Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AzDxm8ON_cb7OGR2uuMvRbRtoNc.roa
File: AzDxm8ON_cb7OGR2uuMvRbRtoNc.roa (raw, json)
Hash identifier: B/bvqq7CBu+bqvXrXCYHfGJBe1spTyxeVodkFBoQXW0=
Subject key identifier: 03:30:F1:9B:C3:8D:FD:C6:FB:38:64:76:BA:E3:2F:45:B4:6D:A0:D7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC34946BE4F394377DBC975D2D4DF3ACF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AzDxm8ON_cb7OGR2uuMvRbRtoNc.roa
Signing time: Mon 01 Jan 2024 04:30:08 +0000
ROA not before: Mon 01 Jan 2024 04:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 89.213.186.0/23 maxlen: 24
82.152.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:46:be:4f:39:43:77:db:c9:75:d2:d4:df:3a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0330f19bc38dfdc6fb386476bae32f45b46da0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2d:16:26:fd:61:3b:d6:0c:32:a7:a0:60:7f:
fb:1f:de:d0:44:03:71:02:c3:a5:d3:af:e0:da:3e:
04:e8:35:96:00:d4:03:72:d4:cc:a5:40:ff:13:fc:
c9:24:50:fd:a2:bc:7b:72:0b:58:db:05:5f:d3:28:
9e:17:79:d4:65:58:4c:4c:ae:e5:16:55:31:ec:70:
f2:5b:4b:0d:76:80:4c:ae:a8:49:ad:57:03:8e:1a:
e6:9c:6d:b9:36:ae:24:19:4a:35:e9:ca:cf:98:0e:
ea:a9:22:b2:79:54:8e:fb:a1:4e:19:cb:57:94:18:
93:ac:e3:f3:7e:18:4b:8d:54:94:41:ca:65:dd:5a:
fc:2c:8e:14:7b:25:30:71:6f:6c:4a:b9:a1:f0:d2:
51:1b:7f:16:15:67:b8:c4:49:a9:75:60:7e:7f:6a:
69:23:9e:aa:a4:b4:6a:33:cc:d5:b7:39:90:00:39:
a5:56:93:fd:85:2c:ff:0d:b9:63:fc:24:7e:9c:f9:
35:c0:ff:03:8d:f1:1f:fd:d7:30:36:24:15:b7:67:
26:32:53:2c:86:48:f9:a1:f5:b1:85:2b:2e:f2:22:
f5:1d:b7:9b:80:5d:7c:49:67:ac:54:f7:bb:4a:0f:
98:70:1d:e9:c9:1e:a0:a9:61:ba:1d:0e:b8:08:a4:
bd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:30:F1:9B:C3:8D:FD:C6:FB:38:64:76:BA:E3:2F:45:B4:6D:A0:D7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AzDxm8ON_cb7OGR2uuMvRbRtoNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.178.0/24
89.213.186.0/23
Signature Algorithm: sha256WithRSAEncryption
38:b6:53:43:ff:2e:17:d1:7e:70:2e:65:80:d2:5d:23:57:0f:
09:3a:55:f0:9d:1a:02:f1:1e:ca:4c:67:4e:82:7f:7c:e6:31:
d7:cd:25:0c:66:58:40:75:2b:24:32:5b:9d:1d:d8:08:cf:e4:
c6:e6:b0:f1:0a:46:5e:b4:5e:33:cc:e3:d2:ae:a9:2e:c1:82:
42:55:ab:6b:4b:4f:65:12:7e:0c:d8:27:61:4a:c3:9a:8e:9f:
ae:1e:a2:df:1a:97:5a:78:8f:e0:4d:48:e1:89:a9:23:d9:92:
e9:18:1b:34:34:67:51:58:d3:b3:23:aa:d4:de:a0:66:e4:96:
a7:5e:7f:71:59:ee:bc:ef:52:20:7e:02:06:97:9c:cb:99:0c:
9b:6d:32:9e:8a:e1:33:6e:be:75:57:d6:da:65:68:b5:16:3a:
cc:61:e6:5e:f7:26:01:dc:84:d8:1d:07:78:45:d9:f2:3c:42:
3e:bc:08:0b:2c:cc:15:f9:7f:c7:c5:c8:44:51:0f:41:b5:1f:
66:1a:96:a9:b0:82:f3:70:a7:b2:c7:f1:91:26:34:a1:d9:82:
76:28:82:f3:ac:15:88:f6:5f:37:43:9b:60:df:a6:a4:20:f1:
1c:0f:1c:69:14:62:24:08:72:98:fc:40:48:f0:cb:9b:a6:32:
f6:4c:f5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:06:32 2024 by rpki-client on console-fra.rpki-client.org