Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c3ciimzL5AB7pj3UzQKUAMzcuMo.roa
File: c3ciimzL5AB7pj3UzQKUAMzcuMo.roa (raw, json)
Hash identifier: N0HHYVQHLNiBSjPBfHOWuTgRxB9LzUloIoIhm9veRhs=
Subject key identifier: 73:77:22:8A:6C:CB:E4:00:7B:A6:3D:D4:CD:02:94:00:CC:DC:B8:CA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E9DC483D73FBE30D6CE61CE03A21E34B1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c3ciimzL5AB7pj3UzQKUAMzcuMo.roa
Signing time: Tue 02 Apr 2024 07:44:45 +0000
ROA not before: Tue 02 Apr 2024 07:44:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47869
IP address blocks: 89.213.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9d:c4:83:d7:3f:be:30:d6:ce:61:ce:03:a2:1e:34:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 2 07:44:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7377228a6ccbe4007ba63dd4cd029400ccdcb8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:90:83:b4:4c:52:10:66:7d:2a:fd:4d:b8:
f1:19:c2:ce:ee:9c:0b:64:2e:f5:f2:b4:c0:47:0a:
b2:05:97:53:e6:e2:98:51:d7:15:8a:26:1d:43:b0:
7a:15:c8:68:aa:35:c0:7b:16:58:a7:88:c7:58:3a:
80:3b:26:ed:96:b0:6a:f6:07:34:e5:d9:20:9e:a2:
1a:83:3a:80:51:1a:29:1d:47:82:d6:cd:9b:af:e2:
9d:d4:98:98:c9:56:fd:51:b5:6f:74:ea:36:a7:d0:
90:63:02:7b:01:90:e7:e2:5c:35:b6:85:df:c8:e7:
dc:8e:78:9f:cb:d1:ba:49:81:58:7b:be:4e:40:60:
87:24:8f:5a:7f:01:86:3a:98:81:f2:7f:a5:81:2d:
97:7e:ae:eb:04:44:21:e3:45:8d:54:39:34:94:a9:
9d:16:ce:45:39:40:84:ef:9d:ef:89:f3:2a:e7:77:
04:88:01:66:2d:ce:fd:df:0f:cf:17:76:42:7f:8d:
01:75:10:41:61:36:b7:9f:7c:28:ed:ea:17:ab:8d:
19:77:e3:e3:27:6b:e7:ca:c7:c8:f0:30:af:e3:25:
a9:ab:9c:64:a8:79:c2:d0:de:80:b8:cd:05:f7:f7:
f9:cf:d7:f0:4a:ac:56:6d:6e:3b:44:fa:ae:a3:a4:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:77:22:8A:6C:CB:E4:00:7B:A6:3D:D4:CD:02:94:00:CC:DC:B8:CA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c3ciimzL5AB7pj3UzQKUAMzcuMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.165.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a5:05:8c:f4:c5:10:8f:e5:0b:99:5b:b0:cf:0e:3a:e9:95:
53:f9:71:ba:cc:44:b6:18:b8:37:cd:a0:3e:71:a6:6d:94:d5:
e0:b3:17:7d:c8:ab:eb:ce:8d:9f:e5:63:9f:e6:67:e4:04:84:
af:93:ad:4f:b9:9a:5c:e4:9e:70:a1:78:4a:7e:f4:ea:c2:d0:
78:84:b0:4b:11:24:18:d2:52:81:6b:c2:af:6b:be:4e:3b:0f:
a2:72:5e:30:95:5d:68:12:93:79:25:b2:b8:97:f6:0e:2a:14:
c3:35:10:94:ae:66:97:71:d8:c9:cb:25:62:ec:53:a5:07:fb:
d6:b8:22:ad:36:9a:a2:68:d2:ed:90:4f:f9:8a:5c:87:08:93:
49:6b:43:e8:ff:b4:f7:86:46:e7:ce:04:5c:64:84:43:a3:ad:
b4:8a:dc:22:08:ad:fc:80:2d:1b:6c:85:e6:f8:a5:18:53:cc:
48:5d:d1:62:7b:b2:91:49:ee:89:ad:25:9f:a2:8f:99:e7:73:
66:22:b7:83:5d:cf:d8:59:88:8f:7e:55:79:e7:e0:40:ef:5c:
81:ed:c6:9a:26:20:f5:f3:83:b9:b3:94:12:3d:c7:de:f9:71:
2c:ed:ab:52:f4:e5:b1:da:28:53:d5:04:76:ef:15:5b:49:ca:
3b:8b:72:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:23 2024 by rpki-client on console-ams.rpki-client.org