Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/keCzkALXTeitqLvaMkSJG7uBXjQ.roa
File: keCzkALXTeitqLvaMkSJG7uBXjQ.roa (raw, json)
Hash identifier: ov8VvlgeWYtHXrC4sBGWQ+Yp7FBIQ6tGudgrawk3uDo=
Subject key identifier: 91:E0:B3:90:02:D7:4D:E8:AD:A8:BB:DA:32:44:89:1B:BB:81:5E:34
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421441596BFEE1623FC9CF2A191CA8131
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/keCzkALXTeitqLvaMkSJG7uBXjQ.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211936
IP address blocks: 82.153.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:15:96:bf:ee:16:23:fc:9c:f2:a1:91:ca:81:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91e0b39002d74de8ada8bbda3244891bbb815e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8e:28:81:2b:a8:1c:89:37:ab:41:8d:e5:41:
0b:66:08:89:04:de:a7:78:97:5d:ac:c0:e8:9a:b3:
c1:72:07:9a:f0:4f:96:58:52:9a:38:e9:14:06:36:
72:22:21:2b:e5:1c:3f:f7:73:72:3e:fa:1d:46:97:
a4:36:63:7e:f5:8a:44:d1:4d:87:3b:16:16:5a:54:
e7:c3:d8:fe:3c:a5:65:90:be:c3:5a:5f:6f:8c:84:
17:19:bd:02:c2:7f:5b:44:50:15:0f:29:62:6a:5f:
83:73:4b:b6:9e:f3:bf:e7:7d:5d:df:95:bf:04:9d:
cd:9f:b4:bd:c2:b6:73:b5:04:60:f1:ad:36:95:e8:
1b:3e:5f:92:28:56:6a:70:44:11:00:a9:29:6a:07:
8d:11:4e:4e:4b:6f:16:35:72:57:92:a0:a0:d9:4e:
fc:ca:6a:62:f9:90:6f:64:7e:d9:af:9e:bc:fe:0a:
d7:f5:36:e7:cc:ad:6e:1e:c6:1d:de:be:fc:2a:89:
8f:60:12:85:aa:ce:d7:8c:d0:71:b2:57:06:39:75:
8a:3e:e1:80:49:30:c5:17:57:34:67:07:b3:36:d4:
80:83:07:74:c2:ca:00:ab:9f:07:aa:4b:b6:e2:2a:
1d:68:69:16:a7:9c:76:40:f7:6e:9c:93:27:aa:12:
9f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E0:B3:90:02:D7:4D:E8:AD:A8:BB:DA:32:44:89:1B:BB:81:5E:34
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/keCzkALXTeitqLvaMkSJG7uBXjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.32.0/24
Signature Algorithm: sha256WithRSAEncryption
84:03:0e:76:38:ae:2e:c3:c1:bc:f0:5e:aa:6d:11:38:dc:bb:
d5:aa:a5:91:81:eb:b3:bf:7e:7b:10:eb:38:cd:e7:a1:60:6b:
81:81:79:23:5a:e6:44:80:5c:44:9a:0e:e1:4e:e6:dc:5e:1b:
e0:5a:b3:d2:64:e8:41:91:cd:4a:c1:0b:f9:9c:11:35:54:3b:
5f:c3:72:ec:bb:23:0e:33:ab:19:93:c3:50:5f:62:4e:aa:ef:
80:34:bf:d8:66:a1:28:89:2a:65:ff:26:c1:2c:a4:57:38:aa:
89:6e:c6:5a:4e:32:d9:10:c7:e5:fd:bf:9b:b8:52:1b:fb:ac:
a6:c7:a3:01:cf:2b:45:c9:c4:c9:46:65:8e:32:8e:72:fb:29:
9e:2d:7d:60:d4:06:7b:1d:4c:49:7e:8a:ac:8c:13:66:67:8c:
3e:d6:fb:e1:9b:c7:89:b9:21:fb:2b:59:02:1a:4a:0f:71:41:
84:06:b7:0c:8a:ca:90:6d:ac:a8:af:0a:cc:9d:c1:81:1a:43:
0f:13:78:a4:e8:e2:b7:d2:17:70:86:45:64:3a:16:59:d8:04:
b3:05:4f:70:6f:3f:f6:c0:38:02:9a:93:e3:d2:78:f4:b2:96:
f4:ef:68:f0:7c:06:2c:c5:5a:e1:d9:3b:a5:13:e6:43:8a:a7:
d7:6c:d9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:49:56 2025 by rpki-client