Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/WD3Et402oafGKTaAVSrUUri55Ec.roa
File: WD3Et402oafGKTaAVSrUUri55Ec.roa (raw, json)
Hash identifier: PHItFjB1LzCG4+U6Suflg3VH1azLkBujkxFuTopYFlQ=
Subject key identifier: 58:3D:C4:B7:8D:36:A1:A7:C6:29:36:80:55:2A:D4:52:B8:B9:E4:47
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 018CC56E96A7F4EBE616434DDB512411B7FD
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/WD3Et402oafGKTaAVSrUUri55Ec.roa
Signing time: Mon 01 Jan 2024 14:30:08 +0000
ROA not before: Mon 01 Jan 2024 14:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202924
IP address blocks: 82.222.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:96:a7:f4:eb:e6:16:43:4d:db:51:24:11:b7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 14:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=583dc4b78d36a1a7c6293680552ad452b8b9e447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:6b:11:d4:e6:9a:61:f4:e2:0b:72:49:de:
91:63:7d:33:5b:c0:83:7b:db:d4:03:b4:f7:62:a8:
88:3a:25:6a:06:80:d1:25:78:c8:33:66:c7:60:2e:
56:ba:f1:5d:12:d5:c4:1d:2a:e8:98:53:ae:18:7f:
77:b9:51:5d:d8:86:fe:4e:77:ad:b3:c6:14:a6:a2:
0d:76:30:0e:a0:16:c2:e8:ea:90:36:0f:71:a7:98:
2c:72:29:33:fe:c9:60:63:ed:02:3d:77:02:48:22:
cb:f4:8d:5b:ce:11:f6:69:1c:be:3b:35:09:64:28:
d3:a9:95:31:e1:82:1c:89:ea:eb:db:29:a7:5e:8d:
6a:08:90:44:95:f4:9e:44:d0:a9:5e:b1:1b:13:09:
24:5a:19:45:f0:92:ba:fa:90:20:31:10:91:95:1c:
08:53:82:d3:ff:1e:52:f5:1c:77:5d:de:60:a0:5b:
ac:8a:a0:50:d5:21:26:16:d3:05:aa:50:ae:fa:b0:
b2:eb:3c:f0:2e:18:1d:5a:64:5b:db:f9:da:46:7f:
bc:82:b8:bb:d8:07:b2:1b:0e:53:d8:80:e4:61:aa:
ca:bd:c5:86:b8:ee:cf:7b:d8:c0:76:33:32:2e:f8:
7d:75:88:0e:23:68:de:0e:a5:f0:1d:df:84:ab:05:
f0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3D:C4:B7:8D:36:A1:A7:C6:29:36:80:55:2A:D4:52:B8:B9:E4:47
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/WD3Et402oafGKTaAVSrUUri55Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.222.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:45:a3:52:e7:56:8a:89:06:1c:48:df:06:b7:82:f4:4e:fb:
50:9f:ea:21:15:dc:f4:f7:06:84:f1:ab:03:f4:62:f3:8e:5c:
56:d0:8c:0d:5b:64:62:84:fd:c5:ec:bb:49:52:82:ab:0e:de:
3e:23:c5:68:df:05:59:bc:13:13:33:b8:69:a7:bc:bb:8e:13:
b2:53:fa:41:4d:f7:f8:40:1e:7a:32:c4:20:04:09:c1:dc:c8:
61:d3:0f:78:cc:a1:3e:df:fa:46:36:03:10:e6:dc:77:7d:7c:
11:ec:07:2f:c6:d5:37:cd:e5:93:54:15:b9:29:7d:90:cd:f6:
ad:e2:ad:c7:0a:ea:1a:21:87:d8:32:e5:32:71:50:80:d3:2f:
92:0d:f2:d4:ec:09:c8:34:d1:54:e8:3d:1c:51:9a:a1:20:10:
ae:dd:68:4b:74:30:61:e9:c9:e7:22:44:4f:74:2a:28:99:0b:
96:ab:2c:a9:a8:fd:4c:aa:89:4a:a5:65:b3:e0:6d:4c:88:6a:
6c:ed:20:cd:0b:d6:72:d5:c3:13:dd:cf:67:25:b3:c8:50:fa:
07:6b:9a:b4:04:b3:0b:0b:0a:1d:a5:ed:20:ed:13:0b:e6:66:
71:04:e0:8c:a0:09:bb:24:a2:5a:fb:21:29:76:39:aa:51:5b:
ef:38:c9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:11:46 2024 by rpki-client on console-ams.rpki-client.org