Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eh_5gtsXrLYBFIB3jpVmgK4aa4M.roa
File: eh_5gtsXrLYBFIB3jpVmgK4aa4M.roa (raw, json)
Hash identifier: nBLQr5TlPvqZ+SIoA583CF26FU0LqI55V4B32/cku1k=
Subject key identifier: 7A:1F:F9:82:DB:17:AC:B6:01:14:80:77:8E:95:66:80:AE:1A:6B:83
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC3495B569C78FF81ECD4DB737E6E6C15
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eh_5gtsXrLYBFIB3jpVmgK4aa4M.roa
Signing time: Mon 01 Jan 2024 04:30:13 +0000
ROA not before: Mon 01 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198100
IP address blocks: 89.213.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5b:56:9c:78:ff:81:ec:d4:db:73:7e:6e:6c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a1ff982db17acb6011480778e956680ae1a6b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:28:0c:70:55:9c:20:94:d5:ea:8a:97:03:
ce:1e:ab:c0:cd:de:bc:2c:17:51:b6:8a:d3:54:4f:
eb:50:a7:1e:91:8c:34:21:60:79:72:a5:21:81:54:
29:74:b0:2a:b2:d7:e4:2d:67:5a:8f:30:80:39:14:
fb:0c:99:4b:c3:fa:f3:4b:3a:cd:fc:9f:8a:cd:c1:
f5:b9:bd:97:13:2a:b1:d7:9b:00:ec:4f:95:93:44:
12:3e:02:de:53:a8:c4:dd:bb:da:ef:fa:b0:c4:06:
55:98:39:00:38:d1:e7:9f:51:47:42:a5:01:f7:69:
ef:fa:30:28:be:c8:5c:ef:83:fe:37:d8:1a:1f:24:
64:b0:a3:6c:bb:95:b8:4a:14:c5:31:f4:90:b2:68:
9b:56:f0:f7:cb:54:0f:5a:08:95:0e:76:98:54:70:
84:15:52:12:28:d6:a8:fb:d5:ee:c9:b3:3b:d1:f5:
19:61:10:69:ff:4f:c0:c9:b6:01:07:ab:4e:ee:bf:
89:6e:46:83:5c:f9:a7:f0:e6:3e:84:19:28:f9:38:
8f:97:b8:8e:1d:ef:17:a0:4e:da:83:04:8b:8c:ab:
ae:43:9a:04:2f:0c:10:ac:91:40:01:9c:e3:02:d6:
d6:5a:67:07:77:eb:1d:48:b8:20:51:19:7b:c6:9f:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1F:F9:82:DB:17:AC:B6:01:14:80:77:8E:95:66:80:AE:1A:6B:83
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eh_5gtsXrLYBFIB3jpVmgK4aa4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:73:0e:2c:54:d7:02:a2:81:67:0a:4b:03:98:11:e0:87:a7:
14:0f:7a:d3:eb:c7:7e:b9:14:47:be:e6:06:89:6c:03:3f:c0:
15:05:ac:53:51:5e:21:c3:fb:05:7a:96:3f:43:1b:0c:93:aa:
78:25:08:47:5f:30:86:bb:e9:ba:cc:4b:67:27:ec:67:8e:da:
d2:b4:3b:b7:26:af:db:92:05:a7:67:13:c8:c4:35:9d:bd:25:
8c:97:e1:38:03:1c:25:b3:13:15:d4:e0:cd:86:a0:61:88:b8:
39:92:f1:be:01:87:b9:71:26:63:2f:b4:ef:1d:6f:3d:55:3b:
58:e4:b3:2b:ca:07:51:f4:19:dd:68:e2:e5:5b:1d:7a:92:6a:
2c:f2:ec:38:0f:2b:72:00:7b:a3:a0:fe:f1:e2:90:ef:38:5b:
a4:ed:6f:de:26:ce:d1:66:5c:41:29:3f:52:47:de:e8:73:b7:
e4:6f:28:54:d4:3a:94:ae:80:b0:9a:e8:40:68:55:0d:dd:1e:
5e:39:74:6b:6b:53:82:25:94:ce:98:ad:e0:c3:f3:ee:6e:95:
6e:c0:53:7e:d2:1a:13:6f:1e:ba:07:c1:5d:34:c5:32:70:21:
00:ad:42:be:26:fe:6e:8d:20:e8:f5:f1:bb:85:42:84:92:c9:
9f:4c:fb:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSVtWnHj/gezU23N+bmwVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwMTAxMDQzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTFmZjk4MmRiMTdhY2I2MDExNDgwNzc4ZTk1NjY4MGFlMWE2YjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVAoDHBVnCCU1eqKlwPOHqvAzd68
LBdRtorTVE/rUKcekYw0IWB5cqUhgVQpdLAqstfkLWdajzCAORT7DJlLw/rzSzrN
/J+KzcH1ub2XEyqx15sA7E+Vk0QSPgLeU6jE3bva7/qwxAZVmDkAONHnn1FHQqUB
92nv+jAovshc74P+N9gaHyRksKNsu5W4ShTFMfSQsmibVvD3y1QPWgiVDnaYVHCE
FVISKNao+9XuybM70fUZYRBp/0/AybYBB6tO7r+JbkaDXPmn8OY+hBko+TiPl7iO
He8XoE7agwSLjKuuQ5oELwwQrJFAAZzjAtbWWmcHd+sdSLggURl7xp8gKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHof+YLbF6y2ARSAd46VZoCuGmuDMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZWhfNWd0c1hyTFlCRklCM2pwVm1nSzRhYTRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWcMA0G
CSqGSIb3DQEBCwUAA4IBAQBqcw4sVNcCooFnCksDmBHgh6cUD3rT68d+uRRHvuYG
iWwDP8AVBaxTUV4hw/sFepY/QxsMk6p4JQhHXzCGu+m6zEtnJ+xnjtrStDu3Jq/b
kgWnZxPIxDWdvSWMl+E4AxwlsxMV1ODNhqBhiLg5kvG+AYe5cSZjL7TvHW89VTtY
5LMrygdR9BndaOLlWx16kmos8uw4DytyAHujoP7x4pDvOFuk7W/eJs7RZlxBKT9S
R97oc7fkbyhU1DqUroCwmuhAaFUN3R5eOXRra1OCJZTOmK3gw/PubpVuwFN+0hoT
bx66B8FdNMUycCEArUK+Jv5ujSDo9fG7hUKEksmfTPt3
-----END CERTIFICATE-----
Generated at Sun May 19 20:46:32 2024 by rpki-client on console-fra.rpki-client.org