Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/k_dtqLzf1SqUZ4uY2tu67gdta9I.roa
File: k_dtqLzf1SqUZ4uY2tu67gdta9I.roa (raw, json)
Hash identifier: 7FcCWD2AZv7USc/7W8jHcTea+NPBfPRgMw4w1Zh+iww=
Subject key identifier: 93:F7:6D:A8:BC:DF:D5:2A:94:67:8B:98:DA:DB:BA:EE:07:6D:6B:D2
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 018CC794244831FCA0D32FD93E9A02534BD6
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/k_dtqLzf1SqUZ4uY2tu67gdta9I.roa
Signing time: Tue 02 Jan 2024 00:30:23 +0000
ROA not before: Tue 02 Jan 2024 00:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50065
IP address blocks: 82.135.216.0/24 maxlen: 24
195.12.182.0/24 maxlen: 24
2a00:1eb8:c001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Jun 2024 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:24:48:31:fc:a0:d3:2f:d9:3e:9a:02:53:4b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 00:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93f76da8bcdfd52a94678b98dadbbaee076d6bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:0a:dd:48:a9:af:a0:39:0f:1e:b7:be:df:
c6:e2:bc:21:a8:2d:a0:90:59:39:31:25:10:70:9b:
e4:9d:d4:e7:0c:3f:bb:c4:d5:18:03:6b:1a:f2:47:
32:45:14:4e:d5:39:e1:a7:71:a0:36:cb:c4:6e:22:
00:d8:bf:d8:3c:c6:6e:34:80:00:b2:99:f4:54:b9:
35:e5:19:53:9a:d6:67:ba:10:7b:62:df:64:f4:54:
9a:e7:ef:01:41:2f:88:d2:ef:94:10:64:66:61:47:
34:22:7a:b4:9b:58:64:cf:44:56:6a:75:3f:f6:40:
48:80:ac:13:84:2a:12:8b:c2:92:53:8c:f3:71:07:
b0:54:21:2f:b0:eb:a0:c2:54:8b:da:1c:93:c9:73:
b8:51:46:c1:f0:b8:c5:9b:b5:f8:e4:5e:ff:7c:40:
b4:ea:6b:ef:bc:00:dc:56:dd:35:c9:44:6f:ea:91:
98:a2:86:c9:4e:26:4d:db:e4:bd:2c:03:61:9e:5c:
cf:b4:2e:10:39:de:39:54:95:7e:f2:d3:63:00:4f:
4e:9c:16:81:20:0b:f2:21:b2:7c:c1:74:45:ed:b3:
43:2f:73:00:09:70:87:d9:db:07:3c:0c:d1:72:40:
58:54:91:12:b9:15:52:1b:43:78:fd:c1:63:0a:9a:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F7:6D:A8:BC:DF:D5:2A:94:67:8B:98:DA:DB:BA:EE:07:6D:6B:D2
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/k_dtqLzf1SqUZ4uY2tu67gdta9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.135.216.0/24
195.12.182.0/24
IPv6:
2a00:1eb8:c001::/48
Signature Algorithm: sha256WithRSAEncryption
88:48:6a:07:b8:5b:94:aa:fe:96:f6:4e:41:2a:df:02:b2:e3:
d1:c2:55:27:66:66:9f:ac:9e:89:02:ee:db:ce:07:57:fb:dc:
88:fa:b5:6b:37:9b:eb:9f:cc:0c:b5:70:a3:62:be:74:c0:2c:
2f:a6:d0:3d:1a:ef:fa:57:7a:e3:33:e4:07:65:1f:96:0a:4a:
99:d9:5e:c0:23:ea:cd:4a:b4:4f:22:5e:0e:a1:3f:d0:4a:03:
d8:69:cc:2c:cb:69:c6:10:33:c4:4c:5c:68:c4:70:b7:ea:7e:
0f:c3:56:a0:fe:57:53:6c:ea:c9:f8:a3:9b:1d:fb:01:d6:ae:
36:7b:cc:14:19:2a:82:13:94:97:75:df:6a:62:1f:4a:5a:7a:
a3:5e:af:94:24:50:64:d1:39:12:71:be:7e:40:10:b6:02:be:
a5:2e:5f:89:84:d1:5e:23:02:7e:cc:13:90:a4:16:c7:f5:54:
3b:b2:c1:17:14:6b:a4:ba:f3:de:f0:3f:1a:64:59:da:40:36:
f3:29:5d:8d:b2:16:b3:6c:d4:cc:e4:80:a2:94:4c:8a:04:85:
2f:ea:c6:6a:fa:c3:9f:0d:1d:e5:4e:da:99:45:ce:73:29:b8:
3d:45:ff:c0:3a:25:c0:f6:5d:01:1d:c3:3c:c4:04:02:d1:b7:
6b:40:a1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 10:35:06 2024 by rpki-client on console-ams.rpki-client.org