Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gvHldHfcOAyQWRcFUHDsj0vPCfU.roa
File: gvHldHfcOAyQWRcFUHDsj0vPCfU.roa (raw, json)
Hash identifier: CxtH7rkyia48YqWf0obR1MseYq18PS5vQmvVew9AoWM=
Subject key identifier: 82:F1:E5:74:77:DC:38:0C:90:59:17:05:50:70:EC:8F:4B:CF:09:F5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421443C33F55766E4F44A614309900E4B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gvHldHfcOAyQWRcFUHDsj0vPCfU.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399820
IP address blocks: 82.153.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3c:33:f5:57:66:e4:f4:4a:61:43:09:90:0e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82f1e57477dc380c905917055070ec8f4bcf09f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d2:8b:f3:80:71:09:22:40:38:06:f9:cd:77:
ec:05:e5:86:79:ad:49:b0:d3:a8:8c:ac:d9:15:1f:
09:46:e7:18:be:ba:74:13:77:ef:5b:6a:af:52:a0:
3c:8e:7b:9c:8b:ea:96:24:39:43:26:28:9f:60:c5:
b6:c3:c2:9c:0f:87:62:da:16:f9:40:51:49:5a:55:
d8:01:7e:8c:30:c3:61:5e:9e:de:9a:95:f7:ad:25:
15:81:83:d6:98:9a:b6:ed:f8:1d:88:49:65:f4:08:
9e:d6:eb:2a:52:96:d3:aa:e9:a6:5b:e7:ce:9f:e4:
87:2c:00:7e:77:86:eb:fb:9e:f6:3e:d9:d4:2b:8a:
69:e5:b2:89:91:1b:ea:3f:9b:1e:b9:45:4b:52:cc:
75:f9:4c:4a:b7:07:96:fa:12:1f:3f:9b:a6:00:cd:
16:09:43:c2:20:f0:3a:af:a8:a1:9c:06:bc:3d:88:
36:30:91:78:3b:dc:08:09:d7:9d:7b:8a:29:21:6b:
aa:e2:aa:f0:92:5b:90:1e:13:a6:7f:13:34:53:00:
bf:ed:e2:3b:b2:09:fb:ce:ef:35:81:2b:08:2a:d2:
a8:f1:1d:2b:07:d9:dc:20:c0:3e:4e:fc:e0:e4:97:
88:ef:31:0f:93:0e:cc:60:84:5d:6d:9b:60:1a:5c:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F1:E5:74:77:DC:38:0C:90:59:17:05:50:70:EC:8F:4B:CF:09:F5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/gvHldHfcOAyQWRcFUHDsj0vPCfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.134.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:4c:d2:05:a5:4e:94:16:b9:9e:f8:8e:f6:fc:7c:e2:ad:73:
fb:5f:9f:c3:68:c2:6f:48:b9:37:dc:6a:40:d5:5e:80:ce:da:
eb:a8:0a:0e:63:68:65:10:92:c0:19:58:f3:cf:df:5f:ea:3c:
dc:df:d1:dd:d8:74:91:69:84:33:81:85:c7:14:de:88:c4:2b:
cc:22:20:2d:1d:cf:43:fc:d5:e9:a3:a6:93:a1:ed:48:8b:ca:
73:86:3d:f7:c5:c8:30:43:bc:e0:ca:50:e1:e0:ed:35:15:66:
09:aa:10:83:54:48:e4:79:4c:9b:aa:41:78:09:ae:68:0e:35:
6d:d7:60:67:88:9f:a6:4d:1a:3d:49:76:36:64:96:32:db:49:
6f:18:1d:c8:41:df:c3:61:3c:b6:c7:d7:85:d1:2f:fb:c0:16:
8a:af:5f:d4:25:8f:26:23:74:2f:41:0e:bd:fa:33:bd:0d:20:
20:21:dc:11:0f:b2:42:42:98:a2:eb:97:5c:47:6e:24:b7:b6:
d6:50:b0:b5:f2:b3:01:71:d3:46:97:a3:6c:39:61:52:00:39:
c7:57:9b:1d:f1:b6:09:2e:13:e8:31:06:99:d7:41:ac:f3:0f:
2c:64:b0:63:f9:ab:4a:05:1f:f4:c1:9a:ab:40:e3:0a:69:b1:
8b:c3:ee:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:50:11 2025 by rpki-client