Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HE0Bp2JI0CIN774u1K_pZu8HSqE.roa
File: HE0Bp2JI0CIN774u1K_pZu8HSqE.roa (raw, json)
Hash identifier: Mz/y8aO1lOhy2kWpFDuQrT4J5/3AARHNaF6eU4+yBW8=
Subject key identifier: 1C:4D:01:A7:62:48:D0:22:0D:EF:BE:2E:D4:AF:E9:66:EF:07:4A:A1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC349675C529D115F352A3056917E4CC4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HE0Bp2JI0CIN774u1K_pZu8HSqE.roa
Signing time: Mon 01 Jan 2024 04:30:16 +0000
ROA not before: Mon 01 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 269862
IP address blocks: 89.213.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:67:5c:52:9d:11:5f:35:2a:30:56:91:7e:4c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c4d01a76248d0220defbe2ed4afe966ef074aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:74:8b:4a:21:f5:bc:cd:0c:fb:91:bf:c5:cd:
68:58:b2:83:e0:d6:44:d7:8c:3f:cf:2f:35:4c:8f:
ec:c2:86:8a:5f:cd:ce:f5:85:db:38:b2:bd:98:1f:
5b:c0:98:50:51:7f:72:c7:9d:5c:03:6b:0a:8c:9c:
8b:55:4b:c0:d5:81:64:66:63:64:5b:d6:aa:11:fa:
63:36:62:f3:c4:f0:61:e5:3a:32:b6:b5:04:38:27:
ed:bc:6b:7c:3b:e0:6f:3b:1c:4e:f8:30:60:6b:0b:
cd:2c:2f:ee:b4:99:bb:57:de:2d:df:6e:dc:88:06:
02:d7:2b:89:22:97:e4:c1:2d:b6:16:2a:dd:00:ac:
d3:de:01:07:2c:81:15:7c:41:51:fb:e9:60:5d:c3:
0c:ac:49:ab:4f:65:de:29:f2:f6:89:95:aa:76:25:
cb:f5:d9:dd:f0:15:c3:db:f5:8e:35:12:50:51:5e:
d0:c4:cd:35:2e:7e:3f:63:4b:04:17:b5:fd:54:05:
55:64:6b:1e:c9:02:76:0a:1e:5e:34:18:dc:2d:e0:
d0:b2:5f:cf:2d:ec:01:f1:79:ac:90:d1:e6:ff:59:
6e:27:af:9a:83:78:c4:c4:0f:77:2e:83:11:14:dd:
90:a3:2b:bc:4d:de:30:18:f3:70:0f:61:e5:8c:56:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4D:01:A7:62:48:D0:22:0D:EF:BE:2E:D4:AF:E9:66:EF:07:4A:A1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HE0Bp2JI0CIN774u1K_pZu8HSqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.167.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b1:a3:31:61:f0:1c:39:b5:ed:b0:b1:54:09:06:32:bf:e1:
d8:23:cf:26:ec:8a:1b:1b:56:58:e1:c6:0d:58:83:bc:e2:99:
23:11:07:47:4c:31:ba:66:c1:7c:fb:7f:fa:15:9c:41:95:ac:
0a:7a:fa:1a:28:f8:ff:e0:59:29:9c:9f:35:0b:57:67:ce:58:
54:43:45:74:bc:e1:c2:ad:fd:a2:e4:e5:5a:15:0a:32:a6:84:
35:56:8f:d1:fb:fa:4a:27:87:e7:4a:a7:29:2b:c4:f9:c3:3b:
fd:41:1b:68:57:5a:3c:18:20:dc:34:4b:de:4b:7f:40:81:ff:
90:2d:46:99:b7:46:b9:1f:28:1e:e4:8e:3a:50:a5:c7:6b:8a:
a8:85:91:95:3b:22:c5:cf:e9:50:0e:39:3a:39:e4:dc:de:35:
53:f4:e7:57:9e:1a:4c:cc:09:3f:31:17:12:92:9c:d8:1d:91:
11:99:0f:97:5f:17:93:92:c5:f8:a0:41:1e:84:2f:01:22:7d:
2c:49:8a:5c:e0:18:fc:44:b6:10:3c:58:e7:44:06:69:c3:6c:
ff:48:de:95:10:4c:c6:6e:cf:8d:fd:a9:1d:6b:05:3c:f9:19:
82:3f:0d:ff:bc:cf:00:77:6c:73:23:4e:63:cd:f7:35:d6:f8:
03:2b:4b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 19:43:03 2024 by rpki-client on console-fra.rpki-client.org