Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AJu7_Dt7sEtTZKd2XaUrXS84lLE.roa
File: AJu7_Dt7sEtTZKd2XaUrXS84lLE.roa (raw, json)
Hash identifier: sC7GAZJqyY/dXRtE7gxHCWEadrP3/PHQGysMTRHemms=
Subject key identifier: 00:9B:BB:FC:3B:7B:B0:4B:53:64:A7:76:5D:A5:2B:5D:2F:38:94:B1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC349508CC4D6F1C7CBE381DACE6779AC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AJu7_Dt7sEtTZKd2XaUrXS84lLE.roa
Signing time: Mon 01 Jan 2024 04:30:10 +0000
ROA not before: Mon 01 Jan 2024 04:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32167
IP address blocks: 89.213.179.0/24 maxlen: 24
89.213.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:50:8c:c4:d6:f1:c7:cb:e3:81:da:ce:67:79:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=009bbbfc3b7bb04b5364a7765da52b5d2f3894b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7a:5f:31:9c:ed:95:30:93:b5:13:bb:1e:24:
4d:c8:7c:3a:55:4c:bb:65:08:a5:61:80:40:4a:56:
4b:80:9a:1f:e2:6e:6b:07:4c:24:14:62:8a:b2:ed:
69:d1:2c:38:87:76:b7:49:cd:e5:5d:31:25:38:2b:
d0:99:1d:f5:28:5e:f5:7c:c3:95:a6:c3:0c:d9:6b:
00:d9:38:6b:e7:65:fb:45:bf:a9:a1:71:b0:66:bf:
30:31:bd:ab:2a:ae:1c:6a:e7:bf:12:ee:f1:ff:e5:
2d:15:08:1b:b8:c1:8b:bd:f2:c8:2c:0b:1a:aa:87:
0d:ef:96:df:6f:ab:25:b7:99:4e:72:c9:cf:f8:f0:
26:cc:f1:be:42:b3:d9:ca:68:c0:e9:53:15:27:11:
d6:40:7d:88:b7:97:56:d0:b1:54:59:0f:b5:66:a2:
2d:53:2f:ac:44:a5:1b:4c:e0:51:a2:13:7f:82:a2:
59:bd:18:1b:9f:93:bb:20:c1:5c:ba:cb:63:d0:26:
57:0b:a8:50:1a:ec:db:ea:d8:f6:c2:de:ee:e1:9b:
f9:ac:9e:4a:18:7a:9f:ed:9d:4b:e4:7c:b9:4c:31:
44:48:50:aa:5e:5f:97:9f:43:1b:38:6c:17:c9:1f:
01:0f:70:eb:50:db:ab:e0:30:77:8d:af:98:73:3d:
23:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9B:BB:FC:3B:7B:B0:4B:53:64:A7:76:5D:A5:2B:5D:2F:38:94:B1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AJu7_Dt7sEtTZKd2XaUrXS84lLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.42.0/24
89.213.179.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:8d:8d:fb:61:b5:16:e3:33:78:e1:7a:f8:ad:11:ad:a2:d7:
57:f0:1f:14:35:83:f6:58:2c:a9:ec:02:13:19:97:f6:9e:b3:
5c:49:50:ca:8d:00:de:a6:2e:dd:ae:08:1e:2b:27:77:0d:da:
9e:19:be:da:ca:46:7a:84:b2:ab:95:f8:6e:15:16:9b:39:6b:
4a:6a:8f:12:aa:ae:c8:2a:88:91:54:ee:b7:25:8d:03:40:fc:
a3:a0:7f:df:b2:64:ee:a3:62:11:18:20:57:7d:5d:b2:a9:c2:
73:78:ee:3c:49:14:3d:32:17:0e:0a:4c:2f:5f:8b:d1:03:f5:
24:f2:d9:bb:1f:10:f7:02:30:ea:9c:9e:bc:8b:90:67:50:34:
11:4d:16:2d:77:c9:dd:9c:ec:89:7b:be:ff:b4:f5:f8:6f:b7:
8e:67:42:74:00:34:47:28:50:62:f7:b5:83:ee:49:c2:09:88:
cf:9e:f1:95:55:31:f7:65:05:f4:0e:f8:64:58:ff:1c:ab:82:
d1:56:ca:31:bc:bd:c8:db:65:96:70:05:67:e5:e7:ca:db:53:
2d:fe:2f:e3:5a:9a:7b:bf:e0:fa:05:8f:26:50:13:99:a2:7a:
f4:0e:e6:e4:6f:e5:36:fd:d6:c5:12:9d:44:2f:da:73:cf:55:
f0:17:6f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:00 2024 by rpki-client on console-fra.rpki-client.org