Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oU1lG1JeaB3-EGJzA4ajJQqcDvI.roa
File: oU1lG1JeaB3-EGJzA4ajJQqcDvI.roa (raw, json)
Hash identifier: D5NBLpBRqowLtzsOzyzGeBTuK6MCWZFVNw77J/Rt7jQ=
Subject key identifier: A1:4D:65:1B:52:5E:68:1D:FE:10:62:73:03:86:A3:25:0A:9C:0E:F2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019349C24BF0A1DB9D5C8E17E148BAE98AB5
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oU1lG1JeaB3-EGJzA4ajJQqcDvI.roa
Signing time: Wed 20 Nov 2024 13:28:10 +0000
ROA not before: Wed 20 Nov 2024 13:28:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47263
IP address blocks: 82.153.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:49:c2:4b:f0:a1:db:9d:5c:8e:17:e1:48:ba:e9:8a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 20 13:28:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a14d651b525e681dfe1062730386a3250a9c0ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:40:4c:c4:bc:c9:26:20:fd:0b:d3:f1:48:
9d:23:01:d5:ab:70:85:c3:2f:89:82:65:ef:a2:ee:
3c:30:69:00:c4:bf:35:8e:6e:12:bf:74:f9:05:b3:
39:d2:05:d9:1a:b6:c5:35:f3:80:98:66:1b:f4:98:
11:d9:c0:52:eb:ca:8a:90:32:f3:84:dc:85:15:83:
49:ec:77:8b:be:dc:aa:8b:45:2a:8b:5b:37:1e:d5:
4a:16:ad:d6:e4:92:e1:5c:0b:ab:8c:1b:19:ea:65:
bf:2e:ed:7f:b4:ca:5b:49:69:50:f8:a9:be:b7:e9:
70:05:77:58:ff:e4:32:59:c1:ea:03:2e:b2:3e:bb:
2d:80:eb:37:0c:bc:8d:3a:9a:61:33:21:70:19:08:
74:05:be:40:81:8d:09:2e:28:b7:f1:2b:36:85:68:
26:e5:6a:33:03:81:64:6a:99:97:57:a2:40:7a:d6:
89:69:e5:9a:8b:fb:a3:09:7d:37:8e:a5:65:33:d5:
47:28:3f:51:09:08:eb:56:c4:16:a2:96:7c:1a:a0:
cc:e0:db:48:99:71:7e:d1:d1:25:10:54:7e:49:20:
79:bf:0b:b0:16:f0:89:75:53:4e:af:f8:c3:8f:36:
78:55:df:4e:cc:6d:05:b1:f9:79:2e:f3:cb:59:44:
f4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4D:65:1B:52:5E:68:1D:FE:10:62:73:03:86:A3:25:0A:9C:0E:F2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oU1lG1JeaB3-EGJzA4ajJQqcDvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.225.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f8:8b:6d:33:28:f1:8c:d3:64:19:69:e7:c2:b5:fe:f2:39:
a0:44:a3:a8:ff:3f:16:75:c2:25:fc:2b:0c:f4:e0:e3:43:c8:
27:98:22:95:63:fb:c0:26:7d:f2:38:a0:d3:a7:25:27:34:a8:
b3:09:4d:0b:21:53:19:1b:88:bc:24:74:94:ce:7e:23:2e:c0:
07:73:e0:96:5a:30:00:a3:e9:8d:13:41:d7:bd:33:cc:08:2f:
0e:97:14:02:53:5e:f2:70:f5:fe:c8:19:cf:80:d2:54:cb:c9:
b1:e8:f8:6a:4f:d6:58:d2:0f:40:76:a6:5a:24:4d:93:40:98:
95:aa:81:85:c2:30:79:0c:65:69:dd:61:09:0a:7b:39:20:b9:
3d:5f:9d:09:0b:fc:9e:b8:19:b7:25:a9:58:ea:3e:50:ec:ab:
87:5f:87:51:ce:49:93:3c:da:be:5f:49:ad:b6:54:cf:e2:55:
cf:de:dc:9f:80:13:31:55:ef:8f:87:ee:5d:a4:b4:78:8b:86:
6a:28:c9:6f:58:1b:75:ee:e2:e0:98:68:d0:3a:00:fc:25:51:
1c:8d:cc:5b:03:b5:84:b8:27:45:c1:bb:4b:2b:7b:26:11:67:
8c:b8:2b:86:cb:b9:0e:df:d3:40:0f:2d:09:0a:24:3f:ae:56:
e8:0f:b0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:21 2024 by rpki-client on console-ams.rpki-client.org