Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/P_r9ExUqJaNLPD50m3rxW0FuQJQ.roa
File: P_r9ExUqJaNLPD50m3rxW0FuQJQ.roa (raw, json)
Hash identifier: mBdmAl9vEVV3UlMmQuUYske/NyzbOcVt23bI2TcPLUk=
Subject key identifier: 3F:FA:FD:13:15:2A:25:A3:4B:3C:3E:74:9B:7A:F1:5B:41:6E:40:94
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018CC94E368F7B131714C5D0A522234DFA6E
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/P_r9ExUqJaNLPD50m3rxW0FuQJQ.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47798
IP address blocks: 89.3.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:36:8f:7b:13:17:14:c5:d0:a5:22:23:4d:fa:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ffafd13152a25a34b3c3e749b7af15b416e4094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e5:ad:c1:e8:be:1c:b9:a4:e7:d8:e7:66:45:
00:6b:34:61:3c:0b:c0:29:4a:05:33:0b:ce:a4:1e:
58:33:e5:b8:38:29:dc:27:ac:6b:8d:6c:35:32:12:
ec:d5:17:a5:ce:57:9e:4c:f8:5e:a8:b7:f5:c9:ed:
8a:e4:d8:92:89:f3:42:94:13:c6:ff:77:5c:3e:c0:
2c:cd:ac:24:45:1a:d0:39:f9:9a:bf:e5:19:4f:c9:
19:4a:02:c6:5e:c4:7b:37:78:90:2a:3a:3b:b0:a1:
68:e1:73:cc:0b:29:81:3a:77:98:42:7a:cb:57:89:
b0:ca:84:29:a8:e0:59:13:0e:14:99:e4:aa:00:cf:
03:bb:b9:bb:b1:60:3e:d7:20:ab:4a:ea:57:37:21:
74:07:77:24:8b:21:2a:b6:5e:a2:a4:aa:8d:75:5f:
8f:07:30:5c:92:bd:12:03:c7:c7:e4:e0:84:06:59:
6d:a2:1e:76:cb:5a:5f:0e:63:9e:be:5d:c1:52:5d:
e4:47:82:9d:fa:c9:de:79:93:de:8a:40:99:1b:c6:
2a:6f:6f:b9:a8:f6:05:66:29:60:92:a2:43:39:f2:
51:8c:13:68:e9:a6:d7:82:38:df:77:97:98:99:9b:
86:b7:f1:af:6a:c6:a6:30:fa:b0:d4:18:07:9a:a6:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FA:FD:13:15:2A:25:A3:4B:3C:3E:74:9B:7A:F1:5B:41:6E:40:94
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/P_r9ExUqJaNLPD50m3rxW0FuQJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.3.240.0/20
Signature Algorithm: sha256WithRSAEncryption
36:3a:15:35:d6:82:11:1b:52:85:d4:a2:7b:ac:cd:a7:ee:0c:
9e:0b:17:62:aa:90:e8:c3:bc:a8:22:b4:de:d7:d5:21:5e:cb:
55:79:c6:1f:87:bd:59:dd:ce:8f:52:a1:1d:d2:5d:04:2c:cc:
10:0f:fa:56:4c:59:fe:9c:03:8f:e8:1c:6f:3c:e2:08:99:31:
56:46:40:a7:f7:00:8c:4d:a8:97:e0:00:73:cf:7a:7f:a3:46:
ff:fa:08:6a:60:05:a3:0c:82:a9:a4:bd:66:fc:ac:b1:62:96:
b8:fa:60:26:0c:a3:d2:ea:7c:e3:08:01:a0:3d:e3:66:d6:c2:
a5:a3:98:1c:53:c9:b2:88:97:6b:ea:cb:c8:03:6f:fe:d0:b9:
bd:23:38:82:e3:f9:66:b2:31:4e:19:5a:85:ff:ea:13:b9:63:
b7:ec:c6:40:6f:f5:51:43:1a:17:08:aa:63:5b:54:6e:1e:73:
d1:d5:7c:62:f3:ee:02:9b:81:a3:b2:45:9d:f5:cc:20:84:47:
94:ed:03:6e:a6:b7:ef:60:92:cb:48:8c:e3:75:25:ce:92:07:
88:5e:62:3e:b9:3c:74:4b:6c:44:72:56:f9:23:94:dc:c1:49:
a0:9c:f3:ba:bb:9b:07:23:04:78:1d:56:fd:ab:40:31:66:d7:
76:2e:a3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:07 2024 by rpki-client on console-fra.rpki-client.org