Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ySeN3R4QEAnNv02W6eQnlaqES6I.roa
File: ySeN3R4QEAnNv02W6eQnlaqES6I.roa (raw, json)
Hash identifier: jaKvxYPYF3XXGSjB2iK8Ybr2p+5OZrwiYpRn4dOhoFs=
Subject key identifier: C9:27:8D:DD:1E:10:10:09:CD:BF:4D:96:E9:E4:27:95:AA:84:4B:A2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EEB24C853269C08B449510E33DDFBA5EC
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ySeN3R4QEAnNv02W6eQnlaqES6I.roa
Signing time: Wed 17 Apr 2024 08:20:40 +0000
ROA not before: Wed 17 Apr 2024 08:20:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213382
IP address blocks: 89.213.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:eb:24:c8:53:26:9c:08:b4:49:51:0e:33:dd:fb:a5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 17 08:20:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9278ddd1e101009cdbf4d96e9e42795aa844ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:0c:c8:f1:f6:87:e5:68:cd:ee:b7:3c:17:
23:ab:ea:4c:c9:10:c8:2d:6c:d2:88:21:31:9a:79:
22:88:9a:32:88:64:28:44:6c:66:a8:b8:e6:1d:3b:
58:34:a0:44:5c:27:19:61:d2:fd:ef:06:0d:62:c2:
27:a6:32:3e:51:08:fe:00:d4:92:aa:56:41:85:d4:
60:e0:f2:09:b3:36:b9:5f:f6:48:47:f5:df:59:0e:
bb:1a:b2:89:26:99:58:19:2b:6d:73:2b:07:8f:25:
45:2b:c1:06:d1:e6:46:af:af:61:55:17:24:2a:71:
80:e8:61:e9:a7:83:79:b4:0d:47:73:d7:2f:ff:d8:
e0:06:47:37:b1:5a:bf:ce:ba:80:ea:e8:16:dc:62:
cd:7c:13:c6:73:ff:ea:27:63:df:08:31:b5:f6:04:
28:fc:11:0e:17:d5:10:4c:b5:8f:31:d1:eb:e7:9e:
d7:dd:23:2a:73:ae:0d:c8:cb:d7:76:e0:4f:2b:63:
71:4b:19:a0:2c:b6:96:c3:90:41:d9:a0:bf:70:07:
05:93:04:99:f6:c8:27:5d:3e:2f:1c:7c:4b:30:dc:
ca:53:52:68:1b:4c:6e:ad:b8:6b:8f:f7:9c:b7:72:
9f:5c:20:02:e7:00:ed:97:cb:2f:27:02:a0:88:49:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:27:8D:DD:1E:10:10:09:CD:BF:4D:96:E9:E4:27:95:AA:84:4B:A2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ySeN3R4QEAnNv02W6eQnlaqES6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.120.0/24
Signature Algorithm: sha256WithRSAEncryption
01:0b:99:f6:54:89:77:db:b5:e8:23:53:3a:31:74:e9:03:a8:
17:b1:a5:b3:05:f7:59:6d:18:9d:64:2e:21:4e:9d:c0:e2:37:
a0:3f:c4:ba:cb:ad:84:7f:23:2c:1f:e7:3f:ee:30:06:bc:4d:
de:82:19:b9:34:7a:1e:54:2c:c8:3c:02:29:a4:1c:71:28:c5:
c4:51:dc:0b:63:8f:47:be:96:65:3f:af:4b:60:36:fe:fb:99:
e3:21:65:b4:f9:02:d8:15:a4:43:57:5d:aa:17:e0:2d:a0:34:
2c:54:ba:dc:e9:fd:26:74:16:fa:b4:44:86:50:fc:1e:24:2b:
d4:2f:08:6e:8f:0c:d3:7c:ad:8f:9d:27:7b:c8:34:f0:d8:f1:
c4:4c:a7:fa:2d:cb:00:d0:2f:c7:d8:9b:36:8e:32:8f:30:96:
9c:cf:45:65:76:7b:dc:49:76:00:2a:89:8f:26:e1:7f:c8:1e:
8e:f8:e2:fa:7d:c7:be:df:df:58:41:e8:80:b9:de:fb:ed:de:
cc:3e:82:22:2a:39:4d:14:4c:10:5d:4c:c7:59:bb:8e:0a:c3:
0e:62:a1:eb:af:89:9c:09:dd:15:e0:7a:68:db:fc:5e:30:0a:
72:28:db:73:e8:0b:60:9d:9f:41:12:04:31:fc:dc:f9:65:35:
d5:98:93:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 04:46:00 2024 by rpki-client on console-ams.rpki-client.org