Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KxEwLSjLZBWd6R24cCeFHNHhnPE.roa
File: KxEwLSjLZBWd6R24cCeFHNHhnPE.roa (raw, json)
Hash identifier: Q0XLAcEfl4C2yjEpP6ec4pN4e7M0u/tBZtXik889gzI=
Subject key identifier: 2B:11:30:2D:28:CB:64:15:9D:E9:1D:B8:70:27:85:1C:D1:E1:9C:F1
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC349620EAD6BFFAEA4435CC20D01A7D3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KxEwLSjLZBWd6R24cCeFHNHhnPE.roa
Signing time: Mon 01 Jan 2024 04:30:15 +0000
ROA not before: Mon 01 Jan 2024 04:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211936
IP address blocks: 82.153.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:62:0e:ad:6b:ff:ae:a4:43:5c:c2:0d:01:a7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b11302d28cb64159de91db87027851cd1e19cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:3f:69:61:b8:62:8e:3a:c2:5e:2f:ca:cc:
a5:f4:22:51:4a:d5:ab:c4:7b:1c:7c:b9:d4:93:e4:
32:1d:d1:ac:67:7a:c9:8f:d0:db:8f:dc:43:1d:ee:
7d:ca:3e:25:46:82:2a:7b:55:84:58:b9:07:d3:e7:
91:7b:61:40:f5:28:57:b5:ba:12:a7:40:d7:b0:bb:
88:82:96:4d:67:52:d3:ce:67:80:a5:e1:3a:e4:67:
69:f1:40:35:20:dc:f6:39:93:39:2e:1e:13:b5:58:
e9:f7:74:da:8d:b1:2a:4d:89:48:72:b8:f6:75:4d:
c4:bc:03:29:5f:28:78:f8:11:e8:9f:60:cd:09:b4:
7f:f4:7c:d6:7c:0f:dd:d1:a0:a3:d0:81:b9:ff:58:
c4:b6:48:08:4d:63:eb:8a:07:56:05:54:26:31:e8:
c1:c1:4d:a4:e0:2c:3a:dd:04:0f:27:36:bf:4c:d6:
8e:be:cd:28:c6:69:ea:03:5d:77:c7:7c:8c:f3:b4:
01:85:0b:66:40:50:92:39:c4:a8:10:03:a5:82:6e:
6e:7e:bb:95:d1:45:cd:42:af:91:50:94:7b:64:1d:
12:7c:c7:d4:f6:73:fe:83:58:86:e4:3b:0f:eb:43:
a4:e0:e1:09:4c:de:9e:08:17:30:93:23:9c:e2:d2:
a4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:11:30:2D:28:CB:64:15:9D:E9:1D:B8:70:27:85:1C:D1:E1:9C:F1
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/KxEwLSjLZBWd6R24cCeFHNHhnPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.32.0/24
Signature Algorithm: sha256WithRSAEncryption
07:fc:89:a6:a5:b6:9f:5a:70:56:65:e9:fa:7c:2c:c1:df:dc:
7d:e2:3e:94:18:d0:87:e4:3e:d6:ff:18:21:dc:dd:5c:16:34:
72:16:9f:a1:67:9d:a2:a9:c1:03:cf:ce:f3:c6:86:31:43:87:
c0:b0:ce:ce:2a:72:fc:59:13:f2:4b:da:f1:08:5e:cf:89:71:
8a:9a:71:6c:33:00:38:54:02:30:3c:ea:37:1a:80:37:6c:4f:
03:6e:51:da:23:50:3f:c9:e5:77:b4:41:ec:46:42:f3:a2:bb:
10:2f:d4:db:b7:b4:8f:e2:d6:84:85:91:ac:1e:a9:b5:f4:7b:
63:36:ef:7f:f5:a4:38:fe:d1:38:45:92:69:af:f6:65:dd:a8:
7c:d8:d0:bf:30:ca:cb:00:d2:87:1a:8b:ae:c1:72:09:ab:ea:
43:ee:49:8e:11:0c:b5:a2:88:c1:1e:b6:cb:1d:90:1f:10:a9:
b0:af:c7:80:eb:45:87:e4:59:9e:be:f2:d5:9e:a5:a5:93:78:
2e:16:50:b4:40:59:0a:26:ca:90:00:b4:80:b8:aa:80:4e:c0:
62:83:ee:a4:6a:1d:6e:4e:18:34:4a:2b:17:6b:50:a4:00:ab:
88:27:08:58:0d:48:f5:78:c9:63:5d:bf:e9:bd:be:ae:44:8a:
c1:80:b6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 22:11:47 2024 by rpki-client on console-fra.rpki-client.org