Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5mXn01iRfMXUoK-9n-W1h9qhgsM.roa
File: 5mXn01iRfMXUoK-9n-W1h9qhgsM.roa (raw, json)
Hash identifier: ZXYIVS++kjDEjk4EOGUyliGTsJit9HGX7UGf/HYxyXU=
Subject key identifier: E6:65:E7:D3:58:91:7C:C5:D4:A0:AF:BD:9F:E5:B5:87:DA:A1:82:C3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019002D818E63773B2C4E69CFB84B2E87410
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5mXn01iRfMXUoK-9n-W1h9qhgsM.roa
Signing time: Mon 10 Jun 2024 15:50:34 +0000
ROA not before: Mon 10 Jun 2024 15:50:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399820
IP address blocks: 82.153.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:02:d8:18:e6:37:73:b2:c4:e6:9c:fb:84:b2:e8:74:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 10 15:50:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e665e7d358917cc5d4a0afbd9fe5b587daa182c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:02:be:9c:8b:af:6f:a5:6d:70:0d:4b:f4:
7b:74:2a:a7:c6:57:88:89:1c:bc:e5:2a:f9:c2:46:
8e:f6:c6:a4:3a:84:b8:3e:af:d9:39:f6:58:ba:cf:
09:c2:76:41:4b:45:86:3f:fe:3d:94:6f:64:60:5f:
5c:75:2c:fc:31:d5:31:1d:38:b9:4b:46:a1:ce:68:
23:9f:c2:83:57:df:56:74:b7:7d:4d:36:d4:cc:11:
6d:6d:9f:fc:4e:60:e6:92:fe:78:b5:c1:e2:25:d0:
ea:af:34:89:fc:53:88:40:9e:20:37:7b:9c:82:cd:
36:c9:0b:ef:a2:db:56:cb:ae:a2:eb:5d:5d:6a:a6:
6f:88:9e:fc:d0:30:0d:a5:eb:ca:94:71:be:5a:49:
60:95:ee:7f:68:c4:8e:b9:70:39:54:db:3b:9c:c6:
3c:e3:e2:af:b1:94:62:49:06:f7:6d:a6:0a:1a:ee:
1c:d2:91:80:d2:a8:2b:f8:e8:f2:1a:28:62:39:77:
9c:a7:d3:82:4a:ca:4a:94:ab:da:31:79:24:cc:ef:
e0:5c:9f:8d:72:86:1c:40:26:f6:09:92:6c:91:f8:
3b:c1:7d:73:85:db:4a:e3:38:7a:96:0c:1b:08:df:
89:a8:9c:ce:d6:93:66:ac:92:2a:59:6e:3e:82:3a:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:65:E7:D3:58:91:7C:C5:D4:A0:AF:BD:9F:E5:B5:87:DA:A1:82:C3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5mXn01iRfMXUoK-9n-W1h9qhgsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.134.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:09:43:65:af:92:e8:51:8e:53:b2:df:43:7b:f3:e3:59:58:
90:d6:32:6d:39:62:3f:ba:f0:50:d7:55:17:1d:d2:e6:5c:66:
c1:40:a1:47:d6:f5:e8:d6:25:f7:90:73:ac:bd:a8:c7:5b:22:
74:22:48:75:9f:59:5b:e6:f2:83:96:51:26:bd:4e:4c:3b:ed:
d5:db:83:b3:38:df:ba:a0:30:03:5b:1c:18:19:7b:85:9f:fd:
b0:1b:01:9a:f1:d1:78:1f:c0:f8:d4:0f:ba:cc:ea:11:2c:46:
6d:a4:b7:35:05:5f:b1:9e:f1:f1:ac:c6:85:cb:e2:28:9d:74:
51:8a:f8:ba:2a:5c:1b:b5:87:67:10:64:db:82:48:ca:4a:38:
1a:de:99:9a:52:37:4a:49:ae:46:9b:22:e4:c6:10:42:57:74:
f2:4e:d5:4b:19:0e:a5:66:45:6c:6e:aa:62:41:49:b5:a6:c5:
41:3f:30:c2:df:6c:91:22:81:bb:fc:b7:cd:80:ce:b0:5a:ca:
86:6b:7f:ea:40:36:02:24:3d:61:f7:e8:6d:c3:43:4e:e2:73:
99:af:a2:45:c0:51:eb:c9:0a:17:b8:27:e7:af:47:fd:94:78:
91:3b:8d:1c:0f:1e:d5:e6:b9:92:ed:82:f2:10:e2:a5:f6:73:
7d:dd:d7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:19 2024 by rpki-client on console-ams.rpki-client.org