Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bPRvSAA0dFSLIJ1tRLQzL4nl0v8.roa
File: bPRvSAA0dFSLIJ1tRLQzL4nl0v8.roa (raw, json)
Hash identifier: KPu0CSFgm6hDPN9OCJvqcThobUBGul1IVA3vr+i4NE4=
Subject key identifier: 6C:F4:6F:48:00:34:74:54:8B:20:9D:6D:44:B4:33:2F:89:E5:D2:FF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0191FA8BC281E084A4DAC901DB50D36EA5BA
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bPRvSAA0dFSLIJ1tRLQzL4nl0v8.roa
Signing time: Mon 16 Sep 2024 11:15:48 +0000
ROA not before: Mon 16 Sep 2024 11:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13335
IP address blocks: 89.213.5.0/24 maxlen: 24
89.213.231.0/24 maxlen: 24
89.213.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:8b:c2:81:e0:84:a4:da:c9:01:db:50:d3:6e:a5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 16 11:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cf46f48003474548b209d6d44b4332f89e5d2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:64:77:7e:90:52:8e:03:61:45:16:ba:22:7e:
79:79:01:dc:d4:67:27:4f:24:33:e9:7e:a7:90:25:
d3:76:da:5b:60:9d:b0:41:14:d3:3e:2d:21:56:69:
31:10:32:58:c7:48:09:c7:26:fd:98:c0:e0:97:d5:
dd:a2:6d:c1:bf:62:4e:89:a8:03:46:ff:93:74:fa:
b3:f2:01:06:42:cd:19:7a:d5:c2:fb:08:69:3d:41:
ff:7a:1d:5c:ef:51:be:e2:3b:f5:40:7d:68:d8:36:
29:58:3d:b1:78:14:23:41:fd:21:40:6d:78:39:c0:
d3:12:42:dd:03:6b:df:bd:b6:f7:7f:91:a8:a7:3b:
cc:ba:65:ac:fe:21:02:be:0d:15:5b:f6:c9:05:7e:
0c:09:83:b2:54:18:e9:c1:84:39:b5:9b:85:31:5a:
a5:f4:47:75:c1:48:23:d0:5f:34:f6:cb:27:37:96:
d6:93:23:df:13:68:60:bb:b1:57:81:cb:4a:e9:c0:
41:23:41:a4:af:94:54:cc:05:49:c6:c4:2d:52:69:
ed:3e:e9:0f:9a:55:85:df:98:34:49:f0:b2:2f:60:
57:78:ab:e7:8b:ac:b0:d3:c0:57:f9:6a:ff:56:ed:
31:53:2e:09:10:62:08:d8:24:f8:a6:a5:fb:ab:fd:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F4:6F:48:00:34:74:54:8B:20:9D:6D:44:B4:33:2F:89:E5:D2:FF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bPRvSAA0dFSLIJ1tRLQzL4nl0v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.5.0/24
89.213.231.0/24
89.213.248.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:02:dd:ec:a8:fd:30:4d:df:79:54:c7:c9:38:90:85:15:4e:
7d:37:ec:aa:96:c7:c1:6a:69:57:68:de:95:9b:20:82:9c:3b:
47:96:49:f1:a0:ac:5f:ea:9a:cb:19:ff:42:a1:cd:3b:ec:ea:
79:d0:30:30:47:bf:42:6d:d1:de:21:c3:df:8e:8e:92:76:ba:
a0:22:1e:99:14:60:8e:6f:14:d1:67:3e:34:be:a7:0b:5f:ff:
16:50:0c:78:34:a3:04:10:a9:8f:9c:e1:64:d1:96:27:26:e4:
86:33:b2:c5:ea:fe:97:96:bf:ec:16:23:30:d5:70:57:e1:36:
0d:be:70:c6:74:33:f0:4a:d5:45:d7:84:f9:89:77:f5:71:f2:
4e:d3:35:14:1b:70:c8:34:9b:6a:fa:9e:cd:cb:dc:dc:19:bc:
4a:43:97:33:ae:01:e6:5f:68:7b:45:91:ce:f5:b1:6d:d7:a1:
40:79:a7:04:bc:90:56:64:75:b7:42:5f:4c:23:31:70:9c:23:
21:5b:0b:30:c2:d5:a5:21:31:18:2f:dd:1f:ad:3b:3c:5f:02:
25:ad:68:cc:f5:8b:02:0b:21:b9:1e:6a:41:22:1f:58:26:9b:
46:0a:15:5c:a3:ea:1f:d0:db:37:50:a3:3d:8d:07:e3:b8:3b:
68:47:b0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:23 2024 by rpki-client on console-ams.rpki-client.org