Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/9lB0bUY7M-o82ebX6twyUJsimWA.roa
File: 9lB0bUY7M-o82ebX6twyUJsimWA.roa (raw, json)
Hash identifier: g8w4REkWMzgARm3E2WlRNHhUtiZIISFUzgcNnsJNmOI=
Subject key identifier: F6:50:74:6D:46:3B:33:EA:3C:D9:E6:D7:EA:DC:32:50:9B:22:99:60
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018CC5DCE3FF249EC60778A41981BC7FD949
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/9lB0bUY7M-o82ebX6twyUJsimWA.roa
Signing time: Mon 01 Jan 2024 16:30:37 +0000
ROA not before: Mon 01 Jan 2024 16:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 82.163.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 01:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:e3:ff:24:9e:c6:07:78:a4:19:81:bc:7f:d9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 1 16:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f650746d463b33ea3cd9e6d7eadc32509b229960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e1:14:30:ca:5b:f5:e4:b9:d3:3b:71:fd:29:
d6:a6:6d:ac:bd:bf:88:91:0e:e6:0b:b6:38:9d:3b:
43:e7:c6:77:4e:15:64:82:7a:96:c2:c5:2c:26:a6:
42:da:f2:e4:6a:24:23:cc:b9:1b:60:04:6c:6f:a3:
28:a2:6c:27:0d:c1:f5:31:c0:b9:dc:01:c2:95:50:
10:df:32:44:22:c4:cd:22:7b:aa:55:2f:90:c3:6d:
72:fd:58:ba:7d:b2:bb:6c:bd:56:a3:b3:71:e9:27:
83:4a:0b:77:95:cc:a6:af:92:03:dd:45:a4:0f:a6:
62:a1:14:36:98:c4:d5:64:b4:5a:95:48:77:4e:51:
58:5e:0b:ff:72:0b:cd:66:8b:dd:8c:94:30:45:e3:
00:96:1f:24:2e:02:71:07:39:c2:05:c6:80:18:06:
a1:98:1e:83:df:55:0f:68:c3:65:5b:ae:20:a7:90:
4e:c1:28:dd:e2:98:f0:8a:84:ea:82:05:d0:dd:8f:
78:4f:dc:be:49:4f:ff:5a:18:b1:31:7f:f3:8d:92:
5b:88:21:90:10:b2:5e:ff:c2:bd:17:97:07:38:96:
9c:7b:b6:02:d4:dd:d4:2b:9d:9a:a3:a9:70:89:9c:
d9:3f:95:14:55:38:04:53:db:86:d9:0f:4c:14:89:
f5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:50:74:6D:46:3B:33:EA:3C:D9:E6:D7:EA:DC:32:50:9B:22:99:60
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/9lB0bUY7M-o82ebX6twyUJsimWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.64.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:78:81:1b:94:4b:e2:40:ec:d0:53:94:dc:a2:ea:e9:77:cd:
15:b8:68:3a:7c:53:51:48:58:44:8a:d4:57:a5:c4:9d:93:78:
92:42:22:58:99:8e:7c:14:e3:d7:6d:9d:0c:ea:be:f4:83:f7:
05:c6:14:18:76:8a:26:3a:59:69:2d:5a:9b:42:31:38:ec:d6:
26:99:ad:55:47:f7:fe:87:81:0b:44:a3:bb:0f:36:69:d7:be:
0a:ec:a9:9e:26:db:e9:49:bd:55:29:21:fe:b9:01:59:af:a1:
ef:e8:aa:f8:ba:90:b5:23:4c:26:72:42:f0:8b:ed:0b:8e:6c:
81:39:44:39:2b:dd:3f:85:59:38:39:f9:c5:75:7f:f4:b9:00:
26:c8:a5:d4:56:6d:9e:d2:7e:31:d4:c7:af:8e:30:a7:0c:d9:
9d:fe:91:5f:97:be:67:dc:51:6d:e0:d4:79:dc:48:15:be:ed:
34:de:0e:a2:af:5e:14:20:cc:0c:fa:aa:e5:e6:81:ee:61:a4:
fb:75:08:67:29:b4:d4:e6:72:0e:cb:7e:e4:ee:0b:43:1e:b4:
08:fd:16:6f:d0:41:6b:d7:45:74:0e:dc:aa:ad:98:df:fe:a1:
1e:ed:26:03:fe:f2:13:96:f5:34:8e:9f:db:8a:28:92:7a:a5:
58:f5:92:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 08:21:41 2024 by rpki-client on console-fra.rpki-client.org