Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kxEVJHwuRJGxuEgahAt7PLbmC-M.roa
File: kxEVJHwuRJGxuEgahAt7PLbmC-M.roa (raw, json)
Hash identifier: ZxR00T0pEKppNya8QzNUm70bfTZ0Nh/+PW8mFhrmYe8=
Subject key identifier: 93:11:15:24:7C:2E:44:91:B1:B8:48:1A:84:0B:7B:3C:B6:E6:0B:E3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01900811AF38724630808E27A43572D6BCD4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kxEVJHwuRJGxuEgahAt7PLbmC-M.roa
Signing time: Tue 11 Jun 2024 16:11:34 +0000
ROA not before: Tue 11 Jun 2024 16:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216023
IP address blocks: 82.153.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:08:11:af:38:72:46:30:80:8e:27:a4:35:72:d6:bc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 11 16:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=931115247c2e4491b1b8481a840b7b3cb6e60be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:82:e6:f0:af:3d:d7:73:39:7c:f0:ea:5f:
3a:b0:b7:e1:31:9a:2b:bb:7d:e8:2b:d2:23:f5:01:
b5:06:86:78:c6:9a:7f:25:95:29:7f:52:55:fa:c3:
ac:d7:94:65:44:45:29:a3:5f:15:49:54:43:85:cf:
af:72:87:02:d8:89:5b:d6:80:50:a3:a4:ae:28:76:
1b:76:5a:41:78:d5:55:d2:b3:64:93:45:ce:e6:b2:
99:8d:22:ec:d8:db:49:8b:3a:e1:a9:71:b0:df:98:
fa:8b:bc:32:b8:85:e5:8c:7c:fd:63:93:79:ea:b3:
59:48:a1:ea:73:80:1d:a0:9a:a8:2d:58:25:92:05:
21:ae:07:a2:d9:d4:f9:9d:9b:91:40:a0:e0:a3:ab:
87:0b:ff:99:df:58:64:c2:c4:6c:c6:e8:81:db:d2:
72:1b:de:65:e4:dc:85:30:9e:47:4d:67:70:b0:96:
67:0b:73:5d:fb:ea:ce:a6:36:78:3c:33:b9:9e:bf:
31:85:d1:6a:70:51:a4:fd:3e:94:fc:f6:1f:69:d5:
5d:77:fb:2b:42:90:77:2c:ab:24:cf:e6:3d:2f:4a:
42:f1:7c:0c:30:f1:35:0f:cc:d1:22:f2:31:da:0b:
5f:b3:f2:75:33:90:92:3c:cc:27:dd:7e:39:e4:74:
f2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:11:15:24:7C:2E:44:91:B1:B8:48:1A:84:0B:7B:3C:B6:E6:0B:E3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kxEVJHwuRJGxuEgahAt7PLbmC-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.202.0/24
Signature Algorithm: sha256WithRSAEncryption
37:74:a2:bd:e5:0a:9c:50:4e:9f:d6:f8:a4:d6:dc:fa:03:4d:
c4:21:aa:e5:59:65:8b:be:c9:28:38:f9:12:a9:79:2a:a5:46:
35:9d:ce:d4:e9:c4:35:94:6a:6d:93:ca:5c:30:28:3c:a4:00:
2a:e9:d7:df:6b:b7:72:21:0f:f9:93:a7:74:f4:46:ac:9c:ca:
28:de:f5:2b:8e:cb:92:06:28:5c:75:81:5b:79:b4:c1:05:fb:
4f:0f:e2:30:da:6c:66:1e:59:10:21:13:35:ea:04:70:e3:ed:
2b:a4:c9:58:1f:6b:09:30:16:76:24:ba:e7:2a:47:b9:fb:8f:
fd:a7:36:e7:94:58:df:87:d5:b3:7f:48:58:0b:92:94:05:f0:
da:19:bf:0f:03:c2:05:1e:ca:ed:fa:e4:7e:e6:4d:1f:a4:a7:
af:55:84:21:cd:92:c6:2f:d4:29:26:b7:ca:5d:d5:56:99:af:
29:e6:e1:ee:de:64:8a:11:c3:9d:b1:ea:a9:f4:3c:5c:02:47:
44:4f:9d:0a:71:c8:19:36:f3:0f:ca:fc:89:31:07:bc:de:e6:
56:32:0c:58:b9:31:1d:b2:b5:f8:b2:42:7f:b6:5f:e2:f7:7d:
fa:90:68:dd:e4:cb:2c:b4:2b:b7:58:be:02:3a:00:26:17:66:
43:a0:3f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 01:11:45 2024 by rpki-client on console-ams.rpki-client.org