Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/82zaSDZdnnBDvlOCC-u-V4fSZtI.roa
File: 82zaSDZdnnBDvlOCC-u-V4fSZtI.roa (raw, json)
Hash identifier: 0ZUojsMmtcEvjD29I6q/Iuc2481VGOno2XjRG2SGyB4=
Subject key identifier: F3:6C:DA:48:36:5D:9E:70:43:BE:53:82:0B:EB:BE:57:87:D2:66:D2
Certificate issuer: /CN=367b114fac6bc5de335b0ecf460ef8beba3a5049
Certificate serial: 018CC6B7986CE50C88DB0CC3A1E72C5F4EFB
Authority key identifier: 36:7B:11:4F:AC:6B:C5:DE:33:5B:0E:CF:46:0E:F8:BE:BA:3A:50:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnsRT6xrxd4zWw7PRg74vro6UEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/82zaSDZdnnBDvlOCC-u-V4fSZtI.roa
Signing time: Mon 01 Jan 2024 20:29:30 +0000
ROA not before: Mon 01 Jan 2024 20:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211611
IP address blocks: 146.19.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/NnsRT6xrxd4zWw7PRg74vro6UEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/NnsRT6xrxd4zWw7PRg74vro6UEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnsRT6xrxd4zWw7PRg74vro6UEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 22:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:98:6c:e5:0c:88:db:0c:c3:a1:e7:2c:5f:4e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367b114fac6bc5de335b0ecf460ef8beba3a5049
Validity
Not Before: Jan 1 20:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f36cda48365d9e7043be53820bebbe5787d266d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:da:d4:44:59:1e:4e:81:8a:c0:64:34:9b:
60:63:1d:0c:6f:0d:38:f8:bd:07:c5:9c:4e:eb:c8:
de:10:1b:f4:4c:34:4d:df:83:4c:15:fe:9f:51:6e:
f1:c6:dc:07:ad:3c:f4:33:e9:43:94:01:37:d9:4e:
cf:92:ef:02:9e:22:75:5b:d2:d7:88:77:f5:af:5b:
18:0a:66:ae:f8:f9:cf:08:33:43:9e:4d:94:26:76:
bd:34:7e:b7:15:98:40:51:bc:43:80:87:8a:98:d9:
d0:d4:8c:f7:fd:07:55:e4:2a:6b:84:1e:03:ef:b9:
d1:d3:01:b6:7a:cb:96:7d:61:86:92:cc:a3:91:d8:
cb:73:14:2c:f3:23:a8:af:00:10:2e:c6:3a:77:de:
0e:79:f9:4e:6d:99:88:58:08:95:3c:22:25:db:0a:
7b:4b:d9:ea:63:e5:35:8b:12:fc:23:32:f6:fa:7b:
47:5e:88:4d:6d:54:03:8b:04:f6:0e:7d:f1:bd:6a:
c6:1d:e8:f0:af:78:96:c4:8e:29:8e:aa:bf:0c:1a:
97:9d:85:56:14:77:98:1c:85:0d:0f:78:a7:d2:31:
7b:3c:18:ce:e4:0c:e0:a4:9f:62:ef:fc:0c:6e:60:
4f:75:1b:39:ea:54:3e:0d:2f:3f:fd:6a:44:78:8e:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6C:DA:48:36:5D:9E:70:43:BE:53:82:0B:EB:BE:57:87:D2:66:D2
X509v3 Authority Key Identifier:
keyid:36:7B:11:4F:AC:6B:C5:DE:33:5B:0E:CF:46:0E:F8:BE:BA:3A:50:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnsRT6xrxd4zWw7PRg74vro6UEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/82zaSDZdnnBDvlOCC-u-V4fSZtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ef9b1a-a1e4-47cb-ac99-b6d4304b4369/1/NnsRT6xrxd4zWw7PRg74vro6UEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.133.0/24
Signature Algorithm: sha256WithRSAEncryption
73:1c:95:b0:c6:be:14:27:e5:94:5c:d6:d9:1b:28:6d:9b:0e:
c3:51:8d:9b:63:1b:37:ea:dc:2d:59:90:f3:67:c8:49:fb:f8:
08:65:9b:78:f1:b0:33:7e:56:de:12:79:4d:a1:53:bf:2a:9d:
6b:be:06:25:ae:9b:ac:6d:32:3e:5a:c3:28:30:4d:7f:d3:f4:
b3:1d:e7:2a:71:cd:8b:d9:d3:50:92:a3:52:76:f3:72:4c:48:
79:df:2e:61:a5:31:ff:bf:65:d4:e2:85:f6:3e:4c:6d:dc:30:
c4:c5:dd:5d:05:ef:91:e2:9f:59:d5:d5:26:88:b2:6c:66:fa:
10:dc:f5:e8:8d:f1:c2:17:a0:40:59:ee:15:c4:ad:10:a1:0f:
f4:50:2b:7b:7a:22:60:a1:71:f8:c9:b1:99:84:ce:1b:04:d2:
97:14:25:e4:4f:a9:0c:5b:04:48:3a:62:36:34:99:5a:a8:5d:
84:4f:22:d2:70:7b:cf:d0:45:7e:c4:5d:0a:b9:bb:e8:d0:21:
24:fd:32:3d:7c:5b:00:b1:14:58:e3:60:bf:61:10:d2:3e:9f:
7c:2b:36:3c:d2:c2:b1:68:b7:26:26:ca:05:09:53:cf:d1:ac:
89:ee:fc:f2:14:b3:2e:73:e7:df:5d:5e:37:e0:db:41:c2:e0:
f9:e6:5a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 03:11:28 2024 by rpki-client on console-ams.rpki-client.org