Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/39xFW6sdd6BO0bjRoOuGUd3p5Q4.roa
File: 39xFW6sdd6BO0bjRoOuGUd3p5Q4.roa (raw, json)
Hash identifier: mjGO+YovesS/gunzN98msUNGsPdxW9TPFfxj13PTbyE=
Subject key identifier: DF:DC:45:5B:AB:1D:77:A0:4E:D1:B8:D1:A0:EB:86:51:DD:E9:E5:0E
Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Certificate serial: 0192427B96EE9C2850B3068797FF996926D1
Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/39xFW6sdd6BO0bjRoOuGUd3p5Q4.roa
Signing time: Mon 30 Sep 2024 10:30:48 +0000
ROA not before: Mon 30 Sep 2024 10:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216292
IP address blocks: 83.101.164.0/22 maxlen: 22
83.101.164.0/24 maxlen: 24
83.101.165.0/24 maxlen: 24
83.101.166.0/24 maxlen: 24
83.101.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:7b:96:ee:9c:28:50:b3:06:87:97:ff:99:69:26:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4
Validity
Not Before: Sep 30 10:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfdc455bab1d77a04ed1b8d1a0eb8651dde9e50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:09:28:ab:82:90:66:07:c7:d3:3d:46:fa:
85:08:be:ad:b0:4e:b3:b9:e5:56:c5:02:0d:70:6a:
03:f7:99:67:31:c4:75:dd:40:ca:d4:e8:a4:a8:86:
5c:7c:44:b3:90:91:c4:e8:4b:e1:c9:31:e1:35:47:
16:97:ad:5d:77:62:54:a0:d8:35:40:90:18:e1:85:
52:1e:2e:1c:4a:f0:b3:06:bd:e5:45:75:dd:d4:f3:
86:81:79:ad:8c:b9:1b:4c:27:70:94:5a:d7:82:e3:
96:64:70:77:62:35:42:db:b7:b6:5d:f7:92:f0:7a:
5d:81:25:a9:3b:80:b7:36:0f:36:6c:44:ce:bc:2e:
be:95:55:b2:11:e8:92:09:43:6a:83:8d:cb:1c:97:
c7:54:69:49:e8:e4:4b:e7:9e:fc:c5:d0:32:6e:ba:
0e:0b:1d:61:3c:34:2a:75:af:04:99:dd:2f:04:af:
46:fb:64:56:e9:20:6c:3a:9a:5d:f3:8e:c4:72:23:
25:16:33:11:b3:90:06:09:9e:2a:ba:81:8e:a3:e7:
1d:7c:d9:08:79:78:68:23:c9:e5:62:ff:3e:78:31:
ae:49:72:e1:71:20:06:5b:d1:57:c3:20:af:58:a4:
09:cd:27:87:8a:91:2f:17:e2:70:78:c6:bb:12:7c:
04:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DC:45:5B:AB:1D:77:A0:4E:D1:B8:D1:A0:EB:86:51:DD:E9:E5:0E
X509v3 Authority Key Identifier:
keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/39xFW6sdd6BO0bjRoOuGUd3p5Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.101.164.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:51:5a:5d:59:1c:e9:ea:ed:e8:1a:d7:de:b9:6d:69:42:35:
63:a5:c8:d4:34:69:28:a2:00:db:1c:6e:ab:d2:c0:62:d5:6d:
a4:9a:45:2d:81:b1:67:72:7d:db:83:1a:59:06:6e:51:78:96:
34:88:2b:58:57:01:81:71:67:61:57:f3:7d:ce:80:5f:30:ca:
bd:2c:e7:72:7e:b6:5a:d6:ef:74:cf:55:62:f1:19:89:6c:9c:
c3:63:62:43:e4:f0:0b:52:ba:c0:3f:01:4d:18:03:ae:25:97:
48:38:02:64:88:f6:1a:8f:50:8a:2f:bb:cd:20:55:37:8f:7c:
e7:87:f8:4c:4a:c3:cb:2b:59:cb:68:e6:bc:8b:d2:1e:be:76:
53:e3:c5:98:43:c5:32:34:fd:d1:3b:19:07:47:f7:39:ee:fc:
7e:b7:ac:93:17:f4:95:d6:06:6b:f7:ac:90:62:12:9b:4b:2f:
2a:ad:b1:53:58:9d:a0:85:db:b3:b6:8a:31:b0:f9:a5:34:79:
e5:a4:a4:ae:28:85:f6:0d:72:e3:b4:fb:26:1b:c8:63:7e:cd:
8c:f6:13:a0:e8:f3:0b:b0:e6:06:ad:5f:60:c7:e6:f6:45:77:
ac:91:1a:2a:c0:f2:20:bc:8a:b8:15:f4:27:5b:29:e7:88:7d:
60:55:b9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:05 2024 by rpki-client on console-ams.rpki-client.org