Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/48d3pZkew3rxezMejQI5zfUMEJ8.roa
File: 48d3pZkew3rxezMejQI5zfUMEJ8.roa (raw, json)
Hash identifier: BXu7zVlnIp2UxdG5sQfu5OhfPBOgbJRAottTz+SXryc=
Subject key identifier: E3:C7:77:A5:99:1E:C3:7A:F1:7B:33:1E:8D:02:39:CD:F5:0C:10:9F
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 018CC56E1C42B10A6881D35D5C82C8E08D12
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/48d3pZkew3rxezMejQI5zfUMEJ8.roa
Signing time: Mon 01 Jan 2024 14:29:36 +0000
ROA not before: Mon 01 Jan 2024 14:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200403
IP address blocks: 82.114.48.0/24 maxlen: 24
82.114.49.0/24 maxlen: 24
82.114.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1c:42:b1:0a:68:81:d3:5d:5c:82:c8:e0:8d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 14:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3c777a5991ec37af17b331e8d0239cdf50c109f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cd:db:06:44:e3:5e:3f:ea:cb:4c:5d:73:56:
ea:bc:29:55:24:df:d9:44:ac:61:f3:31:33:ee:bf:
d2:35:d8:56:71:8e:99:c1:25:53:10:77:4e:83:9a:
ed:d3:62:ac:01:8c:97:17:3a:8a:6d:b2:41:17:bc:
fc:bc:6a:df:bb:a0:08:62:1e:99:e1:64:d6:d6:4f:
91:0e:9f:d3:6b:77:38:8b:7a:ec:3c:63:46:c4:96:
8f:11:6f:8d:e2:60:b2:8b:18:a0:c7:3c:8e:c0:0c:
9c:a0:e5:e4:40:c4:58:53:c6:83:80:2a:df:78:8b:
7c:9d:4e:93:36:cf:82:5e:13:ea:7a:bf:6f:bd:81:
b2:ea:6d:6e:0c:03:92:42:44:6f:64:63:d7:0a:71:
b7:f0:3f:8e:28:25:2c:a4:f3:49:fe:59:f4:19:84:
0a:d0:6f:f0:de:d3:e0:6e:14:7f:f8:c1:cf:07:a9:
66:40:fa:2d:09:6f:66:58:11:5e:c0:34:a3:cd:37:
11:d0:72:f5:0c:44:26:73:b0:6b:da:6b:c8:e0:5e:
77:aa:08:ec:22:5c:2c:e6:c9:8d:16:52:8c:e1:6e:
59:8b:a5:d4:cb:ee:c0:54:2f:91:80:c9:48:fd:d9:
e7:ce:d9:c4:73:62:82:c6:51:5b:76:f0:9c:d3:69:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C7:77:A5:99:1E:C3:7A:F1:7B:33:1E:8D:02:39:CD:F5:0C:10:9F
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/48d3pZkew3rxezMejQI5zfUMEJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.114.48.0-82.114.50.255
Signature Algorithm: sha256WithRSAEncryption
cc:d2:1c:c8:ae:b7:0c:2d:39:f8:6f:9b:83:24:d7:8f:22:f4:
5e:57:27:0d:21:49:6f:90:4e:62:f7:b0:d3:74:98:75:25:da:
0f:41:4a:f2:ac:4d:16:32:12:2f:ab:35:d9:bf:b1:04:72:8e:
ee:ea:99:dd:de:38:61:54:af:6f:40:6c:e1:28:e9:cf:d5:e3:
45:20:b9:1a:35:91:e6:50:32:f0:a9:b7:be:18:70:a8:a0:3a:
a3:3d:cb:67:ab:3d:c8:40:10:06:6f:5e:1d:df:7b:db:b0:ee:
ab:0c:5a:fa:f9:a3:da:90:ed:58:36:17:3b:1d:f7:9f:de:ac:
f7:ab:33:be:83:92:21:26:cd:78:0c:28:2c:7b:d1:0d:0e:47:
18:cd:ff:79:cf:cf:10:6a:c3:1b:e5:4e:5a:77:c0:e5:6f:2a:
e2:15:24:f0:f3:be:ef:e1:d6:43:1a:f1:d0:d7:1f:8c:6d:7d:
e3:7c:b1:b5:a2:21:df:6d:52:c8:44:7f:39:cd:9f:74:fe:35:
ac:4e:75:8b:a8:70:d9:d6:2d:7a:f1:22:9e:8c:94:dc:69:b9:
22:e7:da:15:b7:5b:96:69:f4:4a:c6:7e:26:0c:a2:78:04:30:
f2:80:7b:a4:0c:55:4f:e3:1b:ea:f1:f5:e1:82:1f:eb:f7:ae:
7b:e3:44:e2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzFbhxCsQpogdNdXILI4I0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw
ZGRhOGIwHhcNMjQwMTAxMTQyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2M3NzdhNTk5MWVjMzdhZjE3YjMzMWU4ZDAyMzljZGY1MGMxMDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM3bBkTjXj/qy0xdc1bqvClVJN/Z
RKxh8zEz7r/SNdhWcY6ZwSVTEHdOg5rt02KsAYyXFzqKbbJBF7z8vGrfu6AIYh6Z
4WTW1k+RDp/Ta3c4i3rsPGNGxJaPEW+N4mCyixigxzyOwAycoOXkQMRYU8aDgCrf
eIt8nU6TNs+CXhPqer9vvYGy6m1uDAOSQkRvZGPXCnG38D+OKCUspPNJ/ln0GYQK
0G/w3tPgbhR/+MHPB6lmQPotCW9mWBFewDSjzTcR0HL1DEQmc7Br2mvI4F53qgjs
Ilws5smNFlKM4W5Zi6XUy+7AVC+RgMlI/dnnztnEc2KCxlFbdvCc02lWqwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOPHd6WZHsN68XszHo0COc31DBCfMB8GA1UdIwQY
MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt
YWUwN2YzMmU0MTAyLzEvNDhkM3Baa2V3M3J4ZXpNZWpRSTV6ZlVNRUo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy
LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARScjAD
BABScjIwDQYJKoZIhvcNAQELBQADggEBAMzSHMiutwwtOfhvm4Mk148i9F5XJw0h
SW+QTmL3sNN0mHUl2g9BSvKsTRYyEi+rNdm/sQRyju7qmd3eOGFUr29AbOEo6c/V
40UguRo1keZQMvCpt74YcKigOqM9y2erPchAEAZvXh3fe9uw7qsMWvr5o9qQ7Vg2
Fzsd95/erPerM76DkiEmzXgMKCx70Q0ORxjN/3nPzxBqwxvlTlp3wOVvKuIVJPDz
vu/h1kMa8dDXH4xtfeN8sbWiId9tUshEfznNn3T+NaxOdYuocNnWLXrxIp6MlNxp
uSLn2hW3W5Zp9ErGfiYMongEMPKAe6QMVU/jG+rx9eGCH+v3rnvjROI=
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:33:42 2024 by rpki-client on console-ams.rpki-client.org