Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3B_LbnqZ-Esa6ejHwhqd7kMfkJQ.roa
File: 3B_LbnqZ-Esa6ejHwhqd7kMfkJQ.roa (raw, json)
Hash identifier: en2J0bzmVIjezjTWPWqmlKkxmKh1AhFB1RS+oarZKFs=
Subject key identifier: DC:1F:CB:6E:7A:99:F8:4B:1A:E9:E8:C7:C2:1A:9D:EE:43:1F:90:94
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01905F4693ED3C80AE71EDFA0DB42FAFB9FB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3B_LbnqZ-Esa6ejHwhqd7kMfkJQ.roa
Signing time: Fri 28 Jun 2024 14:36:18 +0000
ROA not before: Fri 28 Jun 2024 14:36:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210538
IP address blocks: 89.213.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5f:46:93:ed:3c:80:ae:71:ed:fa:0d:b4:2f:af:b9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 28 14:36:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc1fcb6e7a99f84b1ae9e8c7c21a9dee431f9094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d2:5d:34:52:6e:8c:d7:32:dc:0e:53:03:9c:
e5:c3:54:ef:6a:d9:6e:cb:ac:42:f0:e9:52:ff:11:
81:e8:ab:1d:42:8b:86:ba:ff:c3:50:fd:9b:ab:1a:
fb:6c:1c:9f:0d:41:e4:3c:61:c8:4f:95:c6:2b:38:
5b:a2:8d:e2:f3:5d:53:32:d6:9b:8e:50:97:35:b7:
f0:94:98:56:f0:ba:f5:d9:bf:ea:99:cf:76:8e:90:
2b:ba:c1:d4:06:07:2b:5f:41:8d:48:5b:35:e8:fb:
26:81:d8:f2:fe:c7:c5:53:86:ee:7a:0b:6c:29:e0:
dc:6a:86:88:53:af:d8:44:66:a6:cd:90:64:97:91:
78:3a:39:c3:22:95:09:e4:6f:9a:4e:49:76:a1:ca:
ae:66:a1:b7:5e:83:2f:69:17:a7:14:58:e7:73:88:
22:c7:46:60:fa:2f:8e:c0:21:cf:2b:73:6a:d4:eb:
7f:e2:1b:a8:ef:b3:95:ff:1d:f4:1f:76:9c:25:97:
bb:60:cb:ab:70:08:23:24:4e:81:f6:03:8a:87:51:
54:cd:3d:90:a5:5b:37:f6:88:d7:27:0a:43:8b:e9:
c2:ab:c5:27:87:4c:0a:14:69:62:2d:2f:57:18:fd:
cb:b5:18:19:7a:81:94:8d:3e:b3:d6:2f:5b:11:c9:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1F:CB:6E:7A:99:F8:4B:1A:E9:E8:C7:C2:1A:9D:EE:43:1F:90:94
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/3B_LbnqZ-Esa6ejHwhqd7kMfkJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.56.0/24
Signature Algorithm: sha256WithRSAEncryption
18:72:65:ec:ff:b9:08:06:0f:17:36:2f:7a:30:72:bb:98:cc:
55:67:0d:97:71:bb:f6:1a:e0:58:73:59:63:bb:c3:82:91:20:
d5:af:8a:51:b6:c2:a9:5a:4f:2c:34:28:88:49:17:df:07:51:
d6:13:6f:4e:46:d8:0e:ed:55:54:3f:6c:bc:6b:d6:89:63:25:
08:e4:bf:46:25:b3:74:f7:86:ed:82:9a:fa:fc:b2:47:33:ed:
c0:29:fe:2b:ed:7c:57:00:a9:4e:27:a7:93:a4:51:91:d9:76:
3e:a7:8f:96:44:f8:4a:5f:af:38:b4:03:fa:da:22:dd:9e:8a:
df:8e:a5:2f:e3:df:ae:7d:21:f5:2d:f0:d0:05:bd:a6:fa:3e:
49:a2:59:54:2d:ee:0a:f1:2b:cf:c5:1b:d3:e4:11:21:b4:23:
f7:8e:b1:7a:40:d0:bf:fe:a9:29:f4:a9:b7:29:2d:49:6b:a5:
91:89:4c:74:25:27:5c:c5:d2:55:cd:66:fa:27:75:61:19:8a:
08:0e:50:80:30:7e:01:50:b6:5e:1b:92:00:71:7d:a0:f3:80:
d5:fe:ae:6e:64:6d:bd:ff:71:a1:90:38:f0:03:a9:c9:0d:cc:
a5:9b:1f:7b:08:dc:9e:26:d9:db:83:c5:bf:90:cd:4b:2e:bf:
eb:b8:1b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:19 2024 by rpki-client on console-ams.rpki-client.org