Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WjIVU3IVPk5cF3dTBTsPOHg0LLI.roa
File: WjIVU3IVPk5cF3dTBTsPOHg0LLI.roa (raw, json)
Hash identifier: 7PshjJ85KuOO0O0xJrqcLUVSB9/efc3tr+TS0ihbL2c=
Subject key identifier: 5A:32:15:53:72:15:3E:4E:5C:17:77:53:05:3B:0F:38:78:34:2C:B2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018DD521A5599E4C703BEB3128AFDC775E0C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WjIVU3IVPk5cF3dTBTsPOHg0LLI.roa
Signing time: Fri 23 Feb 2024 08:42:48 +0000
ROA not before: Fri 23 Feb 2024 08:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212332
IP address blocks: 82.153.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:21:a5:59:9e:4c:70:3b:eb:31:28:af:dc:77:5e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 23 08:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a32155372153e4e5c177753053b0f3878342cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:b1:50:73:6a:db:03:9d:98:98:c7:c5:cd:
1f:0d:65:cd:4c:41:85:d1:61:39:71:f0:40:7a:22:
d4:e8:bf:35:78:38:39:a4:f2:61:46:ce:c4:b5:9f:
7a:51:de:a9:2c:37:cf:e6:ff:ce:1e:92:11:99:96:
19:20:31:2e:56:29:55:7b:11:e4:2a:2c:64:1b:45:
99:86:9c:bd:b7:88:33:24:d6:33:d0:4b:7b:0e:21:
0d:2b:4e:01:4f:0f:b8:68:bc:d7:07:99:34:20:79:
c4:5e:c3:6a:6b:45:28:61:40:7e:1e:ce:31:46:f1:
84:55:55:70:a2:9f:c4:97:e9:0a:d7:f3:a5:75:be:
15:76:aa:bc:a3:58:6c:b9:b7:58:c6:79:9f:30:c0:
ff:f3:5e:8b:58:c6:f7:f7:26:b6:cf:f8:d5:50:59:
2c:6d:89:cc:6c:9d:a6:ac:89:3c:f2:32:cf:dc:cd:
0f:fe:d0:4d:14:eb:82:a2:72:73:81:c3:26:88:b5:
f5:56:2e:6b:d1:a7:c0:46:a2:ed:3a:d8:e2:ab:00:
00:46:1d:fe:ab:9a:ca:f9:1a:a6:5c:4b:b9:e5:7b:
73:0e:83:13:d9:3d:e6:6a:0d:c3:0f:3c:57:ed:54:
82:5a:38:95:74:2e:a4:3a:dc:19:c4:fb:42:9a:c0:
4f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:32:15:53:72:15:3E:4E:5C:17:77:53:05:3B:0F:38:78:34:2C:B2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WjIVU3IVPk5cF3dTBTsPOHg0LLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.242.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b9:57:02:d0:c0:10:f7:cb:81:1c:5a:90:a8:79:6c:33:00:
d6:12:3e:85:cc:12:b3:27:87:9f:75:d9:5e:bb:26:06:55:ad:
79:94:f9:0c:d4:2b:7a:97:3c:1f:96:53:dc:ea:18:33:4f:ef:
80:ad:c3:9a:9f:dc:c1:e6:7e:f3:56:3e:ea:99:5a:23:eb:b8:
ef:63:57:1c:88:c9:9f:da:c0:91:1c:45:49:6e:f8:f8:39:f8:
46:03:fa:a1:b6:77:b9:b6:3b:3e:a4:5e:e1:f6:b0:ad:0c:ee:
04:a8:1e:d5:c6:a9:ba:aa:60:3d:f9:d1:69:3c:be:45:46:87:
21:64:6c:c1:df:31:f3:0f:3e:26:b5:5d:6a:0d:ca:42:5e:6d:
eb:a4:69:66:0c:84:60:6e:73:a5:08:b1:fa:62:93:a6:b3:43:
d5:db:72:69:67:c0:36:2b:44:09:d2:5f:38:f9:ec:42:b6:94:
2f:a8:00:9c:ca:5d:e4:cd:90:67:96:96:a7:62:60:5f:73:c1:
97:f9:1d:b3:74:1a:21:be:9c:1e:2d:16:e4:92:d7:c1:89:41:
c0:31:fb:44:40:18:ad:3b:6a:9b:27:ec:b9:0c:57:d2:a9:33:
f7:9e:c8:0f:50:4e:20:74:44:7c:8c:e6:36:d6:a7:6f:c1:3d:
b7:c2:f4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 08:15:11 2024 by rpki-client on console-ams.rpki-client.org