Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DP5287odDnNX1H6vRXjgowDNZtc.roa
File: DP5287odDnNX1H6vRXjgowDNZtc.roa (raw, json)
Hash identifier: ZGMFnJNyLClAjwQFzv2eU0qWkUmP+SyfnxcXALAI82s=
Subject key identifier: 0C:FE:76:F3:BA:1D:0E:73:57:D4:7E:AF:45:78:E0:A3:00:CD:66:D7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC3495F618FA7B8B5EFEDE13CEADDDDB3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DP5287odDnNX1H6vRXjgowDNZtc.roa
Signing time: Mon 01 Jan 2024 04:30:14 +0000
ROA not before: Mon 01 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209861
IP address blocks: 89.213.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5f:61:8f:a7:b8:b5:ef:ed:e1:3c:ea:dd:dd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cfe76f3ba1d0e7357d47eaf4578e0a300cd66d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:54:68:e8:5d:5b:d8:bd:1b:c8:18:be:9b:18:
de:43:c6:0b:03:4f:5b:df:bb:82:7b:07:4a:24:20:
8b:08:bc:50:ba:6a:4a:5b:79:50:c6:a4:1b:f4:96:
ee:fc:ab:66:37:c6:9c:51:82:fd:b3:ac:c6:4e:73:
d8:45:31:44:20:ae:b0:e5:6f:c8:2d:9b:31:ca:0f:
a4:45:53:14:ad:10:b9:ab:2b:ff:d8:b7:b0:09:db:
9c:dd:22:c4:6e:d7:a9:5d:3c:ae:74:6e:63:df:0c:
ff:09:5b:ae:06:c0:3e:d1:2c:ba:1e:5a:39:ec:fc:
65:c9:28:9f:86:44:bd:05:66:21:78:71:5f:e9:de:
c4:56:6b:ac:69:06:fd:55:3f:4e:94:90:8d:d4:22:
5d:76:84:a8:7f:6f:4c:95:dd:9c:f7:3c:fe:3a:70:
d3:e2:73:70:80:88:6d:48:fa:e1:b0:50:4e:32:86:
10:f5:ad:8a:4f:8c:b8:65:77:b1:e1:bf:4c:e1:3e:
42:d4:7e:f0:be:51:49:02:28:94:64:24:98:02:ed:
6b:a1:32:58:c9:11:06:ac:a0:19:d1:17:99:f3:3c:
23:fd:0d:27:03:0e:3a:ad:f5:cd:04:cc:43:65:08:
a4:1a:45:56:12:80:3a:50:ce:70:a6:9b:e8:51:bc:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FE:76:F3:BA:1D:0E:73:57:D4:7E:AF:45:78:E0:A3:00:CD:66:D7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DP5287odDnNX1H6vRXjgowDNZtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.148.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:47:20:64:8a:0b:99:6e:93:65:58:fe:41:15:25:f9:86:5d:
1b:65:ee:a6:14:e2:a9:34:c1:28:a8:88:61:ef:22:fd:e4:5d:
21:d3:3b:7c:ab:a4:68:b5:bf:c4:8a:b7:55:40:43:fc:aa:8c:
65:84:92:4e:09:95:05:53:a0:ab:17:80:cd:85:09:13:4a:b0:
da:18:43:76:c3:3b:8e:21:71:0f:44:41:f4:9a:2e:dc:64:bf:
aa:1b:61:c1:a9:63:9c:ab:a4:8d:20:a3:be:08:d8:3c:48:86:
01:d5:96:27:78:10:04:98:64:37:af:09:6f:31:d5:02:26:b4:
8f:d3:d5:59:35:7a:66:98:2a:4b:83:ba:dd:9c:cd:d8:60:a5:
45:5f:14:76:d4:b3:ec:2e:66:3e:90:a8:33:f3:2f:97:95:46:
25:c7:d0:3a:8b:a9:0e:b7:35:43:df:34:38:ad:1d:d7:dd:e8:
8f:c8:64:37:97:16:8f:34:7f:64:cc:77:12:69:b3:83:89:f6:
d7:a1:20:dc:36:cb:78:42:02:2c:59:fc:0a:cd:be:a1:06:c8:
48:f7:d7:1c:ad:0e:67:71:12:08:99:f2:28:1f:b3:c6:92:78:
0d:27:be:f8:64:58:f4:57:14:9f:cb:1f:ba:5d:60:19:cc:08:
c3:8b:cf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:32 2024 by rpki-client on console-fra.rpki-client.org