Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/noD2TmgTEc6PuHIvu1QZl8Z6kuc.roa
File: noD2TmgTEc6PuHIvu1QZl8Z6kuc.roa (raw, json)
Hash identifier: WxQgN/JWXHBJAIJvqAI6WUyE1nlmzB9WaZDeFYipcQE=
Subject key identifier: 9E:80:F6:4E:68:13:11:CE:8F:B8:72:2F:BB:54:19:97:C6:7A:92:E7
Certificate issuer: /CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Certificate serial: 018CC9BCC990B8441C7C57E53853A49ADE0A
Authority key identifier: 8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/noD2TmgTEc6PuHIvu1QZl8Z6kuc.roa
Signing time: Tue 02 Jan 2024 10:34:01 +0000
ROA not before: Tue 02 Jan 2024 10:34:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29446
IP address blocks: 82.146.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c9:90:b8:44:1c:7c:57:e5:38:53:a4:9a:de:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Validity
Not Before: Jan 2 10:34:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e80f64e681311ce8fb8722fbb541997c67a92e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:20:37:c5:46:84:39:b4:9d:cf:50:e5:39:93:
e1:3e:f1:83:0b:8a:7e:4e:13:34:c4:ab:43:fd:9c:
df:ad:66:fb:6d:6a:ee:84:1d:d2:2d:1c:a8:00:45:
ba:75:e6:03:82:bd:6f:ff:8a:df:73:1f:e4:dd:f7:
35:89:02:d9:65:2d:af:f6:21:37:db:6a:8b:03:1f:
e9:d6:d0:50:1b:40:34:92:3f:54:06:b4:cf:ec:c8:
95:dd:96:7d:04:55:98:15:c7:8f:8e:f9:de:c4:48:
73:07:a3:ce:e9:5c:f6:d1:fe:69:ae:89:38:ce:d6:
48:92:1c:f6:9d:94:d1:11:4e:20:af:ee:46:1b:a9:
09:92:4a:ae:e8:02:24:22:57:07:18:b6:be:55:fc:
ce:b0:e4:37:1b:aa:e6:4f:17:22:24:74:ed:b6:95:
8d:b3:a5:33:7a:40:bf:c3:55:0a:94:35:01:49:68:
ab:3b:01:72:be:95:75:76:a1:a2:b2:07:2f:85:99:
bc:d2:0a:18:f4:60:59:17:c8:ab:ca:03:2f:92:03:
c1:0b:3e:49:f5:b9:3a:d8:f8:ec:9c:2f:f1:f0:19:
55:8b:21:75:b6:1d:1c:b2:b0:ca:34:84:23:a5:80:
a4:6a:27:41:80:e1:5f:ac:59:a7:a7:0b:76:19:6f:
81:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:80:F6:4E:68:13:11:CE:8F:B8:72:2F:BB:54:19:97:C6:7A:92:E7
X509v3 Authority Key Identifier:
keyid:8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/noD2TmgTEc6PuHIvu1QZl8Z6kuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.128.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:38:1c:4b:29:16:56:96:08:14:3e:b2:ee:4a:cb:0b:45:c1:
0f:58:91:ec:70:3f:d3:0c:b0:3f:44:15:b1:88:ad:eb:d1:2a:
de:66:ac:6c:67:c1:1d:cc:93:e8:8a:de:58:5e:6c:4f:6b:ac:
86:30:9b:e5:f3:0b:ef:f6:e2:6f:f4:d0:85:27:66:b6:d3:1f:
ee:18:39:72:ab:6b:56:94:29:c7:18:86:da:ad:f2:f6:25:5b:
ec:0d:f8:86:15:ac:ca:b4:59:51:af:f4:e9:48:95:3b:40:ea:
89:cb:09:db:d4:fb:a4:11:49:15:aa:43:c2:3f:ef:e5:3e:04:
1f:cd:4b:23:0e:f4:98:ba:50:eb:9d:e8:03:fb:1b:ff:9e:bf:
f1:da:45:11:be:58:c3:f9:5f:d1:b1:8e:55:5b:54:52:8a:6d:
4b:ef:2c:e7:33:a0:cf:aa:21:d0:ab:f4:0f:7f:a9:86:be:94:
e3:1d:4a:fb:d6:c0:e1:b7:6c:c8:56:17:9a:ed:6f:8a:5f:22:
41:e6:8f:3e:53:bb:49:0e:27:d1:db:a6:51:9e:48:5c:0f:9a:
15:14:cf:97:03:3c:68:80:89:f0:3b:07:c9:46:3a:c3:e9:31:
06:e0:b2:a1:43:49:f6:8e:2c:de:1d:a6:01:1c:08:44:79:02:
6f:76:10:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:10:43 2024 by rpki-client on console-ams.rpki-client.org