Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LNISsMnZmNZ5LFoTIhSg6eiQcZ0.roa
File: LNISsMnZmNZ5LFoTIhSg6eiQcZ0.roa (raw, json)
Hash identifier: bqJ3yFX/dcYzcClz/8DxOYqD7wyorrpRYIYxRvEaalY=
Subject key identifier: 2C:D2:12:B0:C9:D9:98:D6:79:2C:5A:13:22:14:A0:E9:E8:90:71:9D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F43B3FFCCF579786F76FA2396C04B9ADE
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LNISsMnZmNZ5LFoTIhSg6eiQcZ0.roa
Signing time: Sat 04 May 2024 13:03:40 +0000
ROA not before: Sat 04 May 2024 13:03:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63150
IP address blocks: 89.213.150.0/24 maxlen: 24
194.105.83.0/24 maxlen: 24
194.105.89.0/24 maxlen: 24
213.218.228.0/24 maxlen: 24
213.218.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:43:b3:ff:cc:f5:79:78:6f:76:fa:23:96:c0:4b:9a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 4 13:03:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cd212b0c9d998d6792c5a132214a0e9e890719d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:5c:f6:13:59:28:df:6b:bf:c9:85:f2:b5:
9b:6f:f3:4d:45:15:bb:e4:51:bc:ad:77:96:e1:34:
20:bc:e2:8a:d4:b6:9b:5d:92:c2:71:ea:19:d3:a2:
aa:3c:58:7f:95:81:a7:61:01:cf:10:c0:eb:8c:97:
4f:be:fe:7c:34:c8:ea:3c:e6:63:ef:ce:8b:49:c9:
97:9c:9a:54:08:e4:cb:93:07:53:30:f7:d5:e3:f8:
e8:3a:e0:52:9a:90:53:3b:03:2f:89:92:d5:8b:ba:
83:36:b4:8c:aa:98:82:01:02:3e:97:a0:71:21:5b:
3c:ff:fc:ea:06:3e:ca:f8:88:e5:fe:ca:c6:a4:64:
a5:33:72:8f:e8:7f:da:7c:44:3e:43:11:62:54:39:
20:bd:e8:8f:54:41:4b:03:00:f1:4e:63:29:59:98:
d0:2d:bc:b2:65:5d:99:14:f6:aa:4c:90:d9:f3:7b:
ae:9b:e8:23:9a:cf:52:1b:a3:88:d5:a8:97:9d:f3:
cf:67:f7:bd:9c:14:24:7d:92:04:3b:ec:a3:5a:d3:
17:ce:ee:9c:7d:56:72:de:b7:01:37:bf:5b:ee:7c:
85:7f:76:21:84:c8:50:62:40:46:b9:99:2a:42:94:
fd:25:66:0d:01:5a:01:a2:af:27:e1:44:23:d3:ec:
2c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D2:12:B0:C9:D9:98:D6:79:2C:5A:13:22:14:A0:E9:E8:90:71:9D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LNISsMnZmNZ5LFoTIhSg6eiQcZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.150.0/24
194.105.83.0/24
194.105.89.0/24
213.218.228.0/24
213.218.255.0/24
Signature Algorithm: sha256WithRSAEncryption
93:bf:00:17:e3:e7:b3:6c:aa:8e:85:96:02:3c:5d:13:e2:75:
01:a9:f3:51:1b:e9:fe:4c:81:ad:07:c8:fc:fd:82:78:46:7a:
49:48:07:4c:e5:72:93:8a:0c:18:ef:e1:f9:6a:4c:ee:5b:47:
1c:18:a1:08:09:c7:6c:ba:91:36:fd:4f:4f:d1:9c:68:fa:53:
b6:64:79:d1:b5:b6:1e:28:53:66:d2:04:ac:ea:23:b9:26:86:
8b:47:2b:7f:17:3c:4e:47:42:d3:8f:b0:d3:8a:9e:5e:c0:9a:
bf:a2:95:56:86:74:3d:3f:91:6a:97:90:18:1d:0e:0d:90:0b:
d9:84:d7:39:e9:00:1d:1a:12:2a:d3:79:52:31:38:9e:40:02:
d9:f8:0c:9a:a5:10:64:b5:28:e1:73:69:86:bc:90:e2:e5:94:
3d:49:63:99:5c:80:4b:ee:ba:44:ca:2b:c0:c0:02:fa:bf:b8:
51:79:3f:dd:29:05:11:50:64:71:af:6e:d1:a4:8b:32:d4:19:
ce:d0:71:77:b9:bf:b1:3c:02:7a:35:df:14:c8:be:e6:2e:3a:
c7:1e:31:b7:32:dc:1d:d9:a2:bd:f4:46:5d:fa:a5:66:b1:e5:
e8:b4:fa:a8:e4:06:37:00:2e:15:82:91:03:99:10:c9:4a:64:
fb:2e:5b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 20:01:15 2024 by rpki-client on console-ams.rpki-client.org