef:c6:d0:85:56:06:28:d6:72:11:8a:08:
ed:b9:a7:6d:29:cd:0b:9d:f2:42:40:b9:19:bb:8c:
87:60:47:6d:d5:33:36:ff:e4:c2:ff:5b:1c:72:c1:
d8:d7:91:84:6a:31:88:d8:0e:e2:2e:a5:8e:e2:f1:
ca:0b:50:94:e5:48:f1:31:f9:f6:0d:e3:58:09:4a:
92:99:85:d0:55:92:ae:b3:be:6a:d8:db:2e:8c:a6:
4e:26:5b:37:63:df:b9:45:73:50:7d:28:fa:ad:89:
3f:fb:d7:27:f9:99:be:51:ea:34:3d:a8:1a:a2:5b:
a4:06:bd:d8:26:21:7b:15:2f:b5:9f:df:80:78:3b:
a0:44:a1:8f:22:c3:de:43:28:ed:e8:05:ba:50:fc:
ac:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CF:A1:60:E9:2E:6A:CE:A2:52:18:49:3A:8C:9A:2C:03:10:AB:BF
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/m8-hYOkuas6iUhhJOoyaLAMQq78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.196.0/24
212.42.198.0/24
212.42.202.0/24
Signature Algorithm: sha256WithRSAEncryption
10:22:33:55:9c:d0:fe:f4:ec:0b:0f:f0:ad:7b:4b:7b:ba:c0:
28:10:89:40:bd:95:97:de:6b:fb:f8:57:f5:c8:3b:a6:b4:50:
b6:16:e7:bd:c8:de:51:d1:39:89:aa:8c:bc:5e:ce:25:2e:4e:
bd:95:88:c9:b9:07:0b:2d:ca:3a:4d:30:18:56:9b:a9:3b:b5:
b5:8d:ab:c4:f3:a0:48:ce:04:93:b4:9e:45:5f:ad:61:46:53:
52:a3:f7:f9:b9:5c:16:b0:83:46:29:db:ef:9a:a6:6d:0b:1d:
66:64:4f:5d:11:98:e5:8a:29:3e:62:73:57:d3:65:92:64:cc:
59:dc:a3:b6:8f:00:97:24:f4:43:57:2d:29:69:bf:ff:81:f3:
28:dc:c4:c8:4d:de:92:19:f8:a8:39:e5:a1:3d:24:5c:9e:00:
51:87:9f:6d:ac:9e:fb:95:13:33:9d:4e:ae:c4:cb:4d:d9:bc:
e4:b5:72:ae:2a:01:11:e5:58:bb:ef:74:a3:06:9b:a7:2a:62:
d1:06:1c:6a:cb:4d:c8:b6:80:93:03:d5:ce:e9:72:54:19:6c:
a1:25:7e:5c:cc:34:ec:9a:53:6a:9f:36:08:83:8d:9f:3a:df:
c0:ae:c8:eb:99:4a:4f:c5:eb:d0:76:1d:4c:cb:a8:7f:f9:58:
97:b0:34:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:41:39 2024 by rpki-client on console-ams.rpki-client.org