Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ihOUYwpl2vJSoYo8GlL9Z4LhhTY.roa
File: ihOUYwpl2vJSoYo8GlL9Z4LhhTY.roa (raw, json)
Hash identifier: ya8KUJsoZNbX3uMz/P7WUM0sqA14qkyR+Uo2WBaVaas=
Subject key identifier: 8A:13:94:63:0A:65:DA:F2:52:A1:8A:3C:1A:52:FD:67:82:E1:85:36
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 018CC727469F2ADF6BF8BF6D26B54C724E73
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ihOUYwpl2vJSoYo8GlL9Z4LhhTY.roa
Signing time: Mon 01 Jan 2024 22:31:28 +0000
ROA not before: Mon 01 Jan 2024 22:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40934
IP address blocks: 82.98.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:46:9f:2a:df:6b:f8:bf:6d:26:b5:4c:72:4e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 22:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a1394630a65daf252a18a3c1a52fd6782e18536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:f5:e2:e2:0b:c0:6a:14:61:46:90:79:11:
b5:67:db:44:c3:b8:8d:0c:83:73:c6:0a:6e:95:f7:
05:a3:c7:9a:12:7b:06:ce:37:16:12:81:b7:7e:2a:
9c:fa:5a:b8:00:84:9e:87:9b:71:39:ee:95:54:83:
ca:78:65:57:e9:16:6e:79:42:6c:f0:a2:4a:00:d5:
1c:80:e3:c1:4a:2b:86:2a:71:01:4f:5a:e4:b9:68:
e1:a9:b1:9a:d9:c4:68:d9:76:f4:64:0e:b6:85:b9:
85:17:a8:30:67:3f:1d:3f:a1:61:a4:02:50:d3:0b:
a1:c5:79:3c:1e:42:7d:1b:91:5e:16:54:a9:df:7d:
77:45:74:5d:8b:09:e9:89:16:f0:85:83:69:66:2e:
d8:36:1d:00:b1:c3:43:55:d0:23:eb:ef:73:63:e7:
b4:7a:5a:e6:47:ee:36:06:6e:8a:40:63:eb:97:b4:
b5:65:dd:4b:8a:71:6f:a0:9b:12:74:76:7d:2a:a3:
c1:8c:24:dd:12:24:eb:24:ad:cd:a2:f2:9b:15:be:
6a:a5:f5:49:0b:52:18:3a:d9:23:5d:c6:47:32:ec:
54:84:0e:3c:ab:96:a2:0b:a9:7a:59:6a:bc:a9:3e:
32:82:2f:88:b5:1d:7b:4b:1b:30:87:5d:9d:97:16:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:13:94:63:0A:65:DA:F2:52:A1:8A:3C:1A:52:FD:67:82:E1:85:36
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ihOUYwpl2vJSoYo8GlL9Z4LhhTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.199.0/24
Signature Algorithm: sha256WithRSAEncryption
33:8d:33:e9:88:ed:22:0a:85:38:76:3a:70:d7:f8:5b:a7:0f:
95:91:df:dc:ae:5f:f8:c7:f6:24:aa:13:83:da:c8:ad:be:95:
f7:3e:1e:d4:5c:8d:b0:68:af:1a:36:c7:49:aa:29:ea:66:eb:
6a:02:54:c0:da:0b:97:35:22:33:43:a3:a0:f7:0d:17:96:3a:
46:db:59:3f:b2:f4:a0:7c:fa:2e:f2:f2:94:5b:58:f3:30:c5:
b0:4a:f9:e6:b7:0e:1e:f8:f3:ee:2c:2d:ec:65:73:40:ea:b8:
22:a6:2d:5d:ef:07:3e:9c:65:b1:8b:9b:ce:74:b0:3a:f6:56:
39:93:10:2b:3c:99:5b:48:a4:c8:b5:04:5d:11:f0:2d:be:22:
f8:40:3e:e1:26:c9:80:5f:c8:1b:81:54:25:ed:a9:f5:9c:bd:
1c:e4:13:f0:d4:ca:01:ce:ad:41:08:a6:97:fc:38:0c:d3:58:
02:4a:75:da:59:b3:18:54:56:4b:ca:6f:cd:db:a7:76:83:93:
4b:4a:bf:6f:c5:8b:ce:d5:62:30:39:20:6a:c5:98:39:f9:92:
24:e5:67:77:41:f7:55:9a:30:9f:a1:42:71:b7:f6:32:41:80:
a6:a0:1e:ef:f1:86:79:d8:1e:35:f4:17:c5:18:f7:e0:8e:92:
4b:8e:5e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:08:32 2024 by rpki-client on console-ams.rpki-client.org