Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KMCiRNBTH9L_aAnonPWs8_fkWBA.roa
File: KMCiRNBTH9L_aAnonPWs8_fkWBA.roa (raw, json)
Hash identifier: 5Q86k2bA000rvIVeX/EFcQ9lOaREi4pSDKzpH4fxVm0=
Subject key identifier: 28:C0:A2:44:D0:53:1F:D2:FF:68:09:E8:9C:F5:AC:F3:F7:E4:58:10
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E74D8224D0BB9DA905ECA4A335D2F7CEE
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KMCiRNBTH9L_aAnonPWs8_fkWBA.roa
Signing time: Mon 25 Mar 2024 09:01:45 +0000
ROA not before: Mon 25 Mar 2024 09:01:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29066
IP address blocks: 89.213.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:d8:22:4d:0b:b9:da:90:5e:ca:4a:33:5d:2f:7c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 25 09:01:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28c0a244d0531fd2ff6809e89cf5acf3f7e45810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:ef:38:85:f4:30:ac:d7:87:da:df:d8:d9:
51:2d:40:98:fe:a0:73:a1:7a:b7:1c:d8:c6:bd:ce:
51:d5:9f:4f:b3:87:42:a4:55:6c:74:71:fb:9b:99:
42:24:15:e9:35:4a:ec:85:63:06:92:fa:7b:66:3a:
fc:98:f5:17:3e:c2:9a:8d:a2:75:fd:af:64:ee:f8:
9c:4f:7e:80:05:52:8c:44:92:de:19:2b:6b:82:d5:
33:1b:da:4a:ef:fd:8f:43:61:39:75:b8:aa:9b:cc:
eb:4c:16:21:96:8f:5b:97:58:4c:53:aa:c0:74:c8:
ec:49:a4:ed:b4:67:7a:30:86:31:fe:2f:19:3b:f9:
42:e4:8b:05:4e:40:6e:c3:43:5e:c9:cc:59:e8:e3:
f4:79:55:52:19:d2:f3:05:77:5b:d6:4b:12:f5:8f:
b2:f5:1e:27:35:4d:fd:5c:68:72:d3:53:97:91:fb:
bc:e0:02:a7:9e:20:fa:ff:43:cd:3e:22:5c:b7:ec:
ec:3f:35:b0:c6:ed:bb:9b:62:ce:67:5e:3b:6c:00:
fd:0b:17:4a:fb:55:fd:3a:51:ee:d5:08:00:98:5d:
56:34:d5:15:32:e7:1c:06:df:76:45:85:5b:c4:cd:
68:d8:60:26:4d:f0:82:76:3c:f2:f4:1c:bc:92:0f:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C0:A2:44:D0:53:1F:D2:FF:68:09:E8:9C:F5:AC:F3:F7:E4:58:10
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KMCiRNBTH9L_aAnonPWs8_fkWBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.118.0/23
Signature Algorithm: sha256WithRSAEncryption
87:a3:32:04:1b:51:a2:dc:67:36:85:51:21:8a:7f:1e:09:5f:
22:30:0a:ca:a5:8c:49:58:be:e2:da:55:ef:98:97:a9:b1:b5:
32:a8:a9:22:97:09:e6:ea:6f:71:32:b6:21:2b:e4:b7:35:06:
f8:6b:ca:c7:2b:a7:24:25:2e:43:67:b8:b5:1b:59:86:ec:2a:
20:ea:52:25:56:cf:c2:76:64:ac:9b:6a:38:a4:ea:05:bd:e7:
94:c3:4f:04:a4:a6:e3:f7:cf:e1:b4:a7:20:2d:5b:a1:f3:a9:
c3:61:87:dc:a3:fa:de:82:2f:79:e0:41:de:01:60:23:09:67:
b5:44:9b:18:76:c5:f9:74:b4:4e:57:72:95:3a:00:fe:f1:f1:
23:ae:0b:99:d8:45:2f:f8:18:dc:5f:ff:a6:16:0b:51:07:46:
a4:26:14:ab:6d:b6:ec:bc:bc:87:81:57:b8:dd:03:2e:f0:ee:
7c:41:52:8a:37:9e:44:d6:57:0f:b8:6d:10:83:41:2b:c3:d3:
55:d4:bd:e1:9c:73:d8:77:37:15:88:fe:f3:ec:df:f9:86:70:
d3:84:aa:11:64:1e:a3:07:21:73:53:23:cd:34:9a:cf:16:61:
e4:20:2c:db:64:76:8b:94:ce:ec:90:fb:07:69:5a:e7:f4:4f:
27:09:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:09:54 2024 by rpki-client on console-fra.rpki-client.org