Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OZZuJeG6X0HaeGjs_y0sooYLBUY.roa
File: OZZuJeG6X0HaeGjs_y0sooYLBUY.roa (raw, json)
Hash identifier: i9KzTAp8vAXzzXlZMZOcTQGSPagjByFDh2sHHRVdbCI=
Subject key identifier: 39:96:6E:25:E1:BA:5F:41:DA:78:68:EC:FF:2D:2C:A2:86:0B:05:46
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01906B026A2C5F75728B938C55ECFF472DFF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OZZuJeG6X0HaeGjs_y0sooYLBUY.roa
Signing time: Sun 30 Jun 2024 21:17:18 +0000
ROA not before: Sun 30 Jun 2024 21:17:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43391
IP address blocks: 89.213.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6b:02:6a:2c:5f:75:72:8b:93:8c:55:ec:ff:47:2d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 30 21:17:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39966e25e1ba5f41da7868ecff2d2ca2860b0546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d2:1a:ec:35:db:88:8f:fc:c9:79:c1:bb:82:
5e:14:9b:ee:35:0a:32:90:da:8e:ec:86:90:6f:e1:
44:10:2c:47:8d:40:b6:35:28:e6:88:39:46:6e:ac:
bf:31:1c:70:a4:a4:c0:d5:9c:75:37:bd:1e:48:ff:
eb:58:12:fa:ae:79:e8:d5:6a:2f:f5:ee:20:8e:f5:
e0:db:2f:9c:05:cb:65:4e:a1:9e:0a:fc:72:84:9c:
8b:22:f2:5e:7d:b0:4a:ca:32:83:3b:cf:30:28:ec:
71:20:71:52:79:cb:ad:5c:f2:cb:8f:9c:85:a5:8a:
d5:6a:a5:ea:3b:35:b3:35:27:92:79:bb:3e:bf:87:
ba:7c:e1:9a:67:ea:aa:73:37:67:f8:39:83:a1:91:
cb:9c:9b:0d:84:2d:fe:18:9f:0a:bd:c7:21:58:0e:
63:c7:e8:83:af:14:50:4a:7a:4b:00:29:90:a3:0a:
24:f2:a6:7d:80:32:3f:1b:5f:a8:4d:5a:d8:c5:21:
cf:80:ec:4c:0b:93:2a:55:ae:f2:90:e6:0d:fa:54:
1b:92:23:6b:01:08:dc:c7:e2:5b:4b:e1:f3:ab:95:
fe:51:ac:9b:07:d8:18:90:38:8f:52:53:f3:95:47:
9a:58:fc:36:c4:62:9b:9e:6c:00:33:41:36:d0:b2:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:96:6E:25:E1:BA:5F:41:DA:78:68:EC:FF:2D:2C:A2:86:0B:05:46
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OZZuJeG6X0HaeGjs_y0sooYLBUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.59.0/24
Signature Algorithm: sha256WithRSAEncryption
47:fb:07:8a:35:82:b2:16:52:a1:c2:26:73:89:53:ac:aa:2b:
54:0c:a5:17:f6:d1:01:22:d5:27:c5:eb:6a:77:54:4b:a9:6d:
ee:32:08:bc:30:09:65:cb:e1:ba:3d:52:01:62:f8:ef:1d:5d:
69:48:aa:ef:59:1c:0b:c9:71:00:8a:98:fd:48:33:af:02:da:
d6:d7:54:05:bf:49:8d:f1:3e:db:6a:8e:46:7c:37:d0:e2:34:
01:40:5f:29:c0:0b:6f:80:f1:f7:a3:c2:2d:2d:e2:4b:e8:d5:
12:a1:68:39:16:12:8c:64:24:54:fd:a5:79:a8:18:f6:a1:d4:
3f:e1:95:76:4e:07:a2:28:18:01:a5:74:e6:6f:1a:c1:da:ae:
5e:66:b8:ec:b4:7b:69:bc:14:da:be:90:c0:5f:a4:2c:05:95:
a1:00:b0:1a:b5:4a:8d:64:1f:00:0c:a1:35:a0:1c:19:e9:8f:
2a:89:ad:c6:bd:bf:b5:67:d0:29:72:97:7f:cf:05:06:9e:d0:
32:a8:94:56:1f:4a:e6:25:41:b9:d6:fb:6b:6a:0d:07:55:8b:
fe:e3:77:ba:1d:00:38:7a:07:55:29:ab:0e:35:db:9d:ac:84:
dd:94:32:a5:f3:57:32:e7:d3:cd:28:08:3b:77:b6:52:01:d6:
3d:06:9d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:20 2024 by rpki-client on console-ams.rpki-client.org