Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JuUALeZfybneltJXq4qUC0lR6-0.roa
File: JuUALeZfybneltJXq4qUC0lR6-0.roa (raw, json)
Hash identifier: 2nbl0W8QlNvCtN+2+9k//NEiYBDNnOA8NS6wawl+xYA=
Subject key identifier: 26:E5:00:2D:E6:5F:C9:B9:DE:96:D2:57:AB:8A:94:0B:49:51:EB:ED
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F8AB629D37CAA96DA71792FF9495C723F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JuUALeZfybneltJXq4qUC0lR6-0.roa
Signing time: Sat 18 May 2024 07:59:05 +0000
ROA not before: Sat 18 May 2024 07:59:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152672
IP address blocks: 82.153.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8a:b6:29:d3:7c:aa:96:da:71:79:2f:f9:49:5c:72:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 18 07:59:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26e5002de65fc9b9de96d257ab8a940b4951ebed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ff:81:57:37:9a:53:ad:33:e1:96:7b:34:bc:
23:f1:48:ab:32:2f:7f:ee:68:a3:f0:c5:2b:81:e5:
cc:7c:ed:20:84:92:0e:e7:05:3b:a3:3e:6f:a7:cb:
2a:74:3a:5a:42:63:d1:e9:c8:39:bb:56:e6:22:26:
c9:bf:0d:ba:d7:79:1c:c0:35:78:f2:99:75:05:2b:
47:04:8c:96:d2:90:e4:39:12:93:d0:35:ef:33:cf:
05:14:64:38:90:dd:53:49:d9:ec:4d:99:5b:e5:24:
b7:43:c9:13:76:6e:85:89:5e:3b:01:ae:df:88:db:
fe:bb:8d:8d:1a:06:f3:0a:a1:6e:bb:e8:f0:ce:d4:
d3:b6:fc:5a:29:c0:4d:eb:d9:61:97:96:fc:47:3d:
c7:e5:c4:5d:f3:e3:af:02:bc:f4:80:af:bd:6b:42:
e4:b4:20:fa:b8:9d:c5:19:9e:54:bc:ee:00:0d:c3:
d1:32:6b:e6:60:df:0e:f7:4c:0f:3b:42:04:67:02:
d5:22:e5:75:52:12:9e:aa:cc:f8:0d:fa:ae:bc:fd:
d0:90:b4:68:d0:33:07:c3:e7:d7:be:a7:54:49:59:
9d:44:66:f6:5c:fb:00:cd:03:ef:bc:42:98:47:2f:
e5:06:e7:da:a3:ab:e8:d9:71:f2:9b:42:30:f6:68:
45:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E5:00:2D:E6:5F:C9:B9:DE:96:D2:57:AB:8A:94:0B:49:51:EB:ED
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JuUALeZfybneltJXq4qUC0lR6-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.222.0/24
Signature Algorithm: sha256WithRSAEncryption
56:31:3e:3d:77:db:c0:76:3b:16:35:73:1b:ff:c2:8e:f0:2c:
52:0e:f7:41:3c:c8:1d:63:00:28:fb:02:08:ec:10:e1:dc:f3:
6a:ba:4e:4c:89:14:b7:e5:f7:8e:1f:0f:c6:98:91:e7:50:05:
5d:b4:2a:14:1f:f9:53:93:5d:09:54:04:66:fd:d1:c4:bf:13:
c0:a8:9d:93:d0:ed:6f:4e:e6:1d:ca:25:68:3f:26:23:2c:c7:
48:09:3e:eb:0a:99:5a:be:2f:d2:b9:4e:87:df:62:f2:20:64:
f8:0a:23:7c:94:24:09:ca:f9:1c:05:4e:32:e7:bd:b2:4e:43:
7c:9a:7e:ad:59:ca:37:42:df:c8:06:5d:66:d7:cb:37:4b:84:
d2:a3:2c:aa:62:0e:9d:9f:25:82:b2:9d:43:b7:26:d0:3e:a6:
12:ee:36:2b:1d:99:3d:53:4a:97:d8:42:97:a6:cc:2a:40:89:
d2:a7:a6:41:1a:db:61:ef:8a:19:71:f7:47:35:f8:32:a2:f3:
a9:99:61:bd:92:fe:d4:80:9a:39:99:dd:b7:37:7f:b9:1e:63:
61:a0:de:36:56:be:77:1a:ca:4c:5a:6f:64:b1:39:7d:30:e0:
c7:57:e6:9b:2d:69:8a:32:67:9f:fb:97:c5:7e:d6:e3:44:d8:
4f:48:bb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 22:02:34 2024 by rpki-client on console-fra.rpki-client.org