Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/h3GGgpyAQyn2ufwqGBuXpGIrx7A.roa
File: h3GGgpyAQyn2ufwqGBuXpGIrx7A.roa (raw, json)
Hash identifier: 8p2dAkgFPAmp0E6GheREr8mY6slVrf44Erq2rDCrDsI=
Subject key identifier: 87:71:86:82:9C:80:43:29:F6:B9:FC:2A:18:1B:97:A4:62:2B:C7:B0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190FA7B55830A4386BB70534448848702DD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/h3GGgpyAQyn2ufwqGBuXpGIrx7A.roa
Signing time: Sun 28 Jul 2024 17:55:05 +0000
ROA not before: Sun 28 Jul 2024 17:55:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198990
IP address blocks: 89.213.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fa:7b:55:83:0a:43:86:bb:70:53:44:48:84:87:02:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 28 17:55:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=877186829c804329f6b9fc2a181b97a4622bc7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:e2:88:b6:23:21:cf:2a:f0:95:4d:79:58:
87:c0:68:14:4f:7a:74:af:bb:b6:69:90:fb:d1:a1:
e8:cc:d2:34:87:dc:2d:cb:e4:cc:56:5e:0c:55:d3:
ea:84:17:78:c3:04:2c:84:e8:a3:65:42:0e:8d:d6:
f4:80:37:cb:47:69:db:24:20:66:bd:73:18:58:fb:
13:b9:03:79:90:4c:fc:84:d7:34:4d:f8:59:a2:04:
e2:b9:8d:37:74:4d:d4:6d:83:44:e0:80:9a:5e:94:
f1:cb:6d:df:cb:7d:49:4d:57:81:8a:d1:15:b9:0f:
ff:c5:f6:61:29:63:e5:57:dd:05:49:5d:a5:04:95:
2e:b6:9b:74:60:e7:d6:55:62:c3:59:a3:ec:e4:ce:
e0:d5:68:ff:67:d1:19:56:b0:09:22:06:19:9e:63:
fa:29:a6:91:f8:36:b2:a8:52:48:25:3a:eb:38:db:
da:06:a9:5d:94:3a:78:f4:f0:77:31:90:25:f5:72:
a5:14:70:d4:80:7b:54:c7:f3:d3:01:2e:ff:d1:8f:
f9:93:05:97:a9:26:9a:44:66:88:2f:cc:ad:68:af:
fc:4e:96:9b:f9:11:96:fe:47:58:db:8d:97:7e:7a:
e8:b1:2e:27:03:7a:26:67:00:db:3d:ec:ad:06:f1:
ff:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:71:86:82:9C:80:43:29:F6:B9:FC:2A:18:1B:97:A4:62:2B:C7:B0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/h3GGgpyAQyn2ufwqGBuXpGIrx7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.214.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6f:1c:e6:16:de:94:0e:d0:45:65:eb:3f:8d:60:8d:83:1d:
32:af:94:45:ae:8c:0e:45:d8:29:71:12:4a:ee:1a:b5:b7:1d:
7a:ab:82:e8:ff:2d:77:8c:94:a6:4c:ba:7a:27:34:04:fd:08:
46:49:be:2d:f4:d8:5e:fc:c8:c9:c5:57:99:75:37:b1:4b:61:
5b:5e:50:4a:62:b7:83:6b:98:16:02:af:a4:a9:9c:be:d2:60:
ab:34:0d:83:0c:3b:5a:d1:15:6c:77:3f:7b:10:74:63:6a:62:
f6:38:fa:51:e1:31:00:62:17:2b:d1:ed:18:a1:10:c1:1c:ff:
fd:ed:48:6b:fa:81:1e:30:fd:8d:c5:3c:30:ce:78:b7:0d:b3:
41:c3:c2:e9:96:84:0d:cd:e3:43:68:ea:86:e4:9f:70:7e:8e:
93:8f:7f:1f:ff:08:d7:54:ed:3b:46:65:36:28:05:01:15:2d:
ea:50:e8:5f:4f:90:e7:46:46:78:e2:12:de:43:c4:d3:e2:54:
db:c1:e0:38:77:24:46:6b:5b:05:53:06:5e:b3:d3:1f:f2:ff:
8a:33:01:ec:73:ad:05:ef:23:5b:ad:dd:12:e1:0e:bf:0a:b8:
1d:0d:22:37:d4:c8:6c:eb:7a:37:37:d2:a8:c2:ef:7e:da:c5:
aa:ec:84:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:23 2024 by rpki-client on console-ams.rpki-client.org