Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oozHvWecNmS6QE9KYqCokS2zOvU.roa
File: oozHvWecNmS6QE9KYqCokS2zOvU.roa (raw, json)
Hash identifier: E1d/7n5g1iqwxNoPciSAGI/AxWvjzamTczEP7F9ZCQ8=
Subject key identifier: A2:8C:C7:BD:67:9C:36:64:BA:40:4F:4A:62:A0:A8:91:2D:B3:3A:F5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0192331F67A2604A00241E1030BF9E753F0A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oozHvWecNmS6QE9KYqCokS2zOvU.roa
Signing time: Fri 27 Sep 2024 10:55:49 +0000
ROA not before: Fri 27 Sep 2024 10:55:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214271
IP address blocks: 82.152.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:33:1f:67:a2:60:4a:00:24:1e:10:30:bf:9e:75:3f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 27 10:55:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a28cc7bd679c3664ba404f4a62a0a8912db33af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:67:bf:68:cd:7d:14:47:2e:8e:c9:af:3b:
13:c6:8a:05:42:33:f0:b8:40:57:4f:58:6a:e8:96:
5b:69:5a:18:64:d2:33:20:2f:aa:c0:69:5d:e4:26:
e0:d0:82:2f:66:20:1a:76:86:18:ab:e6:82:f8:66:
23:c5:bc:9d:47:6c:b2:81:bd:13:e2:2e:a2:5a:e1:
ab:aa:ed:63:f3:0b:19:53:3c:40:b0:c3:0d:39:c2:
87:aa:b1:fd:e3:5d:11:14:c2:70:cb:16:db:6c:54:
53:11:ac:29:04:86:8a:47:47:dd:a4:24:95:62:89:
bc:72:38:fa:59:fb:6a:55:fc:79:48:53:53:de:f6:
eb:2a:15:15:20:7f:f0:a6:91:20:25:47:ba:97:db:
4b:07:03:8a:25:01:11:10:bf:e6:03:49:84:a5:4d:
34:ee:b4:67:00:c6:53:a3:56:71:80:67:af:ac:44:
16:2b:41:bf:bb:87:61:70:3c:3a:91:39:43:be:10:
ea:70:63:b8:94:39:1e:d8:a8:b1:9d:32:47:a4:81:
82:77:a4:e9:45:69:88:b7:ab:c8:35:d9:96:bb:90:
2a:74:e4:fd:fc:6e:4e:7c:49:96:c8:99:05:f2:5e:
d2:80:19:31:8b:be:78:98:bf:1c:10:cc:f1:e3:73:
f4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8C:C7:BD:67:9C:36:64:BA:40:4F:4A:62:A0:A8:91:2D:B3:3A:F5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oozHvWecNmS6QE9KYqCokS2zOvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.178.0/24
Signature Algorithm: sha256WithRSAEncryption
45:4b:94:85:c7:38:b9:b9:b4:3a:da:d2:cc:f0:fb:b7:29:12:
a8:4d:48:02:87:4c:8c:09:4e:c8:3f:b4:97:39:bd:5f:7a:82:
ff:7f:fb:51:b7:9b:f2:5e:33:81:b2:7a:c7:38:ac:f9:61:6b:
c7:f5:dc:5b:0e:92:4e:17:e0:62:4c:77:25:99:c2:12:93:ca:
f7:9a:30:3a:2e:f3:30:ed:66:da:4b:19:5c:c0:de:87:71:29:
c0:dd:fb:73:2b:1d:2e:2c:2c:09:10:f3:07:69:fb:0e:72:19:
cf:b5:91:0e:06:de:29:75:f4:53:4d:0c:f5:07:5a:b2:13:63:
fb:22:1d:5c:2b:ce:4d:9e:95:a7:0a:6d:58:b4:2b:3c:f4:0a:
ee:6e:b5:d9:02:21:f5:2f:8e:0b:80:20:37:b6:e5:9f:29:a9:
44:c7:1f:de:85:ff:c1:87:32:75:77:a7:98:5a:76:49:12:25:
09:1f:56:45:d1:00:f7:06:33:e0:01:80:c5:56:0a:e2:61:69:
b3:bd:4a:2f:67:f2:82:f8:84:32:a2:b8:d4:18:1b:41:a2:d9:
52:a6:d4:c9:8d:e3:f5:d7:38:fc:33:12:6d:1d:80:5e:eb:4b:
bd:16:d1:67:dc:c4:f5:c3:03:3d:08:03:01:31:8d:99:9a:08:
f3:47:3b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:16 2024 by rpki-client on console-fra.rpki-client.org