Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8UPiZmwJpe0ofSWBBsj7jVGqNkw.roa
File: 8UPiZmwJpe0ofSWBBsj7jVGqNkw.roa (raw, json)
Hash identifier: qdkfZH2z0awrK0F9T5jl9UJGyCHFz5TjE/I5uMCDElM=
Subject key identifier: F1:43:E2:66:6C:09:A5:ED:28:7D:25:81:06:C8:FB:8D:51:AA:36:4C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EE5B684ACDEC6D8C860586E24FD7C9475
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8UPiZmwJpe0ofSWBBsj7jVGqNkw.roa
Signing time: Tue 16 Apr 2024 07:02:07 +0000
ROA not before: Tue 16 Apr 2024 07:02:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 82.152.49.0/24 maxlen: 24
89.213.129.0/24 maxlen: 24
213.218.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e5:b6:84:ac:de:c6:d8:c8:60:58:6e:24:fd:7c:94:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 16 07:02:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f143e2666c09a5ed287d258106c8fb8d51aa364c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:3b:97:f6:62:37:89:59:ed:6a:23:80:b6:
12:cf:71:9d:02:4d:f8:50:7b:ed:7e:5f:ff:7f:12:
09:48:1f:63:1f:c8:46:16:c7:95:9b:33:8c:4a:bc:
a9:22:ad:b7:7d:fe:e4:db:fc:7d:0c:5e:62:75:99:
57:7b:f7:f6:a9:d1:2c:6e:fc:5a:62:0d:f4:80:cf:
36:86:b1:21:74:db:e5:be:fa:cd:8a:d9:30:7f:83:
36:4b:92:85:a9:91:8b:1a:76:83:2c:14:68:bc:34:
c8:14:2e:dd:55:14:16:8d:2e:53:eb:9c:2a:a3:c6:
54:a4:f2:67:40:d5:22:3f:99:2b:0f:89:81:66:89:
d8:73:b4:91:7e:e6:c9:4d:3d:dd:9b:b7:22:75:6d:
0d:1c:ac:c4:db:45:0d:61:79:92:34:7d:aa:01:48:
ea:49:ed:f9:c8:c6:cf:f6:d4:c3:7f:91:88:a2:37:
a0:84:e6:1f:ec:1c:0d:88:15:83:b3:37:c2:bd:b5:
ad:22:cd:3b:0f:25:ee:06:db:ed:a5:27:77:82:47:
f1:da:57:57:4f:1e:27:ec:4a:f5:17:47:ac:0b:e2:
03:a2:0e:56:24:b8:e8:ae:92:25:01:60:77:a0:7f:
0c:3d:33:00:e7:ab:db:e9:ef:8c:0a:87:e2:0d:76:
fb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:43:E2:66:6C:09:A5:ED:28:7D:25:81:06:C8:FB:8D:51:AA:36:4C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8UPiZmwJpe0ofSWBBsj7jVGqNkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.49.0/24
89.213.129.0/24
213.218.237.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b1:d2:6e:fb:70:92:37:96:63:51:48:f4:4e:48:95:39:37:
8d:2e:f3:5a:ea:02:60:25:29:f9:f2:81:7d:9c:43:bf:9f:fe:
43:c2:24:ad:98:3d:7e:20:74:7e:81:7e:c5:9d:94:ab:63:aa:
24:23:5b:8e:88:c5:fa:10:e2:e8:e6:d3:5e:9f:4f:44:c7:61:
4f:64:a9:d9:a8:b5:85:1e:e8:b7:14:d0:11:eb:37:8a:6f:14:
98:50:0e:40:05:4f:de:9b:ad:61:b3:f0:69:eb:12:d0:27:0d:
bb:ec:47:6e:49:78:b1:cb:b8:b2:58:ac:ec:3d:b8:f2:2b:67:
f8:18:75:1f:38:d4:29:ec:93:9b:d6:7e:cd:ad:81:8c:33:b5:
89:53:82:46:77:32:f7:e3:9d:71:3b:99:d3:09:95:e2:af:43:
5f:d8:ab:d0:fa:38:40:95:48:8a:42:f1:e0:e7:26:6c:7f:f0:
32:f9:b7:8a:f9:ff:0e:e3:44:6d:66:40:68:2d:1b:1c:93:57:
4f:e2:d0:cd:be:b6:5f:19:1d:9c:56:8a:b6:72:ed:1f:ba:79:
bc:0f:e7:28:02:a1:bd:98:29:ce:2a:57:d5:eb:48:6c:1f:f7:
00:6a:dc:40:8d:53:92:73:23:59:a3:5b:fb:94:97:5b:b2:5b:
ee:93:20:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:46:32 2024 by rpki-client on console-fra.rpki-client.org