Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ppYqOcm8XlAVMXgXkZmMDu23emk.roa
File: ppYqOcm8XlAVMXgXkZmMDu23emk.roa (raw, json)
Hash identifier: DzphqP85j7fZNqvFCTP5F5/rmk2NJ/V5bq2jy6G+NJc=
Subject key identifier: A6:96:2A:39:C9:BC:5E:50:15:31:78:17:91:99:8C:0E:ED:B7:7A:69
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649DBBE1ADC95363BC1EE9B87C6C503
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ppYqOcm8XlAVMXgXkZmMDu23emk.roa
Signing time: Mon 01 Jan 2024 18:29:38 +0000
ROA not before: Mon 01 Jan 2024 18:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43651
IP address blocks: 82.147.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:db:be:1a:dc:95:36:3b:c1:ee:9b:87:c6:c5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6962a39c9bc5e501531781791998c0eedb77a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:64:56:52:2b:bd:9e:84:bb:70:8e:a4:4f:2d:
d7:56:a4:18:d5:4f:8b:99:9d:52:b7:5b:35:15:94:
31:70:8e:f8:d3:71:2f:ed:9b:71:75:9d:3a:f4:15:
c4:f9:e5:2b:27:13:44:7d:90:cc:73:35:5d:dd:e5:
e7:18:c2:d4:4b:a4:14:6e:f8:0d:f2:27:98:d8:fe:
b5:eb:39:f8:a9:8b:9c:bb:d0:0b:57:0d:aa:3b:63:
2f:29:c6:98:3c:ef:42:73:f7:88:5f:fa:6f:ea:3f:
66:bd:b5:65:fa:b2:0c:93:15:eb:56:97:eb:51:7c:
4c:ec:78:96:e0:85:9d:62:f5:16:62:b2:82:c6:1e:
c5:b7:82:09:fc:d1:c0:59:57:6b:f1:2d:00:90:dd:
e6:b2:bf:d3:05:a8:5e:8f:39:75:bc:f1:4f:d2:67:
51:5e:b9:b2:a7:5d:2c:dc:e4:33:12:ea:25:f6:8f:
9e:75:45:56:3e:6e:8c:e1:3e:35:44:cb:c7:36:a8:
4c:96:bb:5f:a0:60:15:ef:00:c8:00:04:a7:d1:ae:
a4:16:61:b1:e8:49:e5:12:76:25:73:62:5f:80:f8:
9c:5b:dc:b5:d1:e4:d3:24:4c:f4:cf:4e:77:dc:53:
cd:3e:a8:8c:5e:58:7f:3e:92:33:7b:c3:c0:06:3c:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:96:2A:39:C9:BC:5E:50:15:31:78:17:91:99:8C:0E:ED:B7:7A:69
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ppYqOcm8XlAVMXgXkZmMDu23emk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.147.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:0c:d9:2c:54:22:a8:af:fe:9a:92:15:d5:c9:7f:32:1d:0f:
d1:83:c5:d3:3a:99:e8:0b:76:f2:42:a6:7e:a6:37:3f:fd:7e:
c0:73:c2:e2:32:03:3b:a1:c7:f3:55:78:e3:b7:00:eb:8c:06:
01:6a:a1:3b:d7:8a:11:86:4d:57:fa:a7:10:7e:04:04:52:d0:
d6:19:8f:dd:5e:57:ae:a3:6b:7f:d5:b5:7f:48:5c:c3:09:b3:
f1:52:0b:c2:5b:40:3b:05:b3:ff:73:ed:a4:94:92:07:e5:4a:
20:bf:30:dc:71:93:50:14:aa:08:48:cf:57:0a:44:21:a7:49:
ee:57:2d:a6:80:ef:47:d0:ff:d0:fd:cc:c1:53:84:f2:0e:d8:
c1:f9:af:44:17:95:fe:cd:cf:8a:54:af:5e:ea:4f:d4:42:3d:
f6:83:29:d3:eb:32:06:c1:5c:e8:c1:21:4e:44:2c:44:82:13:
04:5a:b1:4c:cd:b7:44:a2:b0:66:de:60:0e:46:db:d5:b7:28:
51:0d:54:f5:14:6c:2d:39:98:6b:78:91:7c:5d:df:00:7d:e9:
da:76:cd:a9:d4:92:a7:bd:14:a9:fe:2f:ad:dd:0c:67:ba:03:
d7:87:93:da:87:98:72:cd:11:2f:49:4a:47:51:c2:64:e7:ff:
76:5c:7b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:59:05 2024 by rpki-client on console-fra.rpki-client.org