Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/T3WhAkmID9Zd6flxeVGMH__9KM0.roa
File: T3WhAkmID9Zd6flxeVGMH__9KM0.roa (raw, json)
Hash identifier: Pglc9PeE/zgZGRKeAjE3Th/01AI/vJJvJq2mwF8KrEk=
Subject key identifier: 4F:75:A1:02:49:88:0F:D6:5D:E9:F9:71:79:51:8C:1F:FF:FD:28:CD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D0CEB906B3515979513FA904DC0E1B85F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/T3WhAkmID9Zd6flxeVGMH__9KM0.roa
Signing time: Mon 15 Jan 2024 11:39:40 +0000
ROA not before: Mon 15 Jan 2024 11:39:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 89.213.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:eb:90:6b:35:15:97:95:13:fa:90:4d:c0:e1:b8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 15 11:39:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f75a10249880fd65de9f97179518c1ffffd28cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:07:6c:2d:26:a0:63:43:56:82:a8:f6:47:
b5:c2:0b:6f:8f:0b:ca:f7:bd:53:36:ea:42:d8:ed:
a2:be:c8:fe:05:27:ac:16:d4:e5:2b:c3:ac:1f:09:
7d:48:77:13:e8:21:74:fc:a2:22:0a:12:8d:4d:7e:
39:33:ed:8f:ba:85:f6:9f:21:a8:6f:47:be:78:a4:
3b:6c:88:d8:e0:45:57:38:8a:a8:44:f6:a0:0c:29:
c1:f2:ba:04:d5:93:b5:ef:27:75:b1:da:11:da:31:
56:6b:1a:4c:a4:88:dd:9c:d6:f6:bc:cd:de:c9:c6:
3b:f4:bf:57:18:6c:e5:43:15:af:4f:be:6d:8a:ec:
7d:1b:1b:bb:9e:71:83:e0:a9:a6:12:4a:04:cd:3c:
aa:c4:72:c0:e8:3e:97:3e:09:b6:88:14:71:59:b4:
3f:01:1b:53:72:e4:1b:91:67:a4:2a:7d:d1:18:32:
82:3a:27:81:f4:13:5b:67:6f:23:7e:eb:a5:0b:e9:
26:1b:a8:38:d5:ac:aa:02:1f:b3:63:61:c8:b0:01:
7b:11:4b:3e:83:f7:ac:66:8a:8b:36:4d:8f:f8:10:
8c:c5:5e:91:8e:92:e2:d6:ba:42:b0:ea:a3:56:da:
b5:86:35:c1:3b:e9:e6:94:d2:9e:a7:40:7a:18:eb:
86:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:75:A1:02:49:88:0F:D6:5D:E9:F9:71:79:51:8C:1F:FF:FD:28:CD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/T3WhAkmID9Zd6flxeVGMH__9KM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.155.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:05:c5:bc:c6:cb:b8:d0:83:63:4c:eb:67:ad:53:35:c6:29:
0c:2c:a5:7e:a0:14:f5:0f:88:6f:c5:57:b3:2b:7f:b9:4d:53:
95:79:05:76:a5:be:c5:f8:27:24:ee:fd:ab:b4:9d:19:ce:ab:
52:ee:10:f9:65:02:34:18:98:e6:9e:17:cb:2e:b7:ff:a6:80:
a8:0e:e3:34:7c:3a:81:c9:25:0d:77:8d:29:3e:cf:3f:c7:23:
17:92:bc:88:80:55:cc:6d:9d:dc:62:23:e3:8f:6c:37:65:9c:
a5:8e:86:d5:f6:69:4c:6c:de:65:50:98:1f:39:71:6b:fc:9e:
6c:63:23:00:ad:58:7c:08:42:65:d5:a7:ac:4f:ea:84:73:aa:
05:9c:6f:8f:80:97:39:8b:42:29:e5:e8:ee:9b:02:68:da:45:
e5:04:5a:a0:b5:3d:81:e1:11:e9:4d:48:34:8f:95:b3:e2:8b:
b4:1c:a7:2b:ec:85:f8:10:78:5c:9a:14:0e:f6:ca:49:c7:d6:
8b:27:f9:26:6d:fb:72:f3:af:8b:4d:19:05:b2:bc:7e:90:c4:
cf:93:f6:d9:15:28:e9:a0:ca:fa:f1:94:98:8e:8d:d3:5b:68:
76:b8:70:d9:7e:10:de:4e:63:55:ac:88:0c:b8:29:f3:2e:b7:
ce:bc:c5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:17:54 2024 by rpki-client on console-ams.rpki-client.org