Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lgCotzvdF5_ztw_3BQZvvyFw08Q.roa
File: lgCotzvdF5_ztw_3BQZvvyFw08Q.roa (raw, json)
Hash identifier: V0gldxdiE7ES0vHsFxX04Uqkfn97Vxtf7v5kLcEuV8k=
Subject key identifier: 96:00:A8:B7:3B:DD:17:9F:F3:B7:0F:F7:05:06:6F:BF:21:70:D3:C4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0192532F1C8F3846507725A1DBBD62470DD9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lgCotzvdF5_ztw_3BQZvvyFw08Q.roa
Signing time: Thu 03 Oct 2024 16:20:49 +0000
ROA not before: Thu 03 Oct 2024 16:20:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214364
IP address blocks: 89.213.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:53:2f:1c:8f:38:46:50:77:25:a1:db:bd:62:47:0d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 3 16:20:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9600a8b73bdd179ff3b70ff705066fbf2170d3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:a6:07:5c:c1:87:db:d5:5b:1a:93:ee:7d:
22:39:f9:32:f6:5a:1c:96:ec:c4:b5:db:3d:bc:60:
84:61:6d:fa:a6:28:fa:b9:f3:6c:98:3a:a7:6a:eb:
3b:0e:e5:14:ad:37:58:89:e7:dd:d7:41:42:75:7d:
40:97:b0:f2:70:18:6c:70:d7:43:a8:17:28:97:6c:
52:cc:24:ca:47:a5:2c:12:cc:11:19:86:1e:84:08:
ee:fb:ed:b5:b2:6d:66:d8:d7:51:40:95:db:1a:9b:
c0:f7:e4:9b:d0:c7:88:8e:0b:a8:09:a9:1e:3e:11:
e3:29:f9:cd:50:59:25:8d:29:89:35:b7:de:7b:a9:
91:91:23:2b:68:72:cb:4b:29:c4:ed:c0:ae:78:df:
b9:49:77:76:68:77:55:b7:a4:b7:d9:ae:48:c2:d6:
48:9c:ef:24:ab:bc:21:eb:69:9c:ab:25:b7:b1:94:
48:8e:79:4b:8c:21:aa:47:48:1d:c2:12:a5:6c:68:
13:7b:03:f9:bb:de:92:ec:fb:cf:3e:3c:52:22:d0:
a2:49:ad:eb:81:3d:62:ae:28:db:f7:ce:6b:86:ee:
96:38:13:f8:e4:72:f0:af:60:72:91:d0:4c:6b:85:
97:ec:0f:7e:54:13:58:6b:61:1c:6a:e5:c5:bd:78:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:00:A8:B7:3B:DD:17:9F:F3:B7:0F:F7:05:06:6F:BF:21:70:D3:C4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lgCotzvdF5_ztw_3BQZvvyFw08Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.44.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:41:89:88:ca:8c:45:6d:c9:75:10:c8:97:9b:b4:25:dc:53:
f5:48:f4:64:9d:c1:d7:99:f9:ba:8f:20:be:98:b8:25:a4:a0:
e1:6b:d9:6b:2a:7f:c9:f1:4f:cb:8a:ca:4c:ec:ae:3d:56:8f:
41:2d:57:83:80:cb:94:1d:56:bb:48:5a:32:ec:d5:dc:c6:66:
21:c3:75:ac:d9:05:d2:11:9e:cb:c4:ac:dd:32:83:bc:93:b8:
1b:69:40:42:68:a0:e1:89:32:69:d9:7a:ca:31:21:5e:0d:e3:
dc:c4:2f:6c:9d:7b:53:17:85:6a:3d:1a:62:8e:b0:1b:ba:04:
af:93:50:94:06:ef:a2:0f:bd:9c:45:28:e5:c2:8a:8a:16:d5:
3f:c1:a7:b3:dc:6f:09:00:2b:98:14:b9:1d:89:76:c2:c6:3e:
05:23:8e:1b:15:e2:1d:85:a0:60:85:d1:2e:41:cc:86:e0:ba:
9e:b3:35:b0:55:c3:5e:7c:7a:b5:6d:09:fd:51:dd:da:77:c8:
0a:8b:76:81:e4:93:c1:1f:39:e1:66:f4:13:eb:9c:6a:a5:86:
2b:77:28:ee:9f:39:bf:10:a7:63:6a:55:a2:33:8c:42:3a:41:
18:bc:6f:78:f5:d5:71:3e:25:63:fb:40:ff:42:f1:c2:ed:20:
97:5e:34:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:01 2024 by rpki-client on console-fra.rpki-client.org