Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DQ6B0h6HLxbTVJqqRMeEGaLbOkY.roa
File: DQ6B0h6HLxbTVJqqRMeEGaLbOkY.roa (raw, json)
Hash identifier: 7Kd9mnc7/x2cI4EDLPpLBkFkb9PhByGyt/TPL2CXJ44=
Subject key identifier: 0D:0E:81:D2:1E:87:2F:16:D3:54:9A:AA:44:C7:84:19:A2:DB:3A:46
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01906B00963EF5674AEECB729D705609C812
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DQ6B0h6HLxbTVJqqRMeEGaLbOkY.roa
Signing time: Sun 30 Jun 2024 21:15:18 +0000
ROA not before: Sun 30 Jun 2024 21:15:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 89.213.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6b:00:96:3e:f5:67:4a:ee:cb:72:9d:70:56:09:c8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 30 21:15:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d0e81d21e872f16d3549aaa44c78419a2db3a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8e:0c:6a:96:bd:c7:8c:1a:9f:33:43:aa:29:
04:00:56:6b:37:2e:2b:7f:0c:20:fe:45:26:29:01:
c3:e5:3c:3f:59:0c:e1:02:2f:2c:1a:d3:6d:ca:93:
5c:77:ef:d6:10:ad:f5:b7:9b:25:b0:e9:12:f0:04:
4d:fb:d2:7e:8e:28:cc:2c:14:ad:cd:1f:e2:e6:88:
cb:da:3c:89:3b:4a:d8:b7:ea:ed:98:bb:a4:e1:33:
fb:42:af:c7:e8:3b:84:7a:aa:6f:4e:5d:27:44:fb:
b1:87:bb:12:41:87:06:5a:b0:18:66:4a:91:e1:91:
e3:d4:2f:95:2e:ba:89:30:0e:42:e3:12:a5:7e:f6:
2d:0c:3b:4c:04:e6:e6:70:1e:c3:b8:80:6d:90:70:
a0:6c:2c:44:97:c5:ce:43:5e:89:05:ff:e0:bb:67:
55:ec:22:9e:3c:2f:fd:98:d4:f7:11:2f:e6:9b:c6:
d8:07:0d:a1:8f:27:a1:da:23:61:49:26:0d:63:b3:
5e:69:62:36:47:16:a7:74:ae:3d:fb:3c:e2:81:ab:
51:a6:06:8c:2f:cf:f5:99:97:e4:4a:a3:2b:37:a7:
db:27:19:d7:e9:63:d8:92:5e:a2:3e:73:b5:3e:c8:
03:a1:92:1c:df:69:76:55:b5:7d:64:04:dc:c4:8a:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0E:81:D2:1E:87:2F:16:D3:54:9A:AA:44:C7:84:19:A2:DB:3A:46
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DQ6B0h6HLxbTVJqqRMeEGaLbOkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.52.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:b2:66:44:57:a4:cc:cd:08:eb:75:9e:d8:60:8e:39:26:fc:
b4:f7:aa:75:4d:c8:23:a3:e2:37:58:8f:68:ee:09:7f:b2:ce:
58:07:4c:28:c4:85:2d:78:fb:7e:9c:60:ef:10:c2:e6:ba:04:
24:2a:eb:7f:b9:98:d8:99:b6:ab:cc:66:e5:2b:5a:20:78:f8:
ae:8f:82:d1:57:be:de:a9:01:18:8e:81:2d:a8:f2:0d:55:f9:
94:2a:23:2d:e5:85:17:32:d5:e1:8b:c2:bd:35:07:72:0d:31:
40:6f:68:7a:18:9d:22:9f:03:ef:ef:f0:9c:5c:cb:6a:d8:74:
14:53:8a:8c:85:fa:a3:bb:8b:40:61:45:7a:c4:36:c4:bc:67:
e2:8a:6e:bc:37:cc:22:a3:e7:a3:bb:fc:57:26:41:e7:f8:27:
24:5b:78:ff:0e:be:2f:d2:ef:72:a0:de:c5:3f:5b:63:71:82:
fc:73:0b:fa:f8:c9:d7:c5:c7:19:83:0c:c1:90:f8:45:9d:bf:
f8:ea:be:c4:86:2e:12:8f:f9:f9:18:ff:46:d8:ae:ca:1f:a8:
67:42:16:47:44:c3:19:d9:9e:20:ed:b2:dd:5d:33:b6:42:3f:
bd:02:1c:3f:3f:bc:e1:68:e3:15:99:70:2b:3b:79:6c:7d:b9:
d7:e7:3b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:07:16 2024 by rpki-client on console-ams.rpki-client.org