Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hFCJBWKq8rGx3G2xW0Oe_p4bGo8.roa
File: hFCJBWKq8rGx3G2xW0Oe_p4bGo8.roa (raw, json)
Hash identifier: 4PQvzUehJqXjmcynHyXAN4Ak0YmkRc6xPn/KJPv1rhI=
Subject key identifier: 84:50:89:05:62:AA:F2:B1:B1:DC:6D:B1:5B:43:9E:FE:9E:1B:1A:8F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0192331E7D4DC877A7F712048710A47D3626
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hFCJBWKq8rGx3G2xW0Oe_p4bGo8.roa
Signing time: Fri 27 Sep 2024 10:54:49 +0000
ROA not before: Fri 27 Sep 2024 10:54:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 89.213.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:33:1e:7d:4d:c8:77:a7:f7:12:04:87:10:a4:7d:36:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 27 10:54:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8450890562aaf2b1b1dc6db15b439efe9e1b1a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:f2:20:e5:6d:b7:12:33:eb:5a:f4:5e:77:
c9:df:fb:93:fc:6d:5e:06:1a:f0:77:a0:57:db:17:
ee:6c:58:cf:03:da:88:64:53:69:93:f7:57:bf:0a:
f7:d2:67:f8:94:9c:56:36:e0:25:40:4a:fa:83:a7:
1b:f4:88:65:1d:5f:3f:c0:5b:68:db:c4:eb:53:64:
ff:7f:ef:64:74:ee:7f:24:99:a8:58:11:96:4f:86:
59:55:a1:76:96:50:49:f3:4b:b1:ff:ed:c2:a0:63:
85:e0:23:5b:76:64:dd:74:62:d6:df:67:8b:5b:e3:
ea:f0:8e:3b:94:23:a9:f7:ba:7a:08:c7:ed:44:e2:
34:ed:15:9a:28:cd:ae:ad:25:80:d2:33:d5:ce:51:
64:85:2f:5b:b7:62:c8:fc:e9:89:d6:f6:04:2f:45:
ce:87:4d:7a:75:2e:df:50:ae:c4:5d:9b:d9:82:de:
ff:a8:04:91:ee:67:a9:a3:3e:af:85:10:12:f8:29:
8a:32:66:6e:6c:01:f8:c0:52:f0:3b:a4:40:cc:76:
b6:8d:f8:58:f3:b4:0f:78:d5:83:a7:35:95:54:83:
54:66:03:cd:3c:89:de:11:ea:3e:df:68:b6:cc:c8:
7d:98:22:37:e3:ff:f1:57:08:05:ca:76:1c:5f:e4:
5d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:50:89:05:62:AA:F2:B1:B1:DC:6D:B1:5B:43:9E:FE:9E:1B:1A:8F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hFCJBWKq8rGx3G2xW0Oe_p4bGo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.213.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:cf:01:45:d3:5f:f0:7a:d3:70:b9:66:ad:ef:12:fe:fc:4c:
62:e5:19:a6:0a:18:8c:01:ef:d7:be:09:78:17:58:96:4f:84:
e8:55:22:3e:0c:bb:ea:73:8b:a4:5b:14:56:f3:47:04:6b:91:
a7:5b:98:20:08:2f:1e:ac:2b:a8:fa:35:d7:93:aa:0b:3b:76:
a7:27:8f:9f:96:bd:44:a6:f4:ad:e3:0f:4e:1b:ae:86:ff:5d:
70:4a:17:7c:6b:c1:b3:5a:3e:42:96:b5:99:cb:8e:5b:0c:6c:
53:ec:e9:af:f4:03:81:87:b9:31:4e:90:17:36:59:72:4a:e6:
1a:a0:1e:76:39:f9:c3:bd:e4:1e:fb:ed:c5:b3:f5:79:40:94:
7a:be:2b:9b:37:01:c9:ee:31:1c:57:0b:e3:d0:c0:f6:17:8b:
3b:fe:95:a7:87:4e:7b:9c:70:6c:53:3a:7f:c7:a4:9f:17:95:
a6:b6:43:78:30:86:45:d0:ab:b1:15:e4:9a:31:2a:0c:6b:13:
a6:be:81:da:dd:62:4a:53:36:8e:1c:e9:f8:1e:a0:61:b5:9c:
69:80:84:ed:33:88:94:50:68:ee:6c:30:04:ee:60:61:1a:72:
9d:89:6d:9a:c4:4e:b9:91:ae:98:63:73:4d:a9:6d:b5:7b:e7:
ce:9b:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:34 2024 by rpki-client on console-fra.rpki-client.org