Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Sf_i3Bmx4ySVA7Iwye32FSRVuak.roa
File: Sf_i3Bmx4ySVA7Iwye32FSRVuak.roa (raw, json)
Hash identifier: RlUH2hLOTJSoR8MHO5JIONV25gZJUgrNsjYtxwosYXA=
Subject key identifier: 49:FF:E2:DC:19:B1:E3:24:95:03:B2:30:C9:ED:F6:15:24:55:B9:A9
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC50123A690F29C4D10F7FFB9BB9A8758
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Sf_i3Bmx4ySVA7Iwye32FSRVuak.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203039
IP address blocks: 89.36.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:23:a6:90:f2:9c:4d:10:f7:ff:b9:bb:9a:87:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49ffe2dc19b1e3249503b230c9edf6152455b9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:11:fd:c3:2c:30:29:96:cd:b4:9a:59:0b:
e8:16:8a:47:f2:10:3d:bb:fb:1a:4c:e6:a8:8d:a0:
99:a4:ed:12:ec:95:2d:e9:ad:72:4c:70:3b:60:ba:
c1:99:59:d2:a3:29:df:51:d7:d5:e3:ef:c0:8d:6f:
9b:59:93:5b:25:1c:1c:51:5f:a1:a0:16:b2:6e:a4:
33:db:ad:82:7f:6e:b7:cb:05:d4:79:f5:81:d8:bf:
20:7d:f5:1f:78:17:3b:78:fc:96:a2:db:87:b7:f5:
89:44:30:6e:f0:04:e5:31:8e:fb:45:99:3a:fb:6d:
4c:73:58:8f:ae:76:4a:1f:eb:2a:04:7c:3f:90:b1:
92:e6:39:04:c5:e6:9b:f4:02:e4:8d:7a:18:ab:a8:
8d:af:c2:2d:a8:10:36:9f:c9:cd:99:52:57:2e:07:
c3:f7:19:30:4c:be:38:56:a0:f4:1a:97:a4:d2:c5:
55:53:1e:75:47:cc:0e:05:a3:c0:cf:8c:e4:5f:94:
fb:a4:ee:44:a1:ec:41:b4:31:cb:11:60:4f:00:54:
20:7f:e3:d9:ad:f7:45:7e:26:ef:ab:31:2c:ad:bc:
e1:68:51:ad:9d:ef:a1:15:d2:bb:7d:39:60:55:f3:
bf:0e:50:94:b3:b3:5b:ee:c7:88:cc:36:ed:a5:d2:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FF:E2:DC:19:B1:E3:24:95:03:B2:30:C9:ED:F6:15:24:55:B9:A9
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Sf_i3Bmx4ySVA7Iwye32FSRVuak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.22.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:df:b3:4e:7b:78:31:59:ee:d7:9b:c8:83:2b:97:f1:71:bd:
cb:29:2f:ee:67:0d:c0:0e:b8:32:3f:95:b1:b7:c9:e9:a0:5a:
f1:b3:ff:f4:44:35:5d:9d:95:8b:05:8b:a8:b1:f6:2c:e1:f9:
f1:d6:bb:f5:9c:ee:0c:fa:22:2e:ef:28:91:a2:42:01:06:5d:
2c:89:f7:71:1b:24:6c:e4:b4:45:4c:9e:77:ee:9a:ef:6f:11:
5c:59:6b:9c:e3:9a:86:4a:bd:23:c7:7c:49:3f:33:27:47:a3:
d8:73:10:76:67:ed:25:4d:87:78:b6:25:fb:96:ef:41:f7:79:
cb:db:20:a6:a1:ab:33:79:bd:c3:3d:27:b0:98:1b:50:22:bf:
2d:47:b3:bd:ce:dc:28:90:33:3f:6f:0a:01:2b:58:33:bc:be:
ed:f2:97:71:50:23:5a:5c:9f:bb:43:e4:2d:36:2e:aa:d7:2a:
72:2f:45:26:13:2c:c4:a6:7e:75:37:18:79:f8:a5:7c:b8:5c:
34:7b:80:f8:94:18:dc:78:8f:f8:47:2d:0d:f6:3b:56:f5:19:
8a:34:b6:a2:3d:fc:9f:d9:48:7a:ac:ce:e7:6e:66:25:c4:8b:
5c:46:e6:ff:a4:3d:80:eb:cd:dc:78:09:f4:67:d5:79:36:85:
9d:bc:e3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:51:20 2024 by rpki-client on console-ams.rpki-client.org