Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hMz0oA9Kl6a65-Bsx8ytrMhF_Ng.roa
File: hMz0oA9Kl6a65-Bsx8ytrMhF_Ng.roa (raw, json)
Hash identifier: 5DEH14b8wPqMqAmp88JUDKtqK76Gb9WeDEKUfxHReLk=
Subject key identifier: 84:CC:F4:A0:0F:4A:97:A6:BA:E7:E0:6C:C7:CC:AD:AC:C8:45:FC:D8
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019199C9C53EF4A7E7ACF78F763F20E0C96D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hMz0oA9Kl6a65-Bsx8ytrMhF_Ng.roa
Signing time: Wed 28 Aug 2024 16:20:22 +0000
ROA not before: Wed 28 Aug 2024 16:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39600
IP address blocks: 89.213.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:99:c9:c5:3e:f4:a7:e7:ac:f7:8f:76:3f:20:e0:c9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 28 16:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84ccf4a00f4a97a6bae7e06cc7ccadacc845fcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:00:83:83:8b:61:6d:e5:f1:3b:d8:15:cf:06:
ad:9d:9d:55:cf:6c:9d:c1:ac:3d:1e:d0:58:e9:42:
7c:1f:83:6e:63:4a:39:f1:2d:8e:d3:5b:5a:38:5a:
a8:b2:c7:fc:e1:e6:95:5f:48:da:5a:22:54:e2:d3:
17:3d:f8:95:17:fe:91:bc:84:7f:9b:17:1d:23:04:
05:0b:64:6f:32:c0:59:17:82:3a:9b:75:7d:7b:81:
ae:33:84:dc:e6:33:54:3f:0b:88:a4:b8:06:b9:41:
f7:c9:e1:f7:9f:a0:65:24:ea:5b:90:ec:c7:40:80:
2a:b3:53:e2:15:db:47:1f:d6:5d:8d:22:ef:2d:d2:
13:05:10:e3:d7:b9:6e:bc:98:42:9e:6d:d9:56:d9:
21:14:3b:f4:78:3a:bb:90:96:f8:50:8c:4e:d2:1f:
51:a8:c4:49:fb:49:98:5d:8e:92:20:36:43:de:45:
01:7a:e0:b8:e3:a1:19:47:9a:52:82:d0:9c:ce:6a:
15:20:84:4e:a7:1c:72:06:f7:cf:54:c0:81:46:9f:
2b:ee:d8:cb:02:ec:cd:d1:43:86:80:2f:6c:d7:7f:
2c:bc:b7:c7:e9:a5:aa:b4:97:a9:e6:fe:78:9c:a0:
58:5c:1b:a8:0c:f6:ff:64:bc:42:4f:17:02:8b:08:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CC:F4:A0:0F:4A:97:A6:BA:E7:E0:6C:C7:CC:AD:AC:C8:45:FC:D8
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hMz0oA9Kl6a65-Bsx8ytrMhF_Ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.223.0/24
Signature Algorithm: sha256WithRSAEncryption
19:66:a2:64:3b:8d:fa:71:04:42:36:e3:0f:85:a7:34:d9:d3:
61:57:cd:a5:25:41:ce:9d:bd:e0:d5:0b:ca:7e:c4:cb:8a:55:
13:04:11:a3:04:93:54:63:fd:b2:c0:c9:88:a5:e4:e5:48:40:
0c:8c:3e:97:ed:46:6a:99:c8:9d:91:00:ba:b2:58:9c:fc:e7:
9a:f7:22:75:c6:0c:bb:77:8f:e5:49:97:20:60:b1:95:3f:9f:
fb:0c:8b:32:a8:9e:2d:8d:2e:e4:74:df:b0:91:45:a5:c5:5f:
3d:bf:90:9b:b6:b7:ce:98:a0:c4:d2:56:c5:b3:ea:72:4f:38:
2e:48:fa:80:87:f8:fc:b1:bd:b7:43:dd:eb:8b:f8:81:04:a4:
3d:96:e4:04:69:24:2f:8a:2f:50:09:0d:0c:e6:c0:6d:60:dc:
64:37:5f:90:9c:d8:a4:2a:42:69:78:7f:0c:8b:c3:a1:e1:86:
bc:d7:3e:20:fc:d5:ef:63:b9:85:e3:58:fb:8e:33:12:f9:1b:
c8:89:e2:1e:cb:be:85:c0:d8:86:04:c1:f8:df:c1:76:8f:fa:
97:5b:8f:35:5d:e6:63:81:f5:6d:5f:59:56:04:b7:fb:4e:eb:
95:57:19:45:29:ad:58:bd:45:18:2c:19:d7:3d:ed:33:4e:47:
96:90:5e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:34 2024 by rpki-client on console-fra.rpki-client.org