Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/biUdlZftxztLoBvU6L8KrDhGEec.roa
File: biUdlZftxztLoBvU6L8KrDhGEec.roa (raw, json)
Hash identifier: DQfE9B3i2X1MhM+TVLhm5wY6TrkGVNJ+P4LrWv0JGGk=
Subject key identifier: 6E:25:1D:95:97:ED:C7:3B:4B:A0:1B:D4:E8:BF:0A:AC:38:46:11:E7
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 018CC94E497A82DE8669AA3B7D96B37DE51A
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/biUdlZftxztLoBvU6L8KrDhGEec.roa
Signing time: Tue 02 Jan 2024 08:33:20 +0000
ROA not before: Tue 02 Jan 2024 08:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201237
IP address blocks: 82.150.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:49:7a:82:de:86:69:aa:3b:7d:96:b3:7d:e5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Jan 2 08:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e251d9597edc73b4ba01bd4e8bf0aac384611e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:10:b6:96:54:4f:e3:94:f4:94:03:4e:80:d0:
6e:4e:ea:0b:35:18:de:a7:27:87:fe:00:ad:32:f3:
b2:4f:2e:0d:9f:cc:32:ac:fe:5b:cc:1f:5c:bb:87:
5b:81:3c:18:c7:b5:e5:d7:c8:a8:cf:6e:3f:5d:ad:
15:56:e2:3f:fb:98:8c:a9:55:23:2a:71:a8:4d:ec:
1e:1d:48:fc:d3:b1:fa:fd:8c:ce:ef:a6:a4:11:69:
c6:bd:e5:13:fc:f6:23:b0:45:65:50:5f:e5:80:d0:
38:59:cf:b4:e1:fc:12:82:2f:97:e5:94:4b:26:d6:
54:f7:a3:f3:33:ec:84:3e:cd:bc:75:35:40:9d:b8:
4a:74:c6:e5:e2:12:fa:b4:6f:f2:8e:3d:55:f0:20:
47:4b:76:1f:40:43:23:00:f4:ac:bc:4d:11:45:b2:
02:56:c1:75:2b:c6:13:a9:94:9e:d1:ed:da:b6:e2:
ed:71:45:64:a0:30:73:15:bd:02:2d:a0:ef:ba:6d:
e9:93:96:2b:d0:bf:c7:06:09:9a:b7:50:9d:f8:d2:
2b:44:5c:92:9e:e8:6f:2a:69:ab:c9:d7:e7:cb:17:
c3:26:d4:63:ce:89:42:3d:6e:e3:9a:04:ba:84:d7:
18:09:91:da:df:47:b4:34:1d:3e:fa:48:c6:8f:60:
01:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:25:1D:95:97:ED:C7:3B:4B:A0:1B:D4:E8:BF:0A:AC:38:46:11:E7
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/biUdlZftxztLoBvU6L8KrDhGEec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:5c:7e:db:c9:cd:d8:1e:6a:76:82:47:cc:22:97:a8:fe:6b:
aa:c4:37:0e:34:3b:37:4e:c6:3b:b1:3b:2a:43:72:86:1e:54:
de:7a:8f:fa:aa:aa:2a:3d:87:a4:e0:47:35:b5:c6:1f:f1:bb:
c3:58:10:e3:95:8f:23:06:8f:19:b7:96:e6:d3:3c:a5:dd:50:
93:30:d7:25:bc:71:c4:e4:d5:a5:fe:e7:c1:22:54:9d:23:85:
39:fc:4f:79:fa:82:26:46:53:8a:37:50:ec:67:ee:59:ac:c1:
50:41:97:87:55:f0:73:f1:88:dc:22:f9:12:2b:77:3a:03:ea:
14:5b:7d:1d:73:21:03:7e:7f:ac:2b:67:08:c6:f0:33:c6:f4:
25:18:97:f8:43:8a:ee:aa:ff:33:61:c9:27:25:aa:26:92:60:
9e:1d:21:2a:32:89:d7:6a:6a:2b:5f:4b:8b:0b:03:48:37:ab:
fd:86:c3:ea:48:7e:6d:cf:89:8e:bd:69:b1:d2:78:4b:6a:38:
6f:d7:bd:c1:a0:ec:d7:86:a6:7c:f9:e1:2e:3e:fa:09:35:f9:
6f:d7:9a:01:3a:e7:5a:68:a9:be:81:58:33:5a:9d:8a:6d:9b:
ab:92:df:e1:2f:d6:15:60:dc:e1:63:b1:3e:6e:2a:68:91:7d:
f6:06:4f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:08:57 2024 by rpki-client on console-ams.rpki-client.org