Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/S6bbVZkMN91RK6uuWGDAnl5MI18.roa
File: S6bbVZkMN91RK6uuWGDAnl5MI18.roa (raw, json)
Hash identifier: n3A9UOnmgAwBxonn7LbcHHm9KGOl4LTEsHY3A3h+Xd0=
Subject key identifier: 4B:A6:DB:55:99:0C:37:DD:51:2B:AB:AE:58:60:C0:9E:5E:4C:23:5F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F724E01A8D41B7F3AECF1FED5BE2551A6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/S6bbVZkMN91RK6uuWGDAnl5MI18.roa
Signing time: Mon 13 May 2024 14:14:25 +0000
ROA not before: Mon 13 May 2024 14:14:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60982
IP address blocks: 82.152.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:72:4e:01:a8:d4:1b:7f:3a:ec:f1:fe:d5:be:25:51:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 13 14:14:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ba6db55990c37dd512babae5860c09e5e4c235f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:02:0b:98:a1:50:fb:8b:d0:1b:b7:cc:1a:af:
99:53:47:08:82:63:88:1e:04:ea:9f:4a:b1:51:fb:
99:40:02:86:ff:68:2e:38:36:fd:dc:bd:18:7d:91:
fb:d0:0a:4a:e3:f2:45:dc:a8:3a:c4:59:7f:1d:99:
c4:13:0e:08:2d:6e:8e:c8:f2:b3:5d:79:ba:6a:21:
5d:2a:5e:a6:b7:46:52:7a:e7:90:95:f0:87:7f:61:
cc:d1:2c:d2:ef:3d:86:21:d7:04:78:e7:73:24:d3:
52:de:f4:63:9e:4c:14:c5:22:76:69:e2:f1:b1:bc:
09:28:88:22:3d:a7:47:f2:c6:0c:15:ac:a7:0b:7a:
fe:1a:de:39:b7:ec:ec:f5:0b:49:59:b6:34:a8:05:
18:5f:71:bc:53:cb:db:8e:8e:9b:bc:06:1e:ce:02:
26:e7:a1:1e:39:93:be:39:f6:4d:59:92:38:9a:40:
56:38:7a:c3:52:ad:01:e7:26:b0:07:2f:cb:73:e9:
12:a0:d7:f5:6e:aa:cb:eb:ac:75:cf:30:2f:fc:9d:
8a:6b:d6:08:e6:8a:f2:e9:fe:ed:4e:49:ea:5f:7a:
af:dc:68:d5:8a:bb:bf:a3:c5:9e:b7:88:f4:cd:c0:
bf:39:e6:7c:10:5f:6f:79:df:5a:69:e9:11:d0:f5:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A6:DB:55:99:0C:37:DD:51:2B:AB:AE:58:60:C0:9E:5E:4C:23:5F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/S6bbVZkMN91RK6uuWGDAnl5MI18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.132.0/24
Signature Algorithm: sha256WithRSAEncryption
20:9a:69:66:b2:82:27:bf:6c:55:83:ae:f8:72:90:5e:77:0e:
b2:08:40:76:57:d8:67:6a:8e:cb:48:a1:bf:2e:36:d6:33:52:
d0:b1:10:76:29:56:b9:20:ae:21:9b:8f:b6:95:b7:08:ba:5c:
72:6b:b6:62:6a:fd:7e:b8:a0:22:6d:1b:98:9c:fe:37:a4:9c:
7e:5b:30:ad:68:3f:4c:21:eb:e6:12:01:6b:7b:3f:59:52:20:
04:38:f9:96:c8:13:cd:93:8a:01:77:c8:9b:82:84:81:d5:5c:
d3:ec:27:b0:e7:0d:cc:53:5c:3f:a7:8a:e7:8c:ed:f7:42:a8:
aa:b1:1c:78:9e:56:8a:ac:97:3c:18:1a:03:84:62:6b:b8:cd:
f2:54:46:37:90:ae:37:83:a9:fe:fd:a6:eb:10:9f:48:03:6e:
ce:4d:33:eb:2b:a0:c0:62:a0:ed:44:18:47:90:8f:54:08:5a:
72:fb:9e:de:05:d6:20:d8:f9:54:1b:bd:27:f1:36:9e:e3:95:
38:20:76:23:e4:90:62:8a:0c:40:78:01:49:2d:52:3a:d0:55:
af:8f:a8:ef:d4:4b:e8:5b:8d:75:3e:0f:ab:b5:66:e1:94:4e:
7f:14:a6:f6:f1:3c:8e:87:44:ee:97:fa:bd:50:82:2b:68:b5:
ff:7a:51:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:46:53 2024 by rpki-client on console-fra.rpki-client.org