Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_LW9_-nzIvecZtM3BSU_-bdvJs0.roa
File: _LW9_-nzIvecZtM3BSU_-bdvJs0.roa (raw, json)
Hash identifier: C4GbFDXASsHiSz8iwB1LIiEfN2hn9YlEM/oMFdQ3QtE=
Subject key identifier: FC:B5:BD:FF:E9:F3:22:F7:9C:66:D3:37:05:25:3F:F9:B7:6F:26:CD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC3494AB51F04E02852BA06EFEC8B4AED
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_LW9_-nzIvecZtM3BSU_-bdvJs0.roa
Signing time: Mon 01 Jan 2024 04:30:09 +0000
ROA not before: Mon 01 Jan 2024 04:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13335
IP address blocks: 89.213.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:4a:b5:1f:04:e0:28:52:ba:06:ef:ec:8b:4a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcb5bdffe9f322f79c66d33705253ff9b76f26cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:2f:2d:28:8e:b4:9c:77:ab:1a:c4:09:c7:
27:12:fa:40:99:9c:3c:6f:83:17:0d:96:6e:21:3d:
d3:97:fd:8b:dc:7d:d7:56:73:57:16:ce:82:1e:69:
f8:86:69:5c:98:0a:1b:29:2e:11:57:a0:35:0c:be:
fc:de:c2:3c:29:f6:95:4e:da:40:0f:ae:20:af:f6:
6a:c6:47:e4:39:b6:3f:c0:b6:26:26:62:31:17:a6:
20:8e:f3:85:62:07:3d:aa:86:9f:96:bc:22:5d:31:
0c:ce:de:25:30:8a:4c:f4:cd:88:95:91:bc:e8:72:
03:a7:6a:73:fd:16:b0:5d:0d:c9:40:6b:55:5b:4d:
ec:7d:27:21:9a:32:2b:0e:5a:f7:3f:8b:0b:c5:15:
1b:fb:27:ee:2c:f9:36:05:ed:f6:94:b1:ae:7d:8b:
a4:c1:fd:aa:36:75:e6:02:37:9d:18:fb:a8:46:0d:
93:bc:f5:70:02:3a:0c:a7:06:3f:41:6e:08:b1:54:
80:2d:b3:3e:33:a7:9c:20:1e:0a:67:47:7b:7b:4b:
a4:a3:d9:cb:69:b3:3d:19:e1:6c:5f:1f:6f:ed:32:
2a:cf:dd:e4:41:a5:ed:df:01:18:99:73:53:21:aa:
80:99:10:52:2c:27:58:b1:fe:a7:76:4b:94:90:27:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B5:BD:FF:E9:F3:22:F7:9C:66:D3:37:05:25:3F:F9:B7:6F:26:CD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_LW9_-nzIvecZtM3BSU_-bdvJs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.5.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e9:50:69:17:3a:93:ee:69:a7:3e:f1:7a:b0:01:96:f2:bb:
62:a2:55:17:77:25:06:0d:54:ce:8a:6b:4d:70:ae:da:7a:8e:
1d:4f:71:6a:ef:66:69:fd:1e:b2:6d:73:48:53:0d:bd:f6:f6:
9f:40:dc:77:ad:8f:d1:3f:3d:f7:83:e8:fb:4c:bb:1e:20:70:
d7:4d:82:21:e5:34:dc:5d:a2:02:6b:16:14:1c:e5:34:f1:b0:
a5:76:95:c3:b8:54:6f:77:ec:d2:8f:e0:8c:d5:60:30:cd:b7:
d8:a6:26:c8:81:f3:5c:c0:63:92:b8:24:df:75:fe:a5:9d:cb:
58:07:6c:10:f0:9a:32:ce:9f:a7:ab:01:89:11:d0:8e:62:e3:
d0:3b:c4:2c:cb:0d:43:95:b9:8e:11:05:77:4f:5a:e1:80:cb:
93:c5:2e:17:ae:44:89:be:f2:0b:77:7c:9f:31:fc:b2:9e:ca:
6f:4a:f2:f7:36:46:2c:d1:ee:9a:4e:f9:e6:6c:0d:4e:8d:9f:
d8:a8:f3:0d:67:bf:b8:25:dc:64:2d:03:68:ae:1b:a4:0b:00:
fa:6e:7c:d3:a3:49:4d:88:3b:60:50:05:d8:7d:1f:24:a0:a5:
22:93:ad:d3:e1:82:11:aa:6f:ef:06:15:ee:54:5c:0c:52:5f:
b5:61:09:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 06:42:44 2024 by rpki-client on console-ams.rpki-client.org