Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i10vtRaU0eykaCeByp-bIfruR7k.roa
File: i10vtRaU0eykaCeByp-bIfruR7k.roa (raw, json)
Hash identifier: xU/LTEuZ9EBiA1wut+ui1GkVo2Ih20ZDVUrvgjC/9l4=
Subject key identifier: 8B:5D:2F:B5:16:94:D1:EC:A4:68:27:81:CA:9F:9B:21:FA:EE:47:B9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019002D9EDACB8BDC90C41B764FC40350DB6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i10vtRaU0eykaCeByp-bIfruR7k.roa
Signing time: Mon 10 Jun 2024 15:52:34 +0000
ROA not before: Mon 10 Jun 2024 15:52:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214751
IP address blocks: 82.153.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:02:d9:ed:ac:b8:bd:c9:0c:41:b7:64:fc:40:35:0d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 10 15:52:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b5d2fb51694d1eca4682781ca9f9b21faee47b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:47:ba:05:90:19:f7:fb:d4:b7:76:9e:e8:
97:6b:e8:57:47:37:ad:4e:6b:34:ab:e5:4f:3a:b5:
02:dd:85:a3:b3:33:18:a5:28:4d:76:10:67:49:87:
1b:59:ba:c0:de:ac:af:ec:b1:96:67:51:ba:3b:79:
b1:81:4f:d5:40:c4:36:06:70:97:0e:d4:31:4f:a1:
a8:e7:5b:be:cc:ff:29:00:d0:31:e0:f2:00:d6:81:
69:25:a7:d5:1f:f6:a8:e4:22:07:b2:af:17:93:d9:
d9:5f:8c:a5:0f:3d:ad:3b:79:99:94:09:b7:8c:6e:
74:ea:2c:32:ee:a5:42:e2:b1:ff:bf:d5:67:30:2d:
dc:bf:a8:07:20:f1:71:d1:63:30:74:35:8e:95:0e:
f9:55:01:f7:45:08:6f:7a:21:ec:ad:52:df:fc:15:
be:2c:fe:ca:88:28:6c:7f:af:23:fe:da:ce:e0:a2:
4f:d4:44:d3:d4:2c:bd:a2:23:66:73:df:6e:d5:62:
a5:9b:11:86:36:46:9d:c3:4e:99:85:a4:27:83:57:
02:88:3e:a5:08:17:dd:55:69:ae:6d:d4:7d:85:ff:
5f:d8:fa:61:78:5f:c9:a0:a8:2d:28:b3:d4:7d:98:
72:e2:2d:3e:4a:ae:8e:a9:05:db:2d:7e:98:a1:e5:
9d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5D:2F:B5:16:94:D1:EC:A4:68:27:81:CA:9F:9B:21:FA:EE:47:B9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/i10vtRaU0eykaCeByp-bIfruR7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.205.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:2d:cc:1b:5e:0b:67:ae:20:9d:fe:0e:ca:96:d2:71:91:61:
44:bd:aa:db:79:e0:70:9a:13:68:94:60:e7:98:9b:76:dd:4b:
32:4b:ba:28:89:e2:34:3e:c9:1e:3d:cc:62:ed:d0:30:98:84:
1f:f9:7e:d3:f4:da:9f:9a:7b:9d:19:54:28:95:1c:a3:0e:53:
88:a4:c5:38:9d:0c:6e:83:81:28:b6:f0:c3:cb:76:f1:c5:60:
d0:c2:77:05:e2:78:62:8b:08:4b:e8:4c:c7:86:fc:a0:89:02:
a9:1e:74:52:89:67:ca:a7:f9:d7:92:cb:c0:d5:55:36:ee:39:
2c:f2:b9:aa:43:2b:2e:36:48:21:c8:d9:41:44:52:80:5d:bf:
f6:2a:db:78:f9:10:6d:be:d0:ed:c5:03:5f:f9:b4:e9:e5:95:
62:17:0a:72:7e:48:51:43:74:db:78:f9:83:a2:15:b8:cc:63:
d5:b9:2c:61:42:cd:a5:58:5f:7e:d0:b5:02:0a:9d:a7:5d:1b:
c6:27:28:3b:fd:c4:f4:2e:5b:f2:93:dc:ee:9e:17:ea:26:8f:
0e:5a:57:8c:03:42:be:da:f9:da:8b:56:4a:fb:2b:7d:92:bf:
00:70:71:32:f1:a5:3d:58:35:29:73:2e:65:e2:12:36:ae:21:
7e:1d:66:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 10:38:34 2024 by rpki-client on console-ams.rpki-client.org