Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KtINxSVv1IJQk0QvvQTXPWqZwHs.roa
File: KtINxSVv1IJQk0QvvQTXPWqZwHs.roa (raw, json)
Hash identifier: U7jWA1VY4zgJ7ku5ZV/v/66aZ2xVoQFchLeSXvX2bEg=
Subject key identifier: 2A:D2:0D:C5:25:6F:D4:82:50:93:44:2F:BD:04:D7:3D:6A:99:C0:7B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019199C18A718098F5D22F5DCE92D48B4ABF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KtINxSVv1IJQk0QvvQTXPWqZwHs.roa
Signing time: Wed 28 Aug 2024 16:11:23 +0000
ROA not before: Wed 28 Aug 2024 16:11:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 82.152.49.0/24 maxlen: 24
82.153.228.0/23 maxlen: 24
213.218.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:99:c1:8a:71:80:98:f5:d2:2f:5d:ce:92:d4:8b:4a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 28 16:11:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ad20dc5256fd4825093442fbd04d73d6a99c07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:b9:ad:76:9b:35:a5:be:c6:ce:b6:46:c0:
9c:70:9f:f2:cc:20:cd:d6:3f:d4:e7:f4:2e:2e:0a:
c1:d5:27:82:03:46:de:49:fa:ea:8c:5e:5f:64:9a:
88:c5:cb:71:9d:9d:2a:2b:1c:e0:07:af:52:70:aa:
19:6e:f3:44:52:5f:da:67:c6:c8:19:75:3f:18:14:
83:fe:ca:d6:31:b5:bb:be:c7:52:f4:af:2b:3e:5f:
6b:7d:b2:e0:2c:69:86:9d:2f:78:8f:33:22:2f:d4:
dd:5f:de:22:65:84:94:7c:4a:4f:a7:7c:38:43:bf:
85:09:1a:82:2a:68:7f:2c:44:d4:ba:29:c8:0a:a4:
7f:dc:e3:0e:02:5e:24:84:73:a6:6c:e9:b0:b5:b8:
d7:a3:db:42:52:a4:59:9c:5e:e2:2c:e8:6f:eb:08:
ac:1a:aa:88:4e:e0:86:e5:08:aa:68:22:73:54:d3:
88:22:25:91:b9:71:fb:ab:52:a7:39:4d:37:90:1e:
75:6b:e0:5b:06:b2:00:10:09:93:39:1b:0e:c1:70:
16:c5:45:ad:62:7c:29:b1:0b:a0:3b:1a:ad:c9:7a:
be:ea:eb:c0:56:60:85:29:b3:5e:28:7a:96:ef:96:
f7:d8:24:69:1c:fa:98:3b:a5:2a:e5:cc:e2:e8:32:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D2:0D:C5:25:6F:D4:82:50:93:44:2F:BD:04:D7:3D:6A:99:C0:7B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KtINxSVv1IJQk0QvvQTXPWqZwHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.49.0/24
82.153.228.0/23
213.218.237.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d4:59:62:84:22:ad:d9:1b:35:c7:b9:f2:f2:b4:78:4b:bb:
75:0e:cd:2c:74:ef:31:da:95:9e:a6:73:50:b8:3e:a4:3c:57:
14:77:cb:87:50:99:52:70:67:fe:1b:8d:95:85:14:fa:3a:01:
35:12:c2:6c:cb:90:45:ee:98:2e:65:3a:ab:f8:90:67:da:91:
1b:63:24:50:52:f9:a2:11:a6:8c:e4:b9:52:e5:5b:7d:63:5f:
2e:0c:c1:86:7a:36:a9:a7:a9:7c:3b:63:13:c4:1e:9b:18:d9:
66:0b:93:06:7b:21:ec:c3:81:bc:f8:78:30:93:ba:99:8f:14:
af:e9:ad:1c:2c:56:93:ee:af:f7:bb:79:58:cb:ff:e5:0e:b9:
5a:27:9e:85:31:35:26:7d:b5:bf:cd:fe:50:f5:cc:24:71:09:
34:be:ee:7e:c1:47:95:11:d9:73:6b:6b:16:fa:db:fd:d6:c2:
34:32:99:96:b5:c8:51:67:f7:a9:87:b7:a3:f1:1f:eb:ff:96:
e4:a6:39:2e:07:c1:4b:fa:66:d9:dc:35:29:9c:33:3a:61:27:
dc:ca:05:e7:58:3f:5a:fe:1a:5a:ec:75:1e:71:59:3d:6e:a8:
c2:41:d5:d5:b0:2b:78:16:61:a0:43:37:95:87:a9:73:fd:42:
70:05:45:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:22 2024 by rpki-client on console-ams.rpki-client.org