Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/Pm0ILrb5qhUftBt-127RhCWJfwU.roa
File: Pm0ILrb5qhUftBt-127RhCWJfwU.roa (raw, json)
Hash identifier: ZiElZhrZlrcaRBtfX6XwDkgc4hZep161hEKrxiNVj4w=
Subject key identifier: 3E:6D:08:2E:B6:F9:AA:15:1F:B4:1B:7E:D7:6E:D1:84:25:89:7F:05
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 018CC2DAB26F8B2CA201EEBB47FAE7D2E9A1
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/Pm0ILrb5qhUftBt-127RhCWJfwU.roa
Signing time: Mon 01 Jan 2024 02:29:21 +0000
ROA not before: Mon 01 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 89.38.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b2:6f:8b:2c:a2:01:ee:bb:47:fa:e7:d2:e9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e6d082eb6f9aa151fb41b7ed76ed18425897f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:30:98:bc:0f:8d:ea:83:42:a6:88:27:1c:2d:
ac:9a:18:61:d0:3e:ca:af:b8:18:74:1a:22:8e:47:
8d:bf:51:ef:62:7d:a6:25:d4:20:6c:7f:0c:46:f5:
fd:ac:91:58:8f:79:eb:30:2e:e0:01:2f:2f:a8:f4:
dc:45:fc:c9:be:1a:89:0a:24:a4:a3:ea:d5:23:48:
10:d8:13:99:59:b4:1a:33:18:4e:aa:ce:53:f5:db:
3d:32:ea:18:0a:b8:6d:b1:c3:1d:a0:6a:72:a1:b7:
9a:bc:fe:3c:05:35:6b:df:1f:e5:3d:87:66:70:c4:
db:98:c1:4d:2f:e1:cd:57:e2:b6:db:f3:41:d7:e8:
c8:22:b9:9f:31:90:66:46:9f:36:e4:3d:a8:d9:1a:
39:1e:79:3e:05:16:dc:a1:6c:6e:5f:84:f5:4e:36:
ba:94:46:95:3a:82:17:19:88:07:67:c3:93:34:2d:
9e:31:b9:d3:8a:78:1b:2d:47:23:c2:df:7d:ac:8a:
a0:b0:c6:48:25:2c:26:6b:83:a1:13:cb:b7:cf:17:
8f:db:6f:ef:97:cc:49:a2:1e:3e:ed:39:ee:82:ef:
59:4a:47:00:74:d4:79:ba:04:4b:7e:df:c1:74:0e:
a0:14:ac:a9:aa:fe:2f:f7:e4:e3:6d:b7:a4:e9:c4:
83:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6D:08:2E:B6:F9:AA:15:1F:B4:1B:7E:D7:6E:D1:84:25:89:7F:05
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/Pm0ILrb5qhUftBt-127RhCWJfwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.40.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:23:e2:04:b4:8b:0b:2a:36:67:c3:af:c2:87:50:3a:c9:6d:
b9:ab:cf:f8:0c:73:b7:5b:6d:e9:eb:4f:3d:b5:b2:47:9b:cb:
95:da:8d:b5:0e:57:9f:48:90:55:59:4a:78:f6:c1:75:42:6f:
35:1f:5a:4b:08:d8:f1:ac:bc:cb:05:19:ff:4b:94:11:12:d9:
af:22:79:57:dd:85:67:c7:e4:97:dc:de:0b:96:6b:7f:66:08:
7e:74:65:9b:d4:05:00:b6:be:40:f1:a5:db:02:92:77:7b:b8:
39:85:45:d7:af:26:a4:b3:a4:4a:31:fb:cd:de:b0:bb:8b:34:
b2:02:a3:8e:41:9e:67:5d:59:d4:b9:7f:94:1f:d3:8c:36:ce:
d5:92:07:a1:1d:da:2f:9d:fb:55:7a:91:85:4d:f9:e2:08:a4:
66:48:62:6d:2e:13:8d:1e:52:5b:59:a6:db:df:2d:5e:30:86:
97:28:70:36:bc:90:47:b8:8f:e7:57:3a:8f:7c:86:fc:90:a1:
c5:14:f5:cd:92:29:b9:2f:98:f2:6a:90:4f:35:5e:71:2b:63:
24:29:b5:78:3f:d5:9f:df:3f:1e:7e:2b:07:52:c0:79:af:48:
4d:92:67:8e:3f:40:3b:d2:9f:f9:32:08:f5:80:ed:5e:87:a1:
7c:d0:bf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 07:52:58 2024 by rpki-client on console-ams.rpki-client.org