Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/OR8gm-FHMKAKoF422OjO_PaaPsI.roa
File: OR8gm-FHMKAKoF422OjO_PaaPsI.roa (raw, json)
Hash identifier: r8f8wDy6pLi4uu3C/hXRDlXXXp9Vupgh0NAabn6gmC8=
Subject key identifier: 39:1F:20:9B:E1:47:30:A0:0A:A0:5E:36:D8:E8:CE:FC:F6:9A:3E:C2
Certificate issuer: /CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Certificate serial: 018CC5DC6198E39F7B4E9F3FFA891CC983F7
Authority key identifier: 4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/OR8gm-FHMKAKoF422OjO_PaaPsI.roa
Signing time: Mon 01 Jan 2024 16:30:03 +0000
ROA not before: Mon 01 Jan 2024 16:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43766
IP address blocks: 82.197.52.0/27 maxlen: 27
82.197.52.32/27 maxlen: 27
82.197.52.128/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:61:98:e3:9f:7b:4e:9f:3f:fa:89:1c:c9:83:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Validity
Not Before: Jan 1 16:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=391f209be14730a00aa05e36d8e8cefcf69a3ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:31:0b:f9:23:55:0f:d8:2a:77:2a:3c:52:
be:10:17:11:d9:4a:fd:05:78:03:48:1a:a7:ed:46:
30:98:29:1f:f7:d3:d8:b0:aa:5e:9f:7c:bb:f8:2a:
04:0c:c0:45:92:cc:7d:da:70:c4:f2:fb:f4:e0:fe:
ee:4f:08:9d:97:5d:61:21:7f:09:7b:32:83:a1:c5:
4a:a9:4f:4a:d0:4d:cf:35:e0:31:f6:09:64:d6:51:
8f:8d:e3:02:62:3b:ec:27:24:40:7a:85:67:23:86:
17:d6:9c:7e:75:5f:39:b1:33:6c:55:b2:c0:20:e6:
1c:2b:67:f1:ff:7c:0f:18:0e:14:e0:ca:6e:18:c3:
70:3a:6e:4a:88:09:d0:10:dc:05:42:0b:a0:5d:15:
bb:56:d0:78:c2:24:d9:d2:8f:f0:c3:1b:89:2e:07:
7b:c1:0e:69:a7:fd:51:ba:5c:db:8c:72:74:ee:92:
92:65:d7:81:4d:54:f3:13:d0:7c:a9:b1:ed:a1:a5:
f7:ee:17:9f:55:1e:98:0f:92:e6:e5:87:1b:6c:c3:
f7:4b:cb:46:73:38:ea:e0:85:9e:0c:42:44:1a:7b:
94:73:a5:17:31:d2:e3:ae:87:7f:61:06:f8:d1:f6:
79:90:0d:2a:f0:8b:1b:9a:2b:9f:33:3a:4c:04:f2:
ad:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1F:20:9B:E1:47:30:A0:0A:A0:5E:36:D8:E8:CE:FC:F6:9A:3E:C2
X509v3 Authority Key Identifier:
keyid:4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/OR8gm-FHMKAKoF422OjO_PaaPsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.52.0/26
82.197.52.128/27
Signature Algorithm: sha256WithRSAEncryption
01:f2:ac:a6:9a:39:c0:c3:60:5b:f8:56:fb:59:e8:05:94:92:
6c:71:3d:b9:ae:47:51:7a:f4:b2:54:5e:eb:70:cb:f4:43:d3:
5d:5c:b6:a8:db:16:cf:d6:0f:4c:44:17:e7:cc:7e:95:74:d1:
