Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/PgzpZiCOnztbEiXtzZcuWJvcUuI.roa
File: PgzpZiCOnztbEiXtzZcuWJvcUuI.roa (raw, json)
Hash identifier: wYJr/wbr1Q5kXyKlLogtXPN8ZIJYTLWLnqoUigDoyX4=
Subject key identifier: 3E:0C:E9:66:20:8E:9F:3B:5B:12:25:ED:CD:97:2E:58:9B:DC:52:E2
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A7A4384AEB1302979FD2185E1FF8F
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/PgzpZiCOnztbEiXtzZcuWJvcUuI.roa
Signing time: Tue 02 Jan 2024 12:33:50 +0000
ROA not before: Tue 02 Jan 2024 12:33:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 328867
IP address blocks: 82.115.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:7a:43:84:ae:b1:30:29:79:fd:21:85:e1:ff:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e0ce966208e9f3b5b1225edcd972e589bdc52e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:11:69:d6:23:ff:d5:73:d3:25:3e:72:a3:62:
4b:39:b4:6f:07:2a:eb:4f:d3:03:d8:9b:48:10:0a:
7e:fc:98:48:ae:68:49:92:4a:6f:f5:48:a8:fc:fd:
43:2a:b0:bb:93:ce:cd:81:81:37:02:60:8a:3d:c2:
d3:e2:36:44:8c:b1:ea:69:eb:88:5c:77:d7:33:02:
2d:8d:66:df:1c:1d:2d:d5:7e:d5:a7:5d:12:f8:c9:
ba:18:8b:83:21:a9:8f:b6:bd:64:9a:31:a7:43:e5:
69:40:0a:df:df:66:39:c3:93:0e:09:4f:48:f8:c3:
5c:cb:fc:e6:42:bc:12:6b:2d:2f:83:c6:65:54:98:
45:f7:15:41:2a:b1:b2:48:25:56:dd:71:cc:5e:ca:
80:80:8b:53:f1:d1:9a:bd:2a:59:0f:af:b2:be:f1:
f2:bf:1f:5e:73:6f:14:f6:ab:6a:8d:af:82:86:4f:
1e:59:c4:d9:bf:91:84:76:ea:34:ed:c6:de:f6:65:
81:a2:97:07:6d:9c:cf:80:a9:25:75:c0:58:92:b3:
ab:f2:58:59:4c:b4:38:6a:7f:8f:a0:c1:e8:e1:33:
19:f8:b4:67:d2:9f:57:d9:55:91:9e:7f:ec:34:d1:
10:ac:26:08:3d:e6:e2:9b:18:d6:f3:d4:74:31:5a:
db:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0C:E9:66:20:8E:9F:3B:5B:12:25:ED:CD:97:2E:58:9B:DC:52:E2
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/PgzpZiCOnztbEiXtzZcuWJvcUuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.12.0/24
Signature Algorithm: sha256WithRSAEncryption
53:6c:e1:17:78:92:35:e1:f8:bb:2d:1e:a7:2d:25:d7:ff:69:
67:af:48:85:90:b1:b9:44:bf:30:8e:79:55:6e:16:9f:09:d0:
03:ce:fc:36:96:61:6b:12:64:9e:0b:55:31:d4:d4:e4:e0:54:
b8:62:73:0f:03:d2:94:eb:ed:69:91:ff:4e:73:38:9f:cd:71:
5d:0d:41:ca:76:e3:e3:4e:47:ab:f1:09:bb:83:92:a1:19:6f:
39:8e:66:ce:09:17:28:05:f9:ce:40:36:c1:50:6c:78:88:3b:
e9:99:e1:c9:7d:2b:79:06:07:4f:e6:ce:db:18:42:72:bd:5b:
16:58:65:71:9c:68:5d:09:85:d3:d3:05:3e:03:25:f9:55:bc:
25:f6:46:5a:9f:7f:7e:68:a5:df:9b:fe:0e:12:f5:be:66:e0:
9d:d0:01:be:d7:35:d1:f6:13:18:e9:a8:50:53:b4:da:f4:05:
23:71:88:ed:fa:06:54:be:33:4f:9a:30:21:e2:f3:54:6f:50:
33:97:ee:8c:58:1a:17:4e:83:71:9c:11:11:cf:4e:56:5a:d7:
14:9f:d4:b2:d4:a1:35:bd:c8:9b:aa:bc:d8:34:7b:7f:c6:31:
49:ad:c0:98:31:e0:10:76:f1:82:e6:54:3e:9c:04:b1:4b:89:
3e:a1:7d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:51:06 2024 by rpki-client on console-ams.rpki-client.org