Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5ihtbpXvSCRn23mIYFJJXGJmCu0.roa
File: 5ihtbpXvSCRn23mIYFJJXGJmCu0.roa (raw, json)
Hash identifier: SgRm3ZSF7KYagPrLthAeMYQf/L9LORiyVarAE9cPcAg=
Subject key identifier: E6:28:6D:6E:95:EF:48:24:67:DB:79:88:60:52:49:5C:62:66:0A:ED
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EE0C36B7AD10BC0EF07A289124643F7ED
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5ihtbpXvSCRn23mIYFJJXGJmCu0.roa
Signing time: Mon 15 Apr 2024 07:58:07 +0000
ROA not before: Mon 15 Apr 2024 07:58:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 82.153.255.0/24 maxlen: 24
82.163.10.0/23 maxlen: 24
89.213.127.0/24 maxlen: 24
109.176.14.0/24 maxlen: 24
109.176.30.0/24 maxlen: 24
213.218.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e0:c3:6b:7a:d1:0b:c0:ef:07:a2:89:12:46:43:f7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 15 07:58:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6286d6e95ef482467db79886052495c62660aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:84:8f:98:26:7f:9d:bf:77:ec:ac:87:dd:
0f:9b:87:e4:13:ff:51:c8:fc:5a:04:aa:04:50:b0:
7b:ad:ef:0d:3c:6d:c8:69:9a:f6:35:a2:e1:74:f2:
20:74:c6:08:e5:5d:f4:d9:16:ad:48:4e:f3:19:19:
5f:d7:e4:7f:01:3c:5d:53:3a:90:44:82:a1:46:18:
aa:04:28:8e:f3:60:9f:d7:b9:86:8b:5a:6b:f9:9c:
e7:24:d9:19:2d:09:ca:e3:41:54:4a:7e:eb:e2:7f:
bc:51:ba:5b:00:25:7e:d6:a7:14:4b:27:a8:37:6d:
81:d3:c9:19:0f:1e:ac:bd:0d:bf:af:b3:42:68:fc:
0a:0f:36:88:ac:06:d9:11:bc:e2:c2:f4:28:7e:ab:
1f:7c:13:a8:34:bf:5d:86:9f:7b:01:6b:08:da:33:
97:66:d3:6d:7d:80:51:20:ec:ea:5e:de:f7:99:78:
6e:2b:b7:46:e3:ab:89:5c:2f:7a:b8:1d:92:17:2f:
91:96:b4:4b:3b:8f:e7:d5:77:95:92:bd:d6:35:f1:
b3:ea:00:47:13:ee:ab:86:13:9e:4d:27:19:23:16:
fa:cd:32:8a:6d:b5:e1:62:4b:8e:01:8b:7f:3c:6b:
9e:0b:99:f8:74:7e:48:7e:4d:20:47:8e:09:fa:1f:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:28:6D:6E:95:EF:48:24:67:DB:79:88:60:52:49:5C:62:66:0A:ED
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5ihtbpXvSCRn23mIYFJJXGJmCu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.255.0/24
82.163.10.0/23
89.213.127.0/24
109.176.14.0/24
109.176.30.0/24
213.218.248.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a4:e6:4c:51:12:9e:a2:86:dd:d8:c3:d9:4a:13:27:ef:2a:
3f:6e:ff:0d:9d:8b:c4:99:9a:50:98:58:1e:8c:91:dc:1c:96:
9e:8a:c8:b2:12:84:79:98:75:3b:2f:ec:05:1c:00:ea:95:ae:
5c:9e:12:8d:36:80:93:7f:a1:21:98:75:71:6b:c1:91:d8:1c:
07:66:16:97:5e:70:04:a4:3c:7d:12:e3:42:05:06:c8:d4:35:
3f:f3:f2:ee:1c:ba:72:49:0a:48:9e:82:f7:0b:a7:14:e8:b5:
2e:ab:2a:4d:fd:a1:80:8f:c1:d2:d5:2c:cf:f8:e1:00:e3:a2:
b5:30:d5:23:4b:67:75:d8:29:5c:01:63:80:73:08:e5:84:25:
73:c4:4a:09:5d:2e:ba:1a:25:ce:68:86:46:26:9d:9d:74:66:
62:b7:58:39:08:5f:2b:e3:ef:2d:75:b6:08:92:4b:93:f7:c6:
2e:8c:4d:f7:35:a4:9a:8b:19:56:43:0f:cd:24:5e:1c:91:2a:
24:39:5e:b2:ec:16:55:b0:99:e0:be:c1:28:5c:55:11:78:be:
33:38:59:71:eb:9a:c4:68:64:68:69:6f:11:13:e9:49:93:40:
71:2b:4d:93:40:07:d7:cd:1c:20:bf:3a:6e:1a:ab:92:e0:cc:
d9:2a:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:05:21 2024 by rpki-client on console-fra.rpki-client.org