Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2RTMzhYnBNXOJXXHdS49Cpje5Uc.roa
File: 2RTMzhYnBNXOJXXHdS49Cpje5Uc.roa (raw, json)
Hash identifier: 4wWslfOmWP/PehJFfZ+WPrnEkuFlzY3yWmqbpND2/6k=
Subject key identifier: D9:14:CC:CE:16:27:04:D5:CE:25:75:C7:75:2E:3D:0A:98:DE:E5:47
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F805CF2766510D00F849B42BF78F1404F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2RTMzhYnBNXOJXXHdS49Cpje5Uc.roa
Signing time: Thu 16 May 2024 07:45:26 +0000
ROA not before: Thu 16 May 2024 07:45:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211091
IP address blocks: 82.163.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:5c:f2:76:65:10:d0:0f:84:9b:42:bf:78:f1:40:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 16 07:45:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d914ccce162704d5ce2575c7752e3d0a98dee547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:aa:3f:5f:d9:8b:95:40:00:19:52:76:5b:
4b:7b:7c:dc:a2:ca:7a:52:fc:8f:84:6d:0d:97:5f:
86:0d:cb:8f:30:5f:c6:72:f8:40:3f:dd:aa:81:1e:
84:b8:1a:96:bc:36:15:35:07:d7:3b:7d:19:07:dd:
6a:87:71:7e:e3:00:7a:39:83:1f:c5:6f:08:a6:89:
9b:46:7d:c5:86:0c:0a:89:91:7a:08:d8:b5:27:22:
0e:08:7a:4a:f7:7d:58:d9:8d:da:23:28:a9:d1:eb:
fc:db:db:e1:d8:93:9b:8d:b6:24:c1:3e:1c:9e:aa:
dc:41:d7:3d:17:5f:f0:fa:9b:78:26:ac:94:7e:fe:
55:87:90:57:af:77:07:4e:4b:95:89:47:16:2a:40:
bb:1e:cc:af:30:5b:f7:4d:44:04:c5:e6:5c:81:c8:
88:77:8b:d9:8a:66:84:01:72:79:fc:00:16:34:ad:
86:27:1c:77:bc:53:0e:6e:d1:23:08:ec:2c:58:2a:
8b:c1:b1:1a:e0:a1:8f:89:57:ab:24:81:9c:cb:f2:
d0:4d:90:70:e6:dd:9e:7b:15:6e:f6:0d:84:bd:b6:
f5:22:f2:44:b0:1d:ad:65:78:2e:7a:a9:ed:cc:20:
42:2f:32:0b:df:d9:40:83:29:ed:3a:a4:88:d4:cb:
04:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:14:CC:CE:16:27:04:D5:CE:25:75:C7:75:2E:3D:0A:98:DE:E5:47
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2RTMzhYnBNXOJXXHdS49Cpje5Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.21.0/24
Signature Algorithm: sha256WithRSAEncryption
05:c5:2e:4d:dc:6a:d8:13:26:d5:be:a1:99:b2:f4:26:44:ed:
5b:fb:f8:7f:21:af:4c:81:80:a1:82:f1:bc:f9:44:30:df:ad:
5a:31:c3:7c:eb:37:49:8b:a2:a6:fb:da:2b:bd:54:7d:43:b5:
25:a7:f0:06:d8:17:64:a4:ee:3f:38:59:dc:85:d1:bc:82:d6:
1a:fb:08:6a:e2:13:cd:55:f8:81:88:30:73:bb:b2:e1:bb:95:
ec:de:d8:53:f1:b0:e9:7c:2f:3c:a5:1a:de:2b:fa:1a:45:d7:
b0:d2:96:1f:e4:90:51:4a:2c:eb:99:f6:11:2a:1f:23:6d:a8:
96:a7:35:95:05:78:2b:62:7a:9d:4c:e7:86:5e:37:ed:1d:0f:
a3:c8:fa:ae:22:aa:59:91:2d:2d:af:f0:ce:05:76:e0:b0:c4:
31:c6:bc:9d:90:c9:54:1c:9c:63:3b:0a:12:ad:bb:5e:60:79:
cb:5d:22:fe:6f:0c:b6:9c:56:d3:0d:cc:a7:60:55:05:f6:c3:
c4:a0:1c:bf:34:9f:c3:c5:6b:82:46:4b:42:dc:5f:53:15:c5:
72:1e:1f:ee:e7:55:cf:f0:46:83:84:96:14:c7:f5:4a:03:22:
c7:67:0b:8f:cb:0e:1c:a7:9e:90:ef:51:92:3f:fb:90:8d:26:
9a:6f:06:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:14 2024 by rpki-client on console-fra.rpki-client.org