Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/L-ckpZI50eN6Nr3QvM7jv7cmdzQ.roa
File: L-ckpZI50eN6Nr3QvM7jv7cmdzQ.roa (raw, json)
Hash identifier: r44SkQTJmho5aLG9N/vXVdXRnl8A8a8zFjWnHOJ+TB8=
Subject key identifier: 2F:E7:24:A5:92:39:D1:E3:7A:36:BD:D0:BC:CE:E3:BF:B7:26:77:34
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E79F72AC7A3D41C39881DD48126EC21CB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/L-ckpZI50eN6Nr3QvM7jv7cmdzQ.roa
Signing time: Tue 26 Mar 2024 08:53:45 +0000
ROA not before: Tue 26 Mar 2024 08:53:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205965
IP address blocks: 82.163.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Jun 2024 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:79:f7:2a:c7:a3:d4:1c:39:88:1d:d4:81:26:ec:21:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 26 08:53:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fe724a59239d1e37a36bdd0bccee3bfb7267734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2f:26:64:39:32:c8:6f:8a:79:0d:f5:74:49:
5d:43:ac:04:91:37:76:6d:e2:26:94:2d:e7:4a:19:
86:b9:33:06:e1:64:39:18:39:e5:4a:81:1d:ba:e6:
67:0e:58:05:1f:5e:08:2b:72:95:e9:fa:57:da:de:
1c:ac:1f:81:0e:ef:a4:9b:25:c7:73:8a:0a:a3:3a:
0c:55:27:0f:45:2f:cf:77:e1:05:44:87:55:52:5b:
02:c8:1e:04:03:92:5f:19:33:1d:72:4b:a8:ea:21:
76:af:e0:f3:a8:42:df:87:09:db:5b:af:b2:49:4a:
d3:cc:53:e6:eb:9b:d7:00:a9:3a:c0:90:db:41:09:
16:15:cc:f8:4b:16:2c:0a:08:4a:24:5c:15:a7:61:
eb:2c:93:ba:47:1a:bf:c6:99:ca:24:e8:83:0c:ef:
7f:8f:c5:6b:06:b2:fb:0b:7b:c6:3d:85:24:79:f2:
98:c1:62:89:a6:3e:44:ce:87:49:ae:df:23:7f:8d:
f5:57:58:4c:a0:2a:fe:71:a1:79:13:d6:f0:a8:13:
c2:78:e2:e6:0f:06:ca:86:05:66:0e:40:f7:ed:d4:
67:91:c2:db:c6:a3:90:30:51:be:de:14:a5:4d:e8:
6e:99:ac:83:f6:6a:aa:74:a9:8e:00:f4:49:a2:fa:
c8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E7:24:A5:92:39:D1:E3:7A:36:BD:D0:BC:CE:E3:BF:B7:26:77:34
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/L-ckpZI50eN6Nr3QvM7jv7cmdzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.18.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d4:86:e2:db:59:cc:aa:44:7a:5c:52:42:5c:0c:99:7a:78:
c4:50:80:8f:f6:bb:16:37:f3:30:c8:f1:cf:2f:c5:63:cf:6d:
a1:7d:ce:12:ec:bb:bc:09:e2:92:9c:44:ad:a0:f8:29:59:67:
4a:ca:55:d6:0e:40:bd:8f:75:84:37:d7:d4:d4:fa:f3:08:e7:
64:7e:ef:d0:98:25:0d:fd:bd:30:93:b2:c2:67:18:e6:d4:54:
93:88:d0:b4:19:e4:cc:a5:d1:79:96:e8:b4:84:7a:92:5f:9e:
26:92:a7:77:88:f1:ef:2d:48:d4:c2:b8:84:0a:2b:ee:b4:b0:
86:2d:f8:56:c2:89:26:93:82:a8:73:68:40:e3:1f:19:f5:72:
d4:75:49:c8:e5:e4:d1:6b:fe:cc:62:9d:c5:9a:e6:68:91:3c:
d6:42:54:48:54:db:d4:2d:70:58:70:66:3b:2a:91:c3:c0:e4:
c9:ed:5d:ab:e6:a8:ee:39:79:0e:9a:4a:ca:62:43:02:6d:45:
7c:0e:9c:42:a0:06:e7:7a:d5:4e:8d:90:e3:90:5b:7a:a0:18:
b5:ff:85:c9:f2:32:d8:f4:37:6e:14:19:9e:6e:23:35:f1:31:
2b:45:d5:fe:dc:71:bf:f7:4e:5e:c1:06:b6:9d:88:34:e0:3f:
f2:e3:40:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY559yrHo9QcOYgd1IEm7CHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwMzI2MDg1MzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmU3MjRhNTkyMzlkMWUzN2EzNmJkZDBiY2NlZTNiZmI3MjY3NzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy8mZDkyyG+KeQ31dEldQ6wEkTd2
beImlC3nShmGuTMG4WQ5GDnlSoEduuZnDlgFH14IK3KV6fpX2t4crB+BDu+kmyXH
c4oKozoMVScPRS/Pd+EFRIdVUlsCyB4EA5JfGTMdckuo6iF2r+DzqELfhwnbW6+y
SUrTzFPm65vXAKk6wJDbQQkWFcz4SxYsCghKJFwVp2HrLJO6Rxq/xpnKJOiDDO9/
j8VrBrL7C3vGPYUkefKYwWKJpj5EzodJrt8jf431V1hMoCr+caF5E9bwqBPCeOLm
DwbKhgVmDkD37dRnkcLbxqOQMFG+3hSlTehumayD9mqqdKmOAPRJovrIrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC/nJKWSOdHjeja90LzO47+3Jnc0MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvTC1ja3BaSTUwZU42TnIzUXZNN2p2N2NtZHpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUqMSMA0G
CSqGSIb3DQEBCwUAA4IBAQA11Ibi21nMqkR6XFJCXAyZenjEUICP9rsWN/MwyPHP
L8Vjz22hfc4S7Lu8CeKSnEStoPgpWWdKylXWDkC9j3WEN9fU1PrzCOdkfu/QmCUN
/b0wk7LCZxjm1FSTiNC0GeTMpdF5lui0hHqSX54mkqd3iPHvLUjUwriECivutLCG
LfhWwokmk4Koc2hA4x8Z9XLUdUnI5eTRa/7MYp3FmuZokTzWQlRIVNvULXBYcGY7
KpHDwOTJ7V2r5qjuOXkOmkrKYkMCbUV8DpxCoAbnetVOjZDjkFt6oBi1/4XJ8jLY
9DduFBmebiM18TErRdX+3HG/905ewQa2nYg04D/y40Be
-----END CERTIFICATE-----
Generated at Tue Jun 11 10:01:54 2024 by rpki-client on console-fra.rpki-client.org