Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/j3G2IW2AO2OgXD9QD8hhdJAtt1U.roa
File: j3G2IW2AO2OgXD9QD8hhdJAtt1U.roa (raw, json)
Hash identifier: Ck/6cugH+YSONm1kOer+4tRhlpKw4ivYGHXVmPz9Cgg=
Subject key identifier: 8F:71:B6:21:6D:80:3B:63:A0:5C:3F:50:0F:C8:61:74:90:2D:B7:55
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018CC5DCE1869B41C7142E69AB4701CEB6FC
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/j3G2IW2AO2OgXD9QD8hhdJAtt1U.roa
Signing time: Mon 01 Jan 2024 16:30:36 +0000
ROA not before: Mon 01 Jan 2024 16:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10753
IP address blocks: 82.163.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:e1:86:9b:41:c7:14:2e:69:ab:47:01:ce:b6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 1 16:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f71b6216d803b63a05c3f500fc86174902db755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:50:e1:eb:13:58:8c:84:48:c0:8e:18:ca:
0a:8f:af:55:18:b9:fd:d3:65:98:47:86:88:f1:78:
fb:60:c8:d4:09:35:f0:41:5b:8b:85:44:ee:fd:2b:
a2:10:49:45:11:ea:0b:12:bb:f3:92:89:f5:3a:1d:
39:b3:3f:5a:1b:c0:3f:94:88:35:d9:f7:da:c0:16:
4b:0b:0f:93:5b:01:8f:71:11:3d:2c:63:24:2e:ca:
28:11:0b:ee:f1:2c:ef:1d:e4:35:70:65:f9:6c:47:
3a:3d:5c:10:90:e9:ff:ba:16:91:4b:06:d4:03:95:
80:07:ea:e4:89:2d:91:20:72:d5:24:7b:5c:bc:c9:
0d:95:96:93:c1:0c:02:7f:ae:da:56:d4:02:bd:ee:
05:dd:df:ee:43:af:d5:df:a6:e1:92:03:ad:86:bd:
38:32:f9:b2:57:a2:78:6e:5c:7e:02:b6:7f:c8:dc:
0d:9b:d1:a4:6e:9c:c9:e8:1b:f3:b0:f0:68:e7:66:
bf:73:20:dd:87:a1:65:75:5e:50:9a:57:20:4c:e1:
41:ea:21:c2:a3:c5:88:bb:1d:15:9d:ba:1c:0d:21:
79:6e:a0:1a:b2:90:fa:30:c0:56:6e:a3:bf:25:a3:
14:9f:f3:2d:51:58:ad:48:f6:ae:5a:d0:57:9f:7d:
a7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:71:B6:21:6D:80:3B:63:A0:5C:3F:50:0F:C8:61:74:90:2D:B7:55
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/j3G2IW2AO2OgXD9QD8hhdJAtt1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.56.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:3e:1e:fa:eb:10:f1:a1:2b:d1:34:d7:71:73:56:cc:c8:4a:
79:da:b9:d5:be:ef:ea:0b:86:03:cb:d6:b9:22:14:8f:d0:8c:
7e:35:66:56:b2:08:f4:ed:e9:f1:13:b0:22:6c:4f:99:bb:e6:
0e:b5:59:35:b6:b0:6c:d3:36:6c:a0:fc:ef:2a:f0:f4:6c:23:
a2:fd:97:fd:24:3e:c2:f6:76:55:b9:41:a1:91:47:ca:71:ee:
1f:b9:36:aa:2e:02:66:56:3e:98:c1:99:3b:61:a5:ff:1d:95:
d1:07:c0:25:d2:6c:3b:5f:9d:4f:4e:82:9e:34:65:7b:68:67:
0a:ad:aa:be:ff:0d:c4:2f:e2:84:fe:04:d5:61:f5:e5:d8:f9:
d9:1c:07:95:1b:1d:3b:88:72:cb:c8:c3:c7:ab:12:f9:78:ae:
16:51:cf:7e:51:88:2c:b5:85:c4:92:96:d1:69:31:78:4b:0a:
55:e0:24:fc:bd:b9:f7:1f:e8:d4:25:c3:e7:cd:b2:ad:ae:fc:
25:fa:b9:42:a4:e9:be:17:ed:c7:af:7f:b5:a4:e7:53:b4:ab:
6c:85:2c:38:23:e9:5f:9a:96:f2:ab:d4:e6:23:c8:51:af:38:
1f:bc:75:81:d4:b0:07:2f:81:53:49:65:ef:9d:c9:ec:25:34:
b6:ba:80:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:49:47 2024 by rpki-client on console-fra.rpki-client.org