Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_KwjPP9us79SGw75J5vgG7ARP64.roa
File: _KwjPP9us79SGw75J5vgG7ARP64.roa (raw, json)
Hash identifier: Dbf2R8orLQ+Ofu1z7gsyTYpjNocd3Aipp2+HrvKRLa8=
Subject key identifier: FC:AC:23:3C:FF:6E:B3:BF:52:1B:0E:F9:27:9B:E0:1B:B0:11:3F:AE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0191B35D9FC97257F7BE49F98150848C0EC5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_KwjPP9us79SGw75J5vgG7ARP64.roa
Signing time: Mon 02 Sep 2024 15:32:23 +0000
ROA not before: Mon 02 Sep 2024 15:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198825
IP address blocks: 89.213.45.0/24 maxlen: 24
89.213.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:5d:9f:c9:72:57:f7:be:49:f9:81:50:84:8c:0e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 2 15:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcac233cff6eb3bf521b0ef9279be01bb0113fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5c:b1:5d:3c:0c:45:52:d6:07:ed:43:2f:34:
3b:f2:f1:da:e9:56:e9:83:fa:30:a4:3d:51:2d:5d:
b9:e9:3f:8d:e0:27:e3:2b:61:ce:82:40:e1:35:7b:
cf:df:75:a0:19:49:df:1e:01:e5:08:09:30:1f:8f:
d9:05:a2:48:99:05:ba:e0:8f:de:f7:05:86:5c:32:
49:69:42:c0:16:a3:a6:68:bb:e5:0f:7f:f8:74:55:
74:1e:05:1f:2a:cf:7c:1b:52:f1:92:14:e7:f3:a6:
9a:f0:5c:c6:9f:a7:7d:82:f5:fa:35:af:9a:37:b6:
5f:71:17:78:06:ad:d6:c2:bb:5e:b0:c2:ae:f3:74:
23:82:fb:ee:f8:07:0c:cd:9a:61:e5:64:80:b5:9d:
a5:84:9b:b0:dc:66:06:39:c5:5e:c4:d3:06:f2:bf:
c9:7d:be:1d:d0:c4:0b:d9:77:a9:e8:80:09:f6:d5:
3e:48:6a:5d:39:24:a5:48:94:91:1c:9a:21:61:bb:
7b:13:d9:dc:6c:6a:b8:e7:0c:9b:b2:b6:b8:df:b2:
41:5a:9d:65:37:99:12:cc:25:b3:b8:0d:69:1d:86:
c6:07:15:9f:b7:7c:a6:98:97:d1:0d:42:92:fe:7a:
b1:6b:f8:61:04:fe:3a:02:cf:97:5c:6e:b6:b3:95:
24:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AC:23:3C:FF:6E:B3:BF:52:1B:0E:F9:27:9B:E0:1B:B0:11:3F:AE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_KwjPP9us79SGw75J5vgG7ARP64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.45.0/24
89.213.175.0/24
Signature Algorithm: sha256WithRSAEncryption
89:29:31:17:21:7e:ba:9e:2e:3b:82:51:9a:7d:ce:aa:0c:29:
21:84:26:58:aa:e4:8c:9b:ea:f2:53:2d:f6:88:8d:2f:2b:3e:
c3:72:12:d9:31:48:3d:cf:7e:ad:9e:e0:02:d7:02:8a:e5:39:
95:35:e9:2f:75:2f:d1:0e:45:5a:64:7e:84:67:2b:0f:cf:86:
c5:60:48:94:19:81:7b:e9:91:8d:66:51:98:e0:2b:ce:83:0d:
ab:0a:31:0f:94:91:58:ef:3d:ef:cc:9d:3e:b2:f5:0d:2d:2b:
45:1e:31:a2:6f:8c:a6:34:04:78:43:d8:e5:d4:c1:13:7e:c7:
bf:11:05:11:c2:c5:bd:30:aa:26:98:60:8d:50:e3:b8:9b:97:
b6:39:24:d2:12:35:b7:71:25:39:68:0b:b2:7f:54:c9:c5:f1:
56:c1:c4:84:16:c7:a4:e3:bb:aa:fd:9a:a2:5f:9d:5f:f8:53:
08:9f:46:88:63:c5:e6:63:5a:46:a9:37:ef:13:ce:54:91:3e:
68:30:35:8d:66:39:55:2c:0c:da:7e:6f:9b:1c:a5:0c:85:dd:
83:3b:e9:6d:10:fe:d3:3f:01:71:ee:27:38:59:16:49:47:dd:
be:b0:a6:5e:06:04:00:45:18:71:99:5a:93:cf:50:5d:b5:15:
95:64:f4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:16 2024 by rpki-client on console-fra.rpki-client.org