Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/6PekkHOMSZ2AiLQOQDsOlvMVdLk.roa
File: 6PekkHOMSZ2AiLQOQDsOlvMVdLk.roa (raw, json)
Hash identifier: NZNVzvxCYyNd0tWKZ8jIzf8wSpogp4X+FHycyVNMxpg=
Subject key identifier: E8:F7:A4:90:73:8C:49:9D:80:88:B4:0E:40:3B:0E:96:F3:15:74:B9
Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial: 018CC500049D8618C9069EE0BE87DFE9C557
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/6PekkHOMSZ2AiLQOQDsOlvMVdLk.roa
Signing time: Mon 01 Jan 2024 12:29:21 +0000
ROA not before: Mon 01 Jan 2024 12:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204601
IP address blocks: 185.182.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:04:9d:86:18:c9:06:9e:e0:be:87:df:e9:c5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Validity
Not Before: Jan 1 12:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8f7a490738c499d8088b40e403b0e96f31574b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ab:28:ed:0e:48:ce:01:21:84:4e:bd:e2:ad:
50:cb:01:a6:29:71:ec:16:16:4c:20:04:6f:77:12:
a1:45:99:30:ac:ca:18:be:1e:92:2b:2f:fc:d1:4f:
05:9b:a5:19:a4:3d:76:c9:03:4c:eb:92:d9:c5:e2:
93:7e:37:89:7d:0d:05:3b:9d:9e:ec:42:54:94:e9:
82:93:ba:70:da:17:c4:fa:8f:05:36:46:ca:48:4f:
6e:53:a8:a0:36:55:e8:62:27:47:06:60:22:e0:23:
bb:0e:3c:e8:b0:d8:10:1a:f0:f0:a6:ba:59:3e:e0:
85:65:d7:af:27:1a:ce:da:15:1b:1a:20:3b:9b:cc:
55:b0:7e:68:23:51:d8:2f:e0:f8:c7:85:48:1f:09:
1f:d3:7b:18:0a:62:09:e6:ab:34:30:f6:e4:16:83:
a8:2d:7e:6e:8b:92:a9:5b:a3:76:05:41:b0:6d:69:
f9:48:d0:e6:3a:68:39:36:07:fe:1a:e8:75:05:02:
05:fd:fa:60:10:1a:cd:33:c6:86:f9:71:01:6a:bc:
77:90:fe:86:d9:e7:2d:9d:dc:d3:e2:06:f6:05:9f:
9c:52:84:5c:00:7e:75:b1:2f:8d:5b:44:7b:7a:cb:
d8:92:08:6e:0a:05:2f:50:70:2d:d3:5d:5a:64:6c:
82:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F7:A4:90:73:8C:49:9D:80:88:B4:0E:40:3B:0E:96:F3:15:74:B9
X509v3 Authority Key Identifier:
keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/6PekkHOMSZ2AiLQOQDsOlvMVdLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.82.0/24
Signature Algorithm: sha256WithRSAEncryption
76:73:dc:d1:ef:8b:5e:ff:b6:cf:8b:3b:b8:12:36:4c:44:2e:
71:1d:43:9a:50:57:2f:7a:f9:08:38:1a:85:b1:ad:94:cf:1a:
1e:45:ee:5a:1b:fe:0c:34:16:8d:ae:96:4e:3b:ae:c0:5b:95:
5d:5d:e3:e7:cb:9b:7c:36:63:32:26:52:15:46:9f:29:b1:5c:
47:ee:f1:44:73:21:a1:62:0b:03:59:6b:bf:aa:a7:bf:78:eb:
c5:c4:e7:1e:86:c2:ee:bf:c0:83:32:78:b8:2f:71:f9:26:3e:
d9:09:5b:a5:5d:99:ac:e4:ca:23:ae:11:cb:4a:da:6b:bc:30:
c4:a6:d6:3f:7f:97:a6:fa:38:d3:6a:e4:e3:e4:c0:98:d8:98:
f1:af:a5:52:2c:c2:13:c8:0e:99:88:00:ff:21:87:d4:5a:0a:
c3:36:2f:30:93:3b:12:c3:db:6b:a1:d8:73:00:ad:20:eb:87:
1d:bb:bd:fd:95:cb:b3:cc:fc:26:70:04:4f:72:8f:ec:43:2a:
ef:aa:40:64:6b:e7:c4:3e:e7:87:5f:d0:cc:ed:6e:c3:aa:b6:
64:f7:4f:f2:a8:75:f2:4f:20:2e:47:45:9c:80:1e:4a:1b:b0:
70:d3:d9:0c:71:2b:a6:66:f7:7e:2c:8a:fe:f4:32:81:41:74:
34:34:20:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:37:59 2024 by rpki-client on console-ams.rpki-client.org