Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DacsjETBawPFqWnDGR-hzwyUDAk.roa
File: DacsjETBawPFqWnDGR-hzwyUDAk.roa (raw, json)
Hash identifier: nxc+NZBzZlfuvu/M3bw0SDH1zOsyyLIt5NX9YkXi8q8=
Subject key identifier: 0D:A7:2C:8C:44:C1:6B:03:C5:A9:69:C3:19:1F:A1:CF:0C:94:0C:09
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FA456BAE299470421A945D22AA09A51AC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DacsjETBawPFqWnDGR-hzwyUDAk.roa
Signing time: Thu 23 May 2024 07:24:58 +0000
ROA not before: Thu 23 May 2024 07:24:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14445
IP address blocks: 89.213.238.0/24 maxlen: 24
185.49.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a4:56:ba:e2:99:47:04:21:a9:45:d2:2a:a0:9a:51:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 23 07:24:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0da72c8c44c16b03c5a969c3191fa1cf0c940c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:cf:e5:f7:4b:60:ec:b5:33:4e:98:70:22:
cd:0b:54:6d:af:27:37:fb:96:ce:2d:81:a6:cc:1d:
63:90:5b:58:1e:4a:ea:3e:99:e7:4b:63:a1:d1:5b:
9c:1d:3a:f3:8f:f9:fd:b9:00:0d:a2:54:f2:14:b8:
f6:23:c7:37:bf:c2:18:a3:85:af:77:8f:89:c7:ea:
47:76:fd:cb:55:de:33:34:cb:95:10:b4:3b:d8:dc:
12:0b:03:24:60:c8:ce:37:51:d2:25:ce:ef:a8:8c:
ae:93:43:5d:69:2c:ac:73:e0:95:16:56:9e:da:e9:
5f:9c:84:e7:2e:cc:bf:11:48:f5:88:f3:62:f5:c3:
09:40:3f:27:69:53:53:b4:11:52:d4:5c:a6:19:99:
ba:96:7d:a6:e5:c6:10:6c:68:09:6b:7b:51:d7:89:
de:88:61:08:af:59:aa:5c:d4:50:dc:58:dd:46:ad:
bf:fb:73:e6:c9:4a:e4:7e:59:2c:2f:24:40:02:14:
20:54:fc:1d:e6:98:82:ca:e2:8e:5c:9b:d6:78:d9:
d8:32:9f:22:d7:ad:08:e2:0a:2b:8d:bf:28:a5:2e:
04:58:8a:a9:cd:58:ef:2d:1c:d9:2a:0d:81:ba:31:
c5:cc:e7:7f:fc:ec:e6:05:62:b5:ac:9b:74:0e:c6:
9e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A7:2C:8C:44:C1:6B:03:C5:A9:69:C3:19:1F:A1:CF:0C:94:0C:09
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/DacsjETBawPFqWnDGR-hzwyUDAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.238.0/24
185.49.127.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:7a:7a:73:84:b1:aa:04:77:b6:0b:7c:01:eb:02:d9:b7:49:
a3:f9:f7:8e:0e:2e:6b:8d:21:64:82:7f:e1:02:53:19:c1:12:
ac:2a:f5:59:c7:f0:6f:4a:3b:1c:a6:1f:eb:f9:62:fd:bd:7e:
06:f6:f2:1a:58:14:22:0f:20:90:02:66:73:93:e7:66:18:42:
cd:b6:ab:8c:35:2b:4c:29:16:57:31:08:92:75:c3:98:0f:5e:
07:18:96:54:96:ad:95:99:e2:1b:bb:4c:ac:c7:59:cd:4d:04:
e2:84:0e:d6:b6:53:33:e4:cf:ba:e2:4a:0a:17:aa:c2:6a:b9:
35:6e:81:4c:53:53:c8:da:1f:c1:48:cb:99:89:75:e8:af:64:
55:1f:7a:10:56:1b:d8:25:b1:3e:6e:98:33:b4:d2:49:94:2a:
94:ec:50:af:21:ab:68:fe:86:5b:36:7b:07:dd:37:77:e6:88:
a1:d8:4e:19:20:8a:6f:93:f4:8a:f8:69:d4:77:1b:4c:92:7f:
34:22:b3:77:b0:91:fd:87:49:58:6e:f7:8c:63:8d:07:8f:34:
1c:04:e4:52:28:d1:5c:42:6f:89:08:20:31:f1:1b:f0:65:a7:
18:ef:e5:a6:96:13:79:67:72:88:01:e1:f8:68:f6:13:95:2b:
c5:c1:b1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 15:20:28 2024 by rpki-client on console-ams.rpki-client.org