Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tRoc1HbJRylkCT07HinsXUDc2jI.roa
File: tRoc1HbJRylkCT07HinsXUDc2jI.roa (raw, json)
Hash identifier: YH/hPspeIE1WGDqCVBQNfcPEDBZXMyPy1473xBwSBdc=
Subject key identifier: B5:1A:1C:D4:76:C9:47:29:64:09:3D:3B:1E:29:EC:5D:40:DC:DA:32
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019199C7064FCF456D08C38D5CE46105C6B8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tRoc1HbJRylkCT07HinsXUDc2jI.roa
Signing time: Wed 28 Aug 2024 16:17:22 +0000
ROA not before: Wed 28 Aug 2024 16:17:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 82.152.52.0/23 maxlen: 24
82.152.55.0/24 maxlen: 24
109.176.25.0/24 maxlen: 24
213.130.150.0/24 maxlen: 24
213.210.40.0/23 maxlen: 24
213.210.48.0/23 maxlen: 24
213.218.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:99:c7:06:4f:cf:45:6d:08:c3:8d:5c:e4:61:05:c6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 28 16:17:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b51a1cd476c9472964093d3b1e29ec5d40dcda32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:8c:b1:67:bf:65:39:65:e1:6b:ec:35:69:
53:01:63:8c:13:f2:22:22:84:29:22:4b:07:0d:48:
cf:f8:c3:cc:43:07:86:c9:82:53:d2:8a:29:ee:02:
a4:74:dc:65:cb:8a:92:c5:ca:6e:34:e7:65:22:fc:
21:b5:f1:f5:cb:db:72:f1:b6:49:9d:09:a4:73:c7:
8c:46:d1:fb:29:49:4a:bd:16:aa:06:23:72:1b:cd:
00:d8:6d:fb:4e:d2:42:28:d3:2e:93:9a:1c:60:09:
75:8d:b7:eb:fc:03:45:51:a3:20:4e:b4:b2:c2:50:
d0:0d:87:19:23:78:d4:95:77:f3:1a:48:cf:41:5f:
59:47:ee:7d:7a:75:ec:52:84:8f:17:24:38:d3:85:
f7:68:e6:3f:8f:88:73:68:45:89:a0:08:13:ea:6b:
e1:a2:69:08:04:5e:c5:d3:e7:5a:40:6d:94:e8:ee:
d2:86:21:2e:3e:19:6b:89:78:42:bb:34:71:e5:c1:
2b:10:4c:e5:cd:03:29:55:56:a0:8a:85:58:be:ad:
92:d9:ba:db:55:b5:5d:f3:9b:7a:fd:d7:cc:ba:cb:
fe:f6:4f:c7:bf:35:bf:af:79:5c:0f:c2:fe:b4:ce:
5d:b5:ba:81:86:46:7f:18:34:1f:12:2e:05:e0:0a:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1A:1C:D4:76:C9:47:29:64:09:3D:3B:1E:29:EC:5D:40:DC:DA:32
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tRoc1HbJRylkCT07HinsXUDc2jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.52.0/23
82.152.55.0/24
109.176.25.0/24
213.130.150.0/24
213.210.40.0/23
213.210.48.0/23
213.218.226.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c8:a3:c5:57:44:11:72:71:af:e1:ed:20:37:47:58:84:24:
d2:64:a1:18:3f:91:00:6b:ea:fd:eb:7d:a9:88:3d:2f:39:d2:
87:4d:ad:87:fc:85:d8:be:75:c0:e1:c6:86:5b:a4:6e:d1:8c:
a2:c5:ab:c6:e0:93:ec:88:ad:63:25:27:8d:5a:e5:07:4d:41:
e4:35:35:7f:79:7a:f4:f3:71:4e:6e:c9:04:0b:7a:94:b7:7d:
0b:70:8c:86:98:ac:6e:ba:45:a0:4a:97:d7:d4:5b:39:cb:6b:
8b:77:0c:17:5d:ef:b7:4a:33:5b:bc:e4:0d:90:5e:8c:74:8b:
eb:5e:ae:b4:a4:bf:00:4b:e3:59:e7:35:24:09:4b:8d:dd:d3:
77:1f:8d:b6:e5:2b:70:cf:e1:60:3c:3a:df:a9:f7:e3:01:b5:
ca:d9:ed:19:94:76:cd:65:ae:d5:e7:1d:7b:4d:cc:e7:dc:29:
d3:c8:ea:cb:87:de:ef:bd:4b:9b:66:e7:4c:6d:5c:a6:71:19:
c8:04:58:d7:86:01:56:b0:50:47:21:78:c0:61:10:88:d4:b4:
9e:3a:07:6d:08:5f:42:fb:d1:18:f5:b2:03:a1:5a:d1:c3:1e:
08:8f:97:ed:85:a2:bb:b0:8a:73:ec:06:e1:29:42:c3:aa:0d:
cf:8e:98:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:56:12 2024 by rpki-client on console-ams.rpki-client.org