Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6uEcGM6T1VunAlShZe8Xu9WW7-A.roa
File: 6uEcGM6T1VunAlShZe8Xu9WW7-A.roa (raw, json)
Hash identifier: d5c7qG+KGBR9E9+A2tLwZzorYNxN5kWuKX3FWeUQdZo=
Subject key identifier: EA:E1:1C:18:CE:93:D5:5B:A7:02:54:A1:65:EF:17:BB:D5:96:EF:E0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F49F1D7CDAA5B7DA907F2B55937FC6C94
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6uEcGM6T1VunAlShZe8Xu9WW7-A.roa
Signing time: Sun 05 May 2024 18:08:57 +0000
ROA not before: Sun 05 May 2024 18:08:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51847
IP address blocks: 89.213.123.0/24 maxlen: 24
89.213.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:49:f1:d7:cd:aa:5b:7d:a9:07:f2:b5:59:37:fc:6c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 5 18:08:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eae11c18ce93d55ba70254a165ef17bbd596efe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:ba:61:b7:79:ad:42:1a:49:53:a3:36:5a:
1d:49:cb:d0:6d:da:ea:4e:d5:b1:26:36:54:24:c7:
ef:ee:d9:b0:6c:15:8c:97:72:a9:77:29:55:b0:74:
52:7e:92:22:bc:53:b8:d9:8d:f9:ef:f8:c9:c5:0c:
99:c1:32:36:10:a9:91:26:12:08:4a:83:b9:84:7d:
0a:30:09:98:20:5c:2a:dd:bf:d9:3f:d4:11:b6:63:
bb:b7:90:c1:fe:a1:28:48:a0:f3:58:11:9e:59:48:
86:f6:4e:4a:23:d3:a8:10:f4:8c:54:93:91:3a:5a:
ac:48:34:42:ff:00:ab:23:04:8c:5a:a4:61:dd:3f:
f4:7e:41:90:18:3a:99:e6:3c:62:07:33:1a:ea:6f:
ac:64:ca:4d:cb:b3:a8:5a:9d:83:13:81:07:78:e8:
4e:d5:4d:1f:37:83:57:db:99:f6:29:2f:2e:cc:77:
21:54:cc:03:c8:80:07:d0:be:81:50:b0:03:bd:23:
2d:76:24:4c:91:58:c0:2f:ce:95:a2:5f:ff:86:62:
3b:b8:02:5d:2f:fc:07:48:86:be:46:92:77:1e:7d:
92:fd:de:b8:b0:e2:c4:a0:88:1e:ff:54:6d:b0:52:
46:64:2a:19:ec:ed:55:01:48:d3:48:89:b7:d4:23:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E1:1C:18:CE:93:D5:5B:A7:02:54:A1:65:EF:17:BB:D5:96:EF:E0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6uEcGM6T1VunAlShZe8Xu9WW7-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.123.0/24
89.213.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:10:48:82:db:8d:83:d9:d4:42:3c:2a:86:6b:63:6f:fb:63:
e4:07:55:bf:b3:4e:d8:b8:fb:e8:6f:bd:ad:4c:68:c6:64:02:
f8:5f:fd:08:4b:cf:e4:ba:47:cd:3f:96:01:9d:2e:ad:e8:b7:
de:d8:02:1f:3c:b0:01:66:2a:0c:84:08:e1:dc:91:bc:89:46:
04:5b:60:32:7f:40:5c:4d:dd:8f:38:05:db:22:e2:4c:98:07:
1f:f0:95:0b:29:ee:f0:21:d4:0e:7b:0f:91:03:90:8a:0c:d2:
04:04:c9:90:1a:0d:9e:fe:94:50:d0:7a:21:04:88:c3:4c:5e:
39:5f:50:f1:f0:c0:dd:35:27:76:af:dc:d3:cd:34:7a:8e:bc:
3d:24:7a:68:d1:a6:9b:2c:c1:ba:90:52:dc:dc:ca:20:2f:51:
07:9e:a2:cc:7c:53:a3:d7:8c:ba:2a:25:c5:00:9f:e1:45:6a:
80:12:b8:b2:bc:d5:e1:68:23:95:fd:b7:23:ed:6d:36:e0:64:
b0:4c:7e:d5:7a:15:a4:e4:f8:77:01:42:7d:35:db:52:11:be:
34:c7:03:4c:e9:ac:4d:2e:30:e0:04:1b:f2:30:fb:5b:3a:43:
4d:28:f7:19:39:f9:af:a2:73:5a:29:91:32:b5:e7:5f:fd:ab:
5e:26:83:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 11:31:20 2024 by rpki-client on console-ams.rpki-client.org