Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/3PxYTNKxcomIb29HCOwWc-PDulM.roa
File: 3PxYTNKxcomIb29HCOwWc-PDulM.roa (raw, json)
Hash identifier: USXUEyAuvAfsyYe9vr4brlllpHcASrtLu/sMZcs0YDA=
Subject key identifier: DC:FC:58:4C:D2:B1:72:89:88:6F:6F:47:08:EC:16:73:E3:C3:BA:53
Certificate issuer: /CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Certificate serial: 018CC9BC80497AD1B910BC8EE08EA52DCD8E
Authority key identifier: 89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/3PxYTNKxcomIb29HCOwWc-PDulM.roa
Signing time: Tue 02 Jan 2024 10:33:43 +0000
ROA not before: Tue 02 Jan 2024 10:33:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200991
IP address blocks: 185.89.80.0/22 maxlen: 22
2a03:82e0:ffff::/48 maxlen: 48
2a03:82e0:1000::/36 maxlen: 36
2a03:82e0::/36 maxlen: 36
2a03:82e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.mft
rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:80:49:7a:d1:b9:10:bc:8e:e0:8e:a5:2d:cd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c31770db729895c6c3fd93375e5cd5613ef36a
Validity
Not Before: Jan 2 10:33:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcfc584cd2b17289886f6f4708ec1673e3c3ba53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:95:56:9d:2b:05:16:19:6b:63:2b:5a:05:
11:be:2d:2d:3c:79:d1:1f:29:d8:79:d3:52:fd:f5:
33:6f:a3:3e:bc:b1:a1:be:7b:b0:bb:1a:b6:6b:95:
38:26:57:3a:58:b5:79:11:16:93:3c:55:41:2e:9d:
0e:27:42:ed:ee:a7:72:77:a4:8e:7c:51:0f:c4:9a:
cf:6b:17:58:bc:f4:69:e9:93:22:18:01:ac:fa:cd:
e2:27:f4:db:95:4c:de:54:46:ba:8a:d2:6f:5d:c2:
c2:12:41:0e:f7:17:e5:ed:29:6f:f0:df:91:da:b8:
de:e7:8a:9d:17:e8:38:3d:4d:c1:de:93:58:f3:ea:
31:23:59:2f:13:75:b5:36:5a:0d:68:c2:23:ed:b1:
4b:8e:80:76:d1:11:14:d8:46:1e:dc:ca:c8:4f:e1:
5c:5a:1d:92:d0:47:98:50:31:53:53:37:f8:89:48:
cd:65:6b:b1:96:b7:4a:8e:d6:c5:7a:81:14:b2:00:
dd:3c:83:9a:ae:83:72:ea:8a:2e:d4:02:6a:92:52:
f7:84:06:a0:f4:1f:86:28:25:51:97:50:c3:4b:87:
a5:3f:45:3b:a8:8c:d9:77:40:90:ec:97:7b:82:60:
93:23:ca:31:91:dc:e1:39:e3:f8:d3:f4:ec:d4:a8:
33:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FC:58:4C:D2:B1:72:89:88:6F:6F:47:08:EC:16:73:E3:C3:BA:53
X509v3 Authority Key Identifier:
keyid:89:C3:17:70:DB:72:98:95:C6:C3:FD:93:37:5E:5C:D5:61:3E:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icMXcNtymJXGw_2TN15c1WE-82o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/3PxYTNKxcomIb29HCOwWc-PDulM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/57b7a3-a739-4262-8b01-0c3d4e31eba4/1/icMXcNtymJXGw_2TN15c1WE-82o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.80.0/22
IPv6:
2a03:82e0::/32
Signature Algorithm: sha256WithRSAEncryption
af:67:8d:f4:a4:2b:70:24:79:55:15:25:fb:c9:5d:4c:1b:94:
00:ea:79:f5:60:8f:44:f0:48:37:61:1d:2a:0e:77:ea:57:a4:
a8:a7:b1:3e:1d:81:d7:2f:e0:5f:96:34:94:11:73:6f:af:d2:
90:d3:08:d8:58:0a:bb:5a:d7:31:fe:76:ce:e1:2a:d0:ad:33:
c7:91:30:fa:8b:2d:8e:3c:e2:1a:3d:75:ab:f0:38:39:90:8b:
07:98:09:a5:b9:c6:f0:cd:78:cf:10:6b:a6:a9:bd:47:a2:06:
70:cf:7d:d1:b3:a8:b1:75:a5:4d:c1:60:6d:f8:76:33:ab:cd:
a1:a1:fb:73:bf:3b:7e:d0:35:17:c7:f0:e4:9b:45:8f:79:ef:
b4:8b:ba:6d:60:03:39:8c:a2:87:07:e5:fa:ac:90:6c:66:af:
68:51:3e:4f:97:9d:c9:4f:47:37:41:da:79:d6:c7:34:2e:6d:
96:3e:70:5e:db:63:c4:eb:8f:e9:26:26:39:df:23:3c:ac:1c:
8f:b5:1b:d5:f9:f8:d2:db:95:5e:8d:77:cf:33:10:b7:f1:f0:
a7:87:d6:fe:c4:9a:c3:bc:1e:9f:fe:6e:cc:bd:cc:7c:ff:e3:
a0:d9:af:15:bb:28:72:de:a2:6f:ff:41:72:6d:e7:89:95:49:
04:28:7b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:41:09 2024 by rpki-client on console-ams.rpki-client.org