Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_uI71soVgXXcUYBdw1ZWo-eEedw.roa
File: _uI71soVgXXcUYBdw1ZWo-eEedw.roa (raw, json)
Hash identifier: cmHOt9+hcnKb/hsDoI4JtzlAin23jWJqEy60t6T4U+w=
Subject key identifier: FE:E2:3B:D6:CA:15:81:75:DC:51:80:5D:C3:56:56:A3:E7:84:79:DC
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01900D12805E3EE80812C0AF1C8EDB01325B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_uI71soVgXXcUYBdw1ZWo-eEedw.roa
Signing time: Wed 12 Jun 2024 15:30:34 +0000
ROA not before: Wed 12 Jun 2024 15:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215184
IP address blocks: 82.152.105.0/24 maxlen: 24
213.130.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0d:12:80:5e:3e:e8:08:12:c0:af:1c:8e:db:01:32:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 12 15:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fee23bd6ca158175dc51805dc35656a3e78479dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:8b:6f:2e:68:d5:a1:df:f6:a8:3d:3a:57:
a4:c2:63:0d:d2:87:ed:59:41:32:1b:ad:fc:87:f8:
18:68:02:f3:e9:38:bc:f3:3f:81:d6:e7:ba:b3:e5:
02:63:ae:29:de:0c:c6:52:ce:ea:5d:1f:85:44:3f:
ba:c2:8d:20:fd:a6:1a:b8:d9:30:10:08:48:42:df:
0f:5b:9c:29:97:10:7b:67:f4:e6:80:74:96:87:6e:
8e:9e:35:41:3a:e0:3f:e3:c7:52:b0:87:e3:7c:dd:
d1:be:d2:48:53:51:28:bf:14:b9:17:07:fc:fb:ae:
83:34:e9:da:cb:7a:c2:6e:11:4f:a3:50:0d:b3:8c:
ce:0a:e8:63:84:fa:45:d3:c0:3d:cb:d4:6a:d6:db:
43:5f:f2:40:34:02:62:76:ef:e6:5e:47:c9:bd:10:
4f:49:13:25:ea:6e:8b:6d:18:04:3b:f6:66:48:ff:
d9:55:7a:03:a0:c9:82:07:50:e9:82:05:31:84:80:
25:db:66:a7:9b:32:e7:0d:98:b0:03:da:7e:33:03:
07:e1:12:be:7a:f2:ef:e7:6a:dc:e0:10:2c:e4:bb:
7e:34:26:11:e7:a9:e2:2f:2a:f8:75:64:9a:f0:f3:
22:69:d0:ab:a8:47:b2:2f:b2:95:3b:f5:07:0c:7a:
c4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E2:3B:D6:CA:15:81:75:DC:51:80:5D:C3:56:56:A3:E7:84:79:DC
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_uI71soVgXXcUYBdw1ZWo-eEedw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.105.0/24
213.130.140.0/22
Signature Algorithm: sha256WithRSAEncryption
25:dd:5a:e5:c8:26:b3:b5:a8:0c:0b:6b:b3:96:51:5b:73:61:
b8:cf:ac:00:47:0e:d5:c6:ba:ea:0c:a0:14:eb:fe:b1:4f:57:
80:18:c3:eb:dc:ed:a6:81:69:11:df:1d:2a:54:2f:75:0a:73:
9c:17:1d:01:a3:50:db:12:95:3f:3f:03:75:93:c2:5e:f9:97:
2f:46:6a:87:a4:b2:aa:05:ee:53:05:4c:86:52:4d:2a:d4:3a:
ff:6d:cb:a5:3a:b1:b3:d7:c4:40:9f:91:82:f8:72:f5:b8:18:
dc:0b:b3:86:07:73:a4:17:1c:c5:72:58:06:e9:62:18:c3:f8:
a8:20:34:0d:ad:59:19:55:e8:bd:e6:b3:9e:a4:65:81:fe:4e:
fa:f2:b6:60:6b:00:6b:99:46:96:14:e9:8a:df:02:43:e2:d0:
07:4b:99:03:00:21:aa:fa:b4:b6:75:6c:03:de:0e:cd:a1:ad:
5a:75:3e:23:81:c4:a6:f2:9e:ac:26:16:0a:c4:f0:d6:e2:20:
8b:2d:6a:85:de:e2:f6:eb:32:5b:c5:3a:9f:3b:87:7b:f7:10:
bb:b4:81:33:34:68:2b:63:3c:a0:b4:1b:53:de:a7:76:48:29:
d2:66:8a:e1:11:09:08:44:0f:19:34:aa:2e:af:f7:f4:a0:fd:
dd:48:6b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:02:39 2024 by rpki-client on console-ams.rpki-client.org