Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/veWIoNl0oAcoH6O6k-L4gV6XUjM.roa
File: veWIoNl0oAcoH6O6k-L4gV6XUjM.roa (raw, json)
Hash identifier: 6YPBVpVzsVqGv5ddI75R0osMJbS7BYO8HF21GzBgE+Q=
Subject key identifier: BD:E5:88:A0:D9:74:A0:07:28:1F:A3:BA:93:E2:F8:81:5E:97:52:33
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01909856F809427D51948DF8FA03F0DD4DF5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/veWIoNl0oAcoH6O6k-L4gV6XUjM.roa
Signing time: Tue 09 Jul 2024 16:32:34 +0000
ROA not before: Tue 09 Jul 2024 16:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53107
IP address blocks: 89.213.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:98:56:f8:09:42:7d:51:94:8d:f8:fa:03:f0:dd:4d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 9 16:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bde588a0d974a007281fa3ba93e2f8815e975233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:1c:d7:c7:22:f7:e4:4f:08:f4:06:7d:f7:
6a:4e:53:00:23:0c:04:aa:eb:65:b4:39:4b:b7:44:
f0:8c:2e:9e:41:15:4c:e4:bf:c5:2c:06:d8:e9:5e:
75:4f:9d:ca:b4:e5:ea:e7:f6:ba:fb:00:e6:cf:be:
2b:eb:4d:a7:0c:d4:a3:7f:1c:6d:1c:44:d2:78:0e:
a9:15:ea:29:52:c7:05:84:00:39:25:8f:7b:38:92:
4e:c5:e2:18:07:55:23:a3:e1:1e:32:3a:6a:16:22:
54:62:cd:e3:3d:04:5f:31:75:0b:1e:95:6b:75:86:
9f:ed:86:14:f5:67:3d:eb:73:c0:d4:9d:fb:14:89:
81:b7:41:e6:fa:18:18:0d:bf:6e:48:f9:03:22:a7:
08:0b:72:a7:ed:f6:ea:f7:31:fe:52:19:f5:d9:ad:
05:55:66:08:a1:76:fd:98:58:2a:e0:17:ae:83:81:
31:a8:20:d4:1e:f5:6e:0d:7a:7f:dc:d9:9b:fb:50:
ae:54:35:87:49:0d:53:67:c2:6f:42:61:32:01:55:
09:6d:2b:f2:da:ff:30:ff:65:8c:94:57:57:be:b1:
92:f9:7a:90:73:b5:bd:f7:bc:63:6c:82:7b:59:d6:
38:87:dc:0e:51:7a:e6:04:78:29:ae:b6:40:96:25:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E5:88:A0:D9:74:A0:07:28:1F:A3:BA:93:E2:F8:81:5E:97:52:33
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/veWIoNl0oAcoH6O6k-L4gV6XUjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.134.0/24
Signature Algorithm: sha256WithRSAEncryption
11:de:cf:29:36:73:1c:8c:38:7f:42:8c:bc:86:f1:1b:ec:0f:
a0:ed:1b:b7:b7:ab:99:7d:76:a4:8a:82:f2:e6:b9:e9:8c:3b:
02:4f:a9:aa:38:d9:9a:05:97:89:1d:41:36:e6:49:c0:44:2e:
c6:0e:27:25:37:ee:5b:90:6c:4b:5c:6e:2a:aa:2c:1b:f5:05:
da:3a:68:79:97:8d:c2:44:1c:36:74:95:c7:b4:20:54:47:58:
2b:cc:e1:cf:50:54:57:2f:73:e8:d3:6f:16:23:df:c4:9e:e2:
32:bc:54:e0:a6:93:13:7e:0a:52:6c:c7:aa:14:30:bc:c5:fc:
9c:4c:88:04:7e:c1:8c:93:fd:52:5e:06:3d:eb:0f:b3:85:4b:
91:60:7c:fc:35:2f:5a:c0:2a:10:98:3a:e0:f6:81:b2:d7:19:
20:48:5d:f3:67:e6:12:99:37:da:79:71:ad:7b:48:75:3b:15:
e4:9d:3b:b8:38:70:98:47:c8:6f:7f:16:bd:10:ef:09:d5:8e:
d8:69:56:7c:2e:57:e1:bd:b1:13:75:23:f9:c3:f0:77:d9:65:
66:79:2c:2e:df:12:2f:4f:01:33:4d:30:5c:93:7f:73:7a:2e:
f9:a3:94:3e:24:03:1d:51:6f:e8:c1:40:87:7c:f4:75:19:8f:
f1:4a:53:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:16 2024 by rpki-client on console-fra.rpki-client.org