Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/myXU_2ycKWSrshmqFkM-EoMljbM.roa
File: myXU_2ycKWSrshmqFkM-EoMljbM.roa (raw, json)
Hash identifier: KOjMJQqRdiYIMPo99RRGpbAxjdIjsuNUUnQ5B9gcvlo=
Subject key identifier: 9B:25:D4:FF:6C:9C:29:64:AB:B2:19:AA:16:43:3E:12:83:25:8D:B3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018DF9A8D7E540D06AE09D860BC39CD45A62
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/myXU_2ycKWSrshmqFkM-EoMljbM.roa
Signing time: Fri 01 Mar 2024 10:56:48 +0000
ROA not before: Fri 01 Mar 2024 10:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47679
IP address blocks: 89.213.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:a8:d7:e5:40:d0:6a:e0:9d:86:0b:c3:9c:d4:5a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 1 10:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b25d4ff6c9c2964abb219aa16433e1283258db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c2:e1:78:be:c8:f9:95:35:ff:b7:ad:20:f9:
3a:2d:67:22:07:ee:d0:15:6c:fd:43:4f:2c:84:08:
ad:30:85:67:1f:c5:e7:3c:2b:2e:34:bc:a2:e2:40:
44:6e:80:6f:d9:a9:bc:5d:64:36:27:90:50:2a:8d:
3d:71:93:72:8d:ff:25:8b:76:c7:a0:ca:e2:8c:c7:
cb:10:af:9f:cf:0c:18:d1:b4:59:6b:d8:53:42:eb:
13:29:67:ee:76:0e:7b:64:25:83:83:f4:dd:39:2f:
6f:42:6b:2f:38:9b:21:bb:48:c4:f7:b2:01:42:6c:
65:5b:a8:3b:3c:b1:da:75:a1:d0:2c:b2:10:e5:b6:
fd:94:9f:09:71:96:e8:84:c1:e0:0a:49:27:b7:a1:
b2:1a:7c:75:29:36:c6:ba:c0:7e:e8:eb:61:c3:b3:
e0:52:4a:88:32:92:f6:fe:3b:de:29:30:17:2a:88:
ae:19:e2:b8:ae:63:ff:44:41:80:fd:3a:15:27:40:
fb:8e:82:4e:4c:8b:60:bc:ed:f1:90:08:56:a0:4e:
70:4e:27:c6:e5:5f:26:58:d7:9b:51:b3:20:1b:d0:
d1:93:b8:a7:17:40:98:c8:5a:05:38:9b:17:13:29:
d0:24:3f:b4:13:03:ba:51:f4:10:f5:91:55:5a:95:
ec:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:25:D4:FF:6C:9C:29:64:AB:B2:19:AA:16:43:3E:12:83:25:8D:B3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/myXU_2ycKWSrshmqFkM-EoMljbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:6a:98:b9:62:4c:af:c1:b7:bb:2f:0b:1b:77:0c:82:4b:ee:
d2:4c:a7:07:e3:bd:49:3f:2f:71:a9:6b:47:d4:30:5b:eb:06:
7b:e8:39:ca:06:b2:82:46:55:97:3f:2f:b2:87:8d:54:ab:62:
a8:4b:af:d8:ee:96:59:85:ef:29:f8:57:1b:89:2a:cb:87:79:
5b:f8:ed:79:3f:d6:b5:24:80:df:d3:a7:ed:d1:ec:46:33:3c:
c3:34:3d:bb:08:77:3f:85:33:4e:a6:c0:fc:3f:f9:7c:f3:54:
b9:01:bd:22:80:4b:e2:77:db:89:76:d1:95:77:04:b9:58:ef:
bc:1e:3f:ab:58:70:75:0a:cb:3d:7d:5a:b1:73:55:ff:a4:58:
00:d4:57:32:b8:f7:82:35:42:9e:d2:3d:78:18:08:f7:d0:37:
5f:80:82:41:50:48:d9:63:56:98:45:22:5d:e9:45:68:ff:cb:
fe:5b:62:01:22:df:9c:e9:77:3a:a8:8d:b9:0f:7a:b3:0b:5d:
02:68:1f:fe:ce:58:31:bb:64:2b:13:82:91:9e:7f:15:c6:60:
f3:cb:95:bb:75:36:14:2c:3f:8b:bc:c2:80:a1:99:c3:d9:65:
cf:1f:04:78:ae:13:90:11:31:a6:d8:74:20:a2:8f:e3:ea:11:
ef:26:2e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 01:11:45 2024 by rpki-client on console-ams.rpki-client.org