Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c1M28g3EcQ8hbFuBaFK9__h0raw.roa
File: c1M28g3EcQ8hbFuBaFK9__h0raw.roa (raw, json)
Hash identifier: E91PKVjHQMHoIXlI1U5DgAQZ+Xeb/TcwH+AdcxXM5FY=
Subject key identifier: 73:53:36:F2:0D:C4:71:0F:21:6C:5B:81:68:52:BD:FF:F8:74:AD:AC
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FB93CD739B1583502FCF54CA64A1BE718
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c1M28g3EcQ8hbFuBaFK9__h0raw.roa
Signing time: Mon 27 May 2024 08:48:43 +0000
ROA not before: Mon 27 May 2024 08:48:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215267
IP address blocks: 89.213.146.0/24 maxlen: 24
109.176.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:3c:d7:39:b1:58:35:02:fc:f5:4c:a6:4a:1b:e7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 27 08:48:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=735336f20dc4710f216c5b816852bdfff874adac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1d:a8:34:16:b2:e6:44:dc:35:50:79:a4:20:
b7:b9:2d:e2:8f:c6:eb:7a:c3:25:a9:9b:00:ce:32:
33:32:34:90:81:df:5b:22:d5:a7:23:73:3c:6f:4f:
7b:7e:03:96:76:05:ab:0f:2e:83:07:ae:60:09:f8:
fd:aa:5e:f0:a0:52:f6:d3:b6:03:bd:0f:ff:60:07:
4d:53:21:f5:f1:3c:c7:cb:69:df:ed:08:40:ce:8b:
67:54:2a:63:c1:c4:af:ff:f5:ab:55:4b:a0:e6:f2:
a8:87:62:b7:dd:c0:10:c4:4a:01:d9:02:36:d8:73:
1f:c8:71:3f:35:b7:04:98:09:bc:23:ac:bb:ea:48:
c6:89:99:ff:73:bc:03:1f:a2:cb:b7:cf:96:74:9c:
f7:aa:cf:40:a2:9c:a2:eb:ec:e7:ae:ce:10:d9:30:
14:5b:c7:4f:ab:ec:aa:30:e6:07:be:3c:8d:44:40:
1c:2a:85:97:b5:e8:18:00:21:32:bc:bd:eb:63:5c:
46:25:ab:7c:7d:4e:fd:32:3d:d8:83:aa:5a:c0:c3:
e6:5d:b4:50:7f:4b:be:ee:0d:27:e0:14:1b:cd:88:
73:33:72:86:c6:ca:4d:16:1b:6d:99:7d:aa:9f:26:
54:c4:c1:3f:ef:3f:99:04:22:45:31:e7:69:3f:f9:
b9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:53:36:F2:0D:C4:71:0F:21:6C:5B:81:68:52:BD:FF:F8:74:AD:AC
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c1M28g3EcQ8hbFuBaFK9__h0raw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.146.0/24
109.176.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:3a:20:43:1d:38:20:68:f3:72:2c:b4:89:18:2b:83:97:0c:
22:2a:a8:7c:da:e3:80:ad:85:0b:1f:a3:09:5d:41:08:8b:83:
24:c3:68:8b:58:b4:9a:56:41:ff:90:fa:c3:38:09:c7:4d:a6:
ff:0d:2b:f3:e9:c6:ac:af:71:27:68:56:c7:bb:6d:fa:59:a8:
0c:2b:5b:06:4b:0f:e6:5f:e7:22:b4:cb:c7:d7:9c:2a:e1:49:
d9:af:44:56:ac:02:94:53:43:6c:6d:04:55:1e:4c:da:f0:2f:
db:c0:a4:26:ec:1e:90:a8:b5:c5:25:c9:64:e6:0d:02:37:96:
05:be:e7:d5:35:c4:5c:41:e6:a9:29:92:05:2d:8b:54:56:05:
0c:dd:0b:90:49:34:d1:cd:3c:57:92:11:44:8d:02:01:4e:20:
14:09:70:aa:de:2c:de:6a:3f:62:dd:75:ab:21:01:67:2f:bf:
ca:64:51:5e:eb:28:46:b4:ae:90:61:b5:97:9c:d9:b8:dc:c6:
2f:9c:01:3f:14:bf:1c:ab:df:d9:3b:6c:a2:be:45:85:e0:19:
95:ef:be:c6:71:49:9d:d1:19:66:7b:94:a7:98:08:c2:76:16:
4a:c8:de:8d:24:c5:9b:47:0c:d6:3f:85:b3:0b:1a:11:0c:c9:
19:bb:17:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:56:23 2024 by rpki-client on console-fra.rpki-client.org