Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZyHRyAP69KLET61b9q6g11gR-3s.roa
File: ZyHRyAP69KLET61b9q6g11gR-3s.roa (raw, json)
Hash identifier: 3dShhK5ZDR3RVq/uCJ7nCPNHTNtKC0BpjZxRkWnjcb4=
Subject key identifier: 67:21:D1:C8:03:FA:F4:A2:C4:4F:AD:5B:F6:AE:A0:D7:58:11:FB:7B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018D3AE8CCA48ED93379B57EA88F567230E0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZyHRyAP69KLET61b9q6g11gR-3s.roa
Signing time: Wed 24 Jan 2024 09:59:11 +0000
ROA not before: Wed 24 Jan 2024 09:59:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 979
IP address blocks: 89.213.182.0/24 maxlen: 24
89.213.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3a:e8:cc:a4:8e:d9:33:79:b5:7e:a8:8f:56:72:30:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 24 09:59:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6721d1c803faf4a2c44fad5bf6aea0d75811fb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:60:2e:8f:0f:12:e1:99:5b:96:8d:79:62:bd:
78:1e:8a:37:1b:92:a6:a6:46:0e:87:0f:ef:ad:67:
de:e5:e0:ea:b8:d3:1e:18:40:ca:61:27:63:ff:6f:
c1:2a:17:7a:6e:fa:48:95:67:f2:47:fa:e4:4f:55:
74:80:9f:bb:b9:47:9c:d8:3c:5e:60:f9:83:b7:0b:
07:54:3f:3c:1d:c2:c6:89:90:82:01:74:ec:ce:26:
6f:93:06:c2:95:97:26:c1:d4:81:0e:71:d9:34:b1:
af:45:fa:3c:ec:26:c4:70:f9:99:72:fa:b6:87:96:
7f:85:0b:33:00:24:1c:14:da:26:f7:13:19:d2:32:
75:7a:00:f9:d7:1d:9a:21:bc:08:e2:94:dd:ac:c6:
b0:91:c2:48:1a:a1:3d:bd:32:a6:2d:cc:d4:a9:7e:
88:63:16:9d:04:25:f6:fc:6a:a8:73:d0:11:e4:89:
15:d6:59:6d:e0:5e:f8:f4:79:41:24:1e:ff:31:d1:
b4:25:f2:3d:f5:dc:df:b4:4f:4a:62:ed:cd:20:de:
0d:9d:8d:da:a5:a1:ad:fa:44:28:97:67:4a:38:04:
39:7f:62:64:49:03:29:7c:c1:67:f5:8a:f6:5b:7a:
dd:ce:ba:39:7b:4a:2d:3e:23:f4:9b:da:31:24:0c:
ad:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:21:D1:C8:03:FA:F4:A2:C4:4F:AD:5B:F6:AE:A0:D7:58:11:FB:7B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ZyHRyAP69KLET61b9q6g11gR-3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.182.0/24
89.213.184.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a3:8d:a0:c3:f8:96:fd:05:68:a0:61:c0:3f:c7:b0:6a:8a:
b2:a7:b0:d9:01:7d:47:19:5b:64:c8:60:77:19:a1:a8:1c:2d:
bc:e0:a7:21:fe:56:97:03:aa:48:21:d3:7e:35:12:78:94:b3:
10:01:ac:2e:70:dc:8b:67:b1:4d:2f:19:54:d8:1e:70:de:70:
60:dd:5a:4a:3e:b4:63:42:02:08:f6:1a:64:40:0f:4e:83:b9:
dd:f9:79:18:61:30:3c:19:8f:6a:f8:9e:88:df:32:21:88:a0:
8b:1d:ff:ab:21:e3:8d:c4:f6:ff:28:c3:5e:0a:2b:41:a8:6d:
a3:de:cb:e4:7a:50:87:54:a9:00:f7:15:3f:e9:de:fc:2e:80:
81:9a:19:c9:0f:b8:69:82:9f:21:ba:d5:75:fa:28:b2:a4:aa:
36:ae:ce:d4:96:14:e6:62:50:d9:09:dc:9a:3c:c5:bc:ac:fb:
fa:da:ab:21:b1:ff:df:d8:e3:71:50:85:80:3b:8e:a2:b3:89:
ee:00:73:83:4e:20:24:f5:af:2d:66:29:f7:80:ad:30:32:c5:
a6:ba:40:76:e2:43:13:81:7f:78:62:f7:fc:cf:f3:dc:0c:89:
8b:f2:66:3c:3d:d6:bb:3f:b4:1f:da:eb:e4:3d:47:3d:90:63:
93:cd:03:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:00 2024 by rpki-client on console-fra.rpki-client.org