Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sO8niPS7_iiZERUmvUcMO-VoeMY.roa
File: sO8niPS7_iiZERUmvUcMO-VoeMY.roa (raw, json)
Hash identifier: UrdmOd0A9Iw7mIOSgcvE+MsWtZYchORTwws3St9tEsE=
Subject key identifier: B0:EF:27:88:F4:BB:FE:28:99:11:15:26:BD:47:0C:3B:E5:68:78:C6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0192F81EC77F4F2D6F257C28A3AB52066FA3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sO8niPS7_iiZERUmvUcMO-VoeMY.roa
Signing time: Mon 04 Nov 2024 17:00:19 +0000
ROA not before: Mon 04 Nov 2024 17:00:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205091
IP address blocks: 89.213.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f8:1e:c7:7f:4f:2d:6f:25:7c:28:a3:ab:52:06:6f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 4 17:00:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0ef2788f4bbfe2899111526bd470c3be56878c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:b4:9c:e2:79:cf:84:52:5d:88:5a:2e:38:
f0:94:59:2a:0b:53:c5:b5:d6:6e:68:2e:98:4f:47:
5d:d1:f7:98:ec:b5:96:65:4f:1c:21:fe:71:45:65:
f4:11:a4:3b:1f:d8:e1:6c:16:bb:16:48:40:5a:c8:
d9:81:4b:d2:ab:13:20:74:a3:e8:70:ab:07:49:b0:
f3:2d:b8:80:db:28:dd:c2:4b:e2:36:d5:83:9e:90:
8f:00:93:d3:05:3f:74:c6:49:5d:c9:de:66:2f:4d:
8c:0a:dc:c5:10:d4:b7:d7:7e:90:84:03:33:c3:71:
45:4a:18:ed:b8:d6:b6:87:f8:4e:10:a4:67:a1:06:
89:39:23:74:59:44:b5:80:21:25:bf:b2:6c:55:78:
c8:87:25:a9:46:cc:c2:48:4d:5d:24:85:ff:b1:b0:
92:3a:a3:b7:77:8d:82:0b:9a:e2:01:00:d6:9a:80:
83:d9:b4:93:b5:67:50:48:c0:7c:94:c5:56:24:7a:
c2:b2:fc:11:64:f2:59:f2:f2:2f:33:5c:e6:5d:c3:
74:11:8e:e8:54:79:e5:9b:f9:c6:af:1a:6d:67:ec:
be:d2:2b:ff:df:4c:3c:77:97:ff:89:97:86:c1:b9:
b6:f1:fc:8b:91:1f:27:b1:2d:03:07:d3:0d:24:14:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EF:27:88:F4:BB:FE:28:99:11:15:26:BD:47:0C:3B:E5:68:78:C6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sO8niPS7_iiZERUmvUcMO-VoeMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.238.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:c1:f5:8d:a5:4c:d7:cc:48:4e:ae:f0:c3:fe:43:fa:2f:2b:
52:f3:06:a6:23:e5:57:fb:bf:69:6b:db:8d:38:6e:58:4c:03:
00:ed:07:b2:28:de:ae:2d:d9:a8:07:52:9a:32:46:0b:0c:f6:
f6:c7:71:38:a5:c4:ee:89:86:d7:5b:e1:87:3b:b0:92:2a:31:
2a:a6:12:6e:2a:39:74:d0:4a:8a:eb:58:cc:5e:3d:d2:e0:f4:
05:55:e4:54:5b:62:98:25:d3:b9:86:83:bb:4b:6e:41:78:27:
62:be:4a:35:ac:31:ff:10:1c:de:42:10:35:fd:d0:1d:43:a8:
d6:16:3c:32:1a:fe:b1:7f:cf:bc:1e:fb:46:47:93:7d:f5:dc:
c3:08:3d:7b:d0:65:0b:1f:ea:ba:55:5d:84:54:5a:59:4a:fc:
2e:7d:9b:c1:f1:c7:67:7a:59:d5:d7:c9:b1:dd:52:0b:47:3d:
55:ed:94:bb:62:05:12:b0:f8:f6:e9:b0:e3:12:25:f7:99:c1:
d5:7f:37:56:77:4f:18:ca:08:dc:ab:d9:0d:79:ae:c0:de:8b:
c4:eb:97:28:7e:6c:12:31:58:4e:cb:e1:54:83:51:15:64:dd:
02:2b:0f:ef:a9:e9:b7:29:41:e8:45:46:40:98:06:36:97:23:
42:c1:37:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:23 2024 by rpki-client on console-ams.rpki-client.org