Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ekTQXq0fNJarXfh-o-U_1wGqCzQ.roa
File: ekTQXq0fNJarXfh-o-U_1wGqCzQ.roa (raw, json)
Hash identifier: ejrwlfwBDIzYQF/cJS8kP93kkpgi+6prAgWeHMfAYF0=
Subject key identifier: 7A:44:D0:5E:AD:1F:34:96:AB:5D:F8:7E:A3:E5:3F:D7:01:AA:0B:34
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F3881BA1B578CDDC8934C06BBB93D8D3A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ekTQXq0fNJarXfh-o-U_1wGqCzQ.roa
Signing time: Thu 02 May 2024 08:52:56 +0000
ROA not before: Thu 02 May 2024 08:52:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209824
IP address blocks: 89.213.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:81:ba:1b:57:8c:dd:c8:93:4c:06:bb:b9:3d:8d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 2 08:52:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a44d05ead1f3496ab5df87ea3e53fd701aa0b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:62:51:f5:3e:ae:e2:1b:8c:8c:cd:71:8d:9c:
6e:f3:8a:50:97:57:20:4b:43:e1:ff:dd:c4:c8:e6:
14:de:d2:30:69:4c:aa:5f:c1:1f:6e:73:25:da:f7:
9e:1a:bb:f5:da:17:62:e9:be:34:f2:85:3b:92:cf:
de:a7:fc:a9:8b:df:32:69:f4:63:31:04:01:06:72:
f1:ba:bf:0a:32:31:45:5b:e3:60:96:97:db:5c:a1:
d2:5b:e9:06:bd:25:96:3a:11:f0:24:49:58:e0:84:
2d:74:ed:40:17:dc:28:d0:e8:14:84:09:74:77:cf:
92:07:0d:47:d7:5b:ac:b1:f4:fe:77:5e:03:ef:de:
09:e8:60:13:17:15:ce:53:4f:a9:37:1d:2c:64:d4:
f7:69:26:4e:f0:34:93:1a:9e:c2:ad:e6:47:b5:9d:
1a:ec:04:f5:af:a5:a6:af:9f:ee:36:64:8f:7e:8e:
82:a7:aa:b2:b3:4e:b9:c1:23:af:00:aa:81:3f:bd:
31:57:30:85:14:90:47:85:fe:97:e8:52:b1:a1:10:
cb:a4:41:d6:fd:d6:71:bf:5e:0c:b8:b9:70:55:47:
5e:65:c9:49:41:a0:01:2c:5a:28:ba:51:10:06:65:
ed:7e:9c:72:45:b2:d0:a7:65:c8:bd:7a:8c:a6:c4:
94:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:44:D0:5E:AD:1F:34:96:AB:5D:F8:7E:A3:E5:3F:D7:01:AA:0B:34
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ekTQXq0fNJarXfh-o-U_1wGqCzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.133.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a2:12:e9:0a:c5:e3:ce:cc:06:99:73:30:e2:e3:f2:09:e6:
2a:c7:04:a6:78:95:b5:ce:6c:25:e6:95:b1:68:ba:2b:20:2b:
7e:1d:e2:aa:b1:8f:49:8e:c8:b8:22:cf:d6:3e:a0:ee:12:38:
4f:b6:d3:3b:de:be:1e:1e:59:f1:44:bc:69:47:f2:ca:2f:8e:
0e:f7:7d:e9:c8:70:dc:3d:5f:19:52:99:a8:06:da:99:0a:da:
ed:d9:8c:08:d8:56:9a:91:eb:51:08:65:8f:92:d6:d8:bc:2e:
55:58:34:80:95:54:3a:98:6b:f2:37:8d:c4:91:55:b2:36:81:
39:8b:9e:87:ba:d6:64:ab:a7:e0:dd:8f:6d:16:89:f5:de:f0:
d9:60:86:c2:e6:f9:1a:3f:e9:d5:9f:ba:9f:a4:39:27:d3:ae:
8a:a4:7c:6d:d2:52:49:ef:eb:7a:7c:e8:5c:1e:d6:1b:7c:5a:
60:ef:97:e7:de:57:cf:86:db:3e:eb:99:3d:38:85:bb:8f:a8:
86:cb:f6:aa:c0:03:78:11:ae:70:6c:34:3f:2f:c5:6d:fe:f1:
2c:af:93:b7:af:f5:69:b0:95:f0:ee:39:51:3a:81:c2:56:7a:
92:ae:6b:49:da:99:5b:25:90:9b:dc:1a:20:0a:77:76:d8:1b:
b2:14:68:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:16 2024 by rpki-client on console-fra.rpki-client.org