Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7imW6ewefVol_IkWYagjWKXQ-N0.roa
File: 7imW6ewefVol_IkWYagjWKXQ-N0.roa (raw, json)
Hash identifier: Y5JHADw55qHjZ/xShZfxAMsiP/G9nn8CE/yCizmcRtw=
Subject key identifier: EE:29:96:E9:EC:1E:7D:5A:25:FC:89:16:61:A8:23:58:A5:D0:F8:DD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190FA7C3F92A5FCC1E0A5E30F88B3E95DF4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7imW6ewefVol_IkWYagjWKXQ-N0.roa
Signing time: Sun 28 Jul 2024 17:56:05 +0000
ROA not before: Sun 28 Jul 2024 17:56:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197537
IP address blocks: 89.213.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fa:7c:3f:92:a5:fc:c1:e0:a5:e3:0f:88:b3:e9:5d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 28 17:56:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee2996e9ec1e7d5a25fc891661a82358a5d0f8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:ba:c7:90:b3:d1:9e:d8:be:14:cb:bd:ec:
29:bb:92:4c:93:ab:5d:fb:e4:2a:df:56:ae:eb:65:
6e:f0:af:f7:f7:a0:a9:59:90:70:26:3f:f6:fa:1e:
40:4c:9c:10:fd:b3:d2:50:0f:8f:75:eb:e1:d6:79:
4c:65:39:55:6a:3a:56:c0:40:92:42:38:5e:d8:67:
b5:d9:01:fd:44:e8:5a:20:23:50:7b:14:b6:62:a1:
89:6a:c6:ea:07:3d:6e:c0:07:1d:a9:b6:dc:a0:e1:
c7:3d:fa:5c:af:86:ae:f0:1d:8e:7d:f6:50:fa:1e:
dc:f1:43:39:06:93:e5:b4:f7:8a:36:b4:f0:96:59:
6b:56:22:6e:32:0b:c2:5e:9d:80:e9:8d:c3:35:a5:
75:30:cd:ab:09:ce:3e:49:4b:dc:eb:a9:ed:5f:7b:
63:03:02:34:0c:68:74:83:4f:2b:89:17:c9:47:0e:
eb:7f:ac:20:90:10:e5:a5:cc:fe:c6:01:82:93:83:
43:f4:24:50:c1:c8:3d:23:fc:7e:dc:23:da:b1:f7:
2a:6d:7f:23:73:70:15:78:6c:34:71:6d:41:11:71:
2e:20:ae:39:ed:fb:25:34:62:6c:db:95:8d:38:99:
69:f5:a7:28:ee:8b:c7:a7:2b:33:ab:03:61:8f:0c:
b3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:29:96:E9:EC:1E:7D:5A:25:FC:89:16:61:A8:23:58:A5:D0:F8:DD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7imW6ewefVol_IkWYagjWKXQ-N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.206.0/23
Signature Algorithm: sha256WithRSAEncryption
77:e3:97:58:4b:70:27:b4:f8:1b:1a:56:cc:fd:44:dd:3e:64:
90:56:1d:4e:32:df:f1:b7:f0:37:5b:87:c1:40:a2:a4:03:55:
cc:e9:45:8c:1a:c6:78:7d:d9:c7:16:3e:3f:85:55:30:e9:f1:
ed:e2:11:00:32:b0:af:15:64:fe:33:b8:21:89:9a:ab:d1:e4:
83:1d:a1:9b:2e:cd:3c:cc:86:ca:3c:c0:06:a2:f2:83:86:9a:
5b:f7:88:49:c0:b3:53:7f:43:fd:04:88:cc:58:5e:28:f9:fd:
c8:cf:83:49:d3:2c:31:a8:f4:08:e6:f3:52:aa:8b:b4:0d:f7:
e1:e1:5b:e6:64:55:f1:b4:87:91:8a:a7:56:96:b2:3b:0c:7f:
7d:ce:cd:1f:12:02:0c:41:0d:2c:28:cb:e0:75:55:08:75:7a:
2e:69:2b:a2:bf:b6:d1:17:b9:18:5b:f0:27:6f:df:e0:e0:05:
8d:28:b5:00:34:a2:3f:e0:d3:7f:2b:51:89:ba:1b:40:57:17:
ea:13:ce:55:e8:f6:1d:4d:fe:25:98:c6:2b:4c:ff:7d:4f:a3:
f2:7f:e5:45:23:a6:01:4c:c7:83:d1:7c:9d:40:c6:c5:bb:72:
ee:ec:ae:a3:00:96:bb:cd:22:a5:ad:88:23:e9:bc:6d:28:54:
a0:f4:8f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:15 2024 by rpki-client on console-fra.rpki-client.org