Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/haVSVvTVjovxTwzlf6N8fuRnYYA.roa
File: haVSVvTVjovxTwzlf6N8fuRnYYA.roa (raw, json)
Hash identifier: Vigxa3BwuU85mKkQZCv5lNF2hBCryFGSN8JpzUEy1qA=
Subject key identifier: 85:A5:52:56:F4:D5:8E:8B:F1:4F:0C:E5:7F:A3:7C:7E:E4:67:61:80
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E5FF2B4453AB32FE197AFCA9599B399CE
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/haVSVvTVjovxTwzlf6N8fuRnYYA.roa
Signing time: Thu 21 Mar 2024 07:38:45 +0000
ROA not before: Thu 21 Mar 2024 07:38:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 270176
IP address blocks: 89.213.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5f:f2:b4:45:3a:b3:2f:e1:97:af:ca:95:99:b3:99:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 21 07:38:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85a55256f4d58e8bf14f0ce57fa37c7ee4676180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:48:21:8d:a0:a6:f8:3d:45:73:1f:f0:f6:cb:
5d:6f:24:b8:3d:65:8b:aa:c4:7d:f1:0e:09:6b:5d:
a6:cb:b5:cc:61:7f:60:94:a7:6e:f1:b7:c3:99:76:
02:c1:99:d3:86:c0:52:5b:55:4a:e5:27:a8:64:cd:
de:34:eb:45:45:4d:70:10:8c:cd:d9:2d:43:6c:e2:
08:4a:7f:9b:21:dc:c3:de:22:b7:96:ec:3d:17:25:
0b:21:73:d1:b1:d1:2f:a8:4a:4e:f5:7b:d7:84:72:
da:92:dc:83:f1:8f:61:73:41:9a:11:40:5f:58:e3:
aa:42:e3:51:ac:36:3d:ed:69:4a:ea:cd:87:b0:34:
d2:50:63:f7:ac:8a:78:da:67:49:1f:3b:e2:96:34:
3f:2a:37:62:e1:cd:d7:6f:69:a7:3a:44:ba:9f:7b:
ea:68:5c:63:a8:29:cf:f8:e4:d1:cf:c3:69:ed:13:
af:86:0d:ce:55:36:7d:af:61:11:d3:5d:c4:5a:5f:
a3:e1:c7:ba:f9:cc:08:f2:33:49:2d:5c:48:02:64:
d0:1b:27:ec:d8:4f:a0:07:fa:5d:37:84:b1:9a:cb:
4a:79:67:b6:73:1f:1d:49:61:70:23:fc:e6:72:5d:
a9:31:b9:b0:d4:b7:9b:96:9f:e1:43:78:ab:cc:13:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A5:52:56:F4:D5:8E:8B:F1:4F:0C:E5:7F:A3:7C:7E:E4:67:61:80
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/haVSVvTVjovxTwzlf6N8fuRnYYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.106.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:87:35:23:a8:d5:26:c7:d9:48:a4:65:46:02:3a:8e:88:c1:
8e:d8:c5:cb:98:07:31:81:a0:cf:ac:9b:9a:ce:85:bd:3b:ed:
ee:7c:14:46:f6:e8:59:12:0d:88:ed:7f:dc:ed:65:cc:ea:7a:
b4:b7:00:9e:8c:50:dc:b0:03:5e:af:0e:4a:6e:1d:1c:4c:2d:
8a:ad:18:4e:d9:8e:b6:8c:d8:99:e0:bd:02:6a:6e:07:be:ad:
4f:4f:b1:26:fa:75:09:31:34:fb:e1:76:dd:a4:b4:a6:a7:de:
a0:ef:08:2d:3d:44:e5:02:90:57:fb:e6:45:20:31:ac:ee:19:
87:8b:4c:e6:33:19:21:0e:a7:2b:44:62:b1:ab:8a:b0:cf:6c:
05:d0:ad:ca:f5:13:f3:33:e8:d4:c6:69:87:99:53:05:8c:f1:
8b:03:27:96:17:f0:91:6e:b9:06:4b:b5:48:b1:81:44:41:fa:
f1:9e:a7:e1:66:1b:15:45:41:70:4f:bc:6f:84:ac:51:6a:0b:
d2:ee:00:e2:14:f2:4f:23:fd:84:61:7f:00:a3:04:ed:cd:ad:
e5:f6:c5:d1:47:60:5f:e9:83:57:27:99:f4:ce:4d:02:19:da:
63:05:50:2b:15:47:62:88:a6:e0:b2:8f:04:b8:f1:be:e5:78:
e8:eb:64:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5f8rRFOrMv4ZevypWZs5nOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwMzIxMDczODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWE1NTI1NmY0ZDU4ZThiZjE0ZjBjZTU3ZmEzN2M3ZWU0Njc2MTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEghjaCm+D1Fcx/w9stdbyS4PWWL
qsR98Q4Ja12my7XMYX9glKdu8bfDmXYCwZnThsBSW1VK5SeoZM3eNOtFRU1wEIzN
2S1DbOIISn+bIdzD3iK3luw9FyULIXPRsdEvqEpO9XvXhHLaktyD8Y9hc0GaEUBf
WOOqQuNRrDY97WlK6s2HsDTSUGP3rIp42mdJHzviljQ/Kjdi4c3Xb2mnOkS6n3vq
aFxjqCnP+OTRz8Np7ROvhg3OVTZ9r2ER013EWl+j4ce6+cwI8jNJLVxIAmTQGyfs
2E+gB/pdN4SxmstKeWe2cx8dSWFwI/zmcl2pMbmw1Leblp/hQ3irzBPctQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIWlUlb01Y6L8U8M5X+jfH7kZ2GAMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvaGFWU1Z2VFZqb3Z4VHd6bGY2TjhmdVJuWVlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdVqMA0G
CSqGSIb3DQEBCwUAA4IBAQCnhzUjqNUmx9lIpGVGAjqOiMGO2MXLmAcxgaDPrJua
zoW9O+3ufBRG9uhZEg2I7X/c7WXM6nq0twCejFDcsANerw5Kbh0cTC2KrRhO2Y62
jNiZ4L0Cam4Hvq1PT7Em+nUJMTT74XbdpLSmp96g7wgtPUTlApBX++ZFIDGs7hmH
i0zmMxkhDqcrRGKxq4qwz2wF0K3K9RPzM+jUxmmHmVMFjPGLAyeWF/CRbrkGS7VI
sYFEQfrxnqfhZhsVRUFwT7xvhKxRagvS7gDiFPJPI/2EYX8AowTtza3l9sXRR2Bf
6YNXJ5n0zk0CGdpjBVArFUdiiKbgso8EuPG+5Xjo62QX
-----END CERTIFICATE-----
Generated at Fri Jun 7 19:56:35 2024 by rpki-client on console-ams.rpki-client.org