Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4xCtrXZiob9bRereVfy1E5SdlNE.roa
File: 4xCtrXZiob9bRereVfy1E5SdlNE.roa (raw, json)
Hash identifier: 8Wg/TmtpjM869L5duqNcoiUebCheeOQyExaRp2febNE=
Subject key identifier: E3:10:AD:AD:76:62:A1:BF:5B:45:EA:DE:55:FC:B5:13:94:9D:94:D1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01900126F3D3B1BD4E086CF76FA4D68FE81B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4xCtrXZiob9bRereVfy1E5SdlNE.roa
Signing time: Mon 10 Jun 2024 07:57:28 +0000
ROA not before: Mon 10 Jun 2024 07:57:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141968
IP address blocks: 82.153.226.0/24 maxlen: 24
109.176.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:26:f3:d3:b1:bd:4e:08:6c:f7:6f:a4:d6:8f:e8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 10 07:57:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e310adad7662a1bf5b45eade55fcb513949d94d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:c4:ce:3b:93:ac:71:b5:a3:71:c6:93:6a:
b5:3e:15:17:c9:16:87:19:40:40:0f:3c:4a:cb:aa:
80:55:a9:bd:d6:ac:b0:7c:32:66:6c:70:4f:92:ea:
75:81:c7:c6:b8:5a:f5:67:91:b9:b1:3f:cc:ff:2d:
2e:3c:cc:d4:82:48:8d:51:dc:a5:ea:ca:b1:4c:bd:
71:6e:b6:44:82:c6:1e:6a:ab:8b:73:c4:83:cc:be:
ca:25:e5:a6:a9:4a:71:b7:74:cc:5c:3b:aa:99:f3:
eb:ee:de:3b:ab:d6:22:47:1a:53:be:05:21:d7:16:
73:52:d5:d3:72:6f:82:2d:70:62:92:32:d8:43:81:
d2:3f:be:bd:e6:51:64:77:5c:26:4c:90:3d:10:45:
78:24:97:de:3c:3a:54:e4:49:1d:3a:d7:3b:c9:0d:
6f:2e:26:82:da:1d:86:64:f3:01:e0:71:d2:2c:32:
e4:14:63:0c:1f:6b:85:4b:26:c5:d1:f3:48:1d:41:
ba:6b:d2:ff:64:70:33:92:fb:67:9c:b6:8a:6b:02:
6e:64:c6:27:9f:f4:9e:88:94:42:45:3f:0e:7c:3e:
78:c7:f5:c0:27:86:85:3a:98:5b:0c:1a:10:2e:c8:
ed:26:e8:bd:59:b6:bf:f7:d9:b3:19:2e:7e:d6:2b:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:10:AD:AD:76:62:A1:BF:5B:45:EA:DE:55:FC:B5:13:94:9D:94:D1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/4xCtrXZiob9bRereVfy1E5SdlNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.226.0/24
109.176.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:80:58:71:2a:31:b3:d0:48:5c:5a:8d:98:5f:9d:74:c4:e3:
b8:e9:ac:ec:c6:45:41:29:dd:17:00:77:1f:bc:0b:9f:f3:35:
2a:20:f9:da:bd:83:f0:6d:ff:af:c3:37:75:33:88:78:6c:69:
d3:c6:e9:1e:8a:57:24:10:6e:2b:36:e3:e4:e8:18:fa:c6:54:
68:1a:5b:4a:e4:81:5b:e9:d2:ec:bf:16:50:ea:31:b4:ed:c5:
cc:42:7c:42:b5:d0:2d:f0:12:b8:17:c6:db:d8:9a:f6:2b:50:
0d:44:e6:96:98:7d:df:dc:c6:35:9d:56:96:bb:f6:71:de:9e:
c0:e0:b2:92:e5:20:2a:e8:2d:32:d9:17:2b:ce:43:88:23:fa:
b9:56:21:40:11:91:51:38:49:9e:d8:8d:96:c3:c1:4e:60:dd:
15:d5:d3:93:0c:1a:60:b1:65:72:7e:6e:2d:b8:57:b6:1b:d1:
09:a9:11:0b:0a:ad:47:ed:e7:86:90:fc:93:8e:85:ab:94:28:
bf:b4:b9:f7:a0:27:cf:9e:08:10:e5:50:94:55:c9:5f:3a:37:
a4:b9:aa:19:5f:ed:f2:db:04:06:fc:86:00:94:28:17:48:0f:
be:5b:5a:09:14:0a:fe:c0:63:4c:e8:02:76:85:a4:cb:8d:ac:
80:cf:f9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:14 2024 by rpki-client on console-fra.rpki-client.org