4b:f6:f7:d1:bc:00:92:56:e5:ec:1c:d8:4f:d2:66:9f:d8:12:
27:11:10:74:70:f3:59:60:94:28:4b:2b:7c:66:6a:42:d1:fa:
d0:54:75:92:bd:48:86:cc:92:80:f3:3b:94:b1:a6:a2:10:a8:
09:1f:5d:0c:e0:3a:7f:ed:e9:8a:76:4d:04:f3:86:22:33:c4:
4e:1b:0e:8b:9b:8e:9b:5d:b0:c7:01:9a:61:ef:03:11:31:1a:
19:32:48:b5:b6:e4:2d:66:a7:b4:4e:74:5e:e6:e5:21:b7:3d:
10:37:63:99:5d:82:42:ba:35:37:90:2c:07:93:21:6a:19:e9:
25:34:b8:7b:29:5f:04:86:31:f0:2c:5f:97:37:1f:15:ed:66:
0b:b0:d5:61:a2:8d:72:62:b6:a2:8e:33:d3:4b:c5:9c:2f:7c:
8b:3b:f4:2e:db:31:27:ba:7e:34:87:da:4d:8e:74:0c:93:0a:
2d:ab:e4:8a:8c:9a:5f:c9:34:26:1a:89:7f:8a:7a:d9:dd:f8:
dd:d0:e8:36
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzF3GGY4597Tp8/+okcyYP3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzFiMTQ3ZWI4NzM3YWJjYzMzNWY4MDIwOTUxYjI1ZmYy
NjU2YTYwHhcNMjQwMTAxMTYzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTFmMjA5YmUxNDczMGEwMGFhMDVlMzZkOGU4Y2VmY2Y2OWEzZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWAxC/kjVQ/YKncqPFK+EBcR2Ur9
BXgDSBqn7UYwmCkf99PYsKpen3y7+CoEDMBFksx92nDE8vv04P7uTwidl11hIX8J
ezKDocVKqU9K0E3PNeAx9glk1lGPjeMCYjvsJyRAeoVnI4YX1px+dV85sTNsVbLA
IOYcK2fx/3wPGA4U4MpuGMNwOm5KiAnQENwFQgugXRW7VtB4wiTZ0o/wwxuJLgd7
wQ5pp/1RulzbjHJ07pKSZdeBTVTzE9B8qbHtoaX37hefVR6YD5Lm5YcbbMP3S8tG
czjq4IWeDEJEGnuUc6UXMdLjrod/YQb40fZ5kA0q8IsbmiufMzpMBPKtbQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDkfIJvhRzCgCqBeNtjozvz2mj7CMB8GA1UdIwQY
MBaAFExxsUfrhzerzDNfgCCVGyX/JlamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhHeFItdUhONnZNTTEtQUlKVWJKZjhtVnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mOTI4NzEtMGQzYS00ZDg3LWFmZGMt
MDcxYjk5MWFmMDFmLzEvT1I4Z20tRkhNS0FLb0Y0MjJPak9fUGFhUHNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mOTI4NzEtMGQzYS00ZDg3LWFmZGMtMDcxYjk5MWFmMDFm
LzEvVEhHeFItdUhONnZNTTEtQUlKVWJKZjhtVnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUGUsU0AAMF
BVLFNIAwDQYJKoZIhvcNAQELBQADggEBAAHyrKaaOcDDYFv4VvtZ6AWUkmxxPbmu
R1F69LJUXutwy/RD011ctqjbFs/WD0xEF+fMfpV00Uv299G8AJJW5ewc2E/SZp/Y
EicREHRw81lglChLK3xmakLR+tBUdZK9SIbMkoDzO5SxpqIQqAkfXQzgOn/t6Yp2
TQTzhiIzxE4bDoubjptdsMcBmmHvAxExGhkySLW25C1mp7ROdF7m5SG3PRA3Y5ld
gkK6NTeQLAeTIWoZ6SU0uHspXwSGMfAsX5c3HxXtZguw1WGijXJitqKOM9NLxZwv
fIs79C7bMSe6fjSH2k2OdAyTCi2r5IqMml/JNCYaiX+Ketnd+N3Q6DY=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:11:31 2024 by rpki-client on console-ams.rpki-client.org