Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vzO_uCxMt3BFLnvwaL75tMi2UoI.roa
File: vzO_uCxMt3BFLnvwaL75tMi2UoI.roa (raw, json)
Hash identifier: wQI9lTcOAAetWA7nzXVGJeA1atCrWg2e7jDM03oStvw=
Subject key identifier: BF:33:BF:B8:2C:4C:B7:70:45:2E:7B:F0:68:BE:F9:B4:C8:B6:52:82
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194214411F47A98671B50D75072E8732374
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vzO_uCxMt3BFLnvwaL75tMi2UoI.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211167
IP address blocks: 82.153.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:11:f4:7a:98:67:1b:50:d7:50:72:e8:73:23:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf33bfb82c4cb770452e7bf068bef9b4c8b65282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:29:cf:18:ad:33:02:8f:73:8c:16:a1:3e:
e4:2b:17:4e:7f:73:b9:b9:63:94:29:53:7c:a0:c4:
0b:f8:8c:bf:77:c5:ff:b6:de:95:bc:6f:af:b0:12:
9c:6c:65:64:71:7c:08:bd:0f:0f:08:af:60:b3:c3:
a0:3c:62:94:ee:c6:44:6f:f6:5d:cf:40:0f:68:08:
67:a3:c2:35:48:13:36:db:62:f7:e2:16:9d:1f:b4:
95:b1:f3:e2:44:64:ef:37:aa:48:99:7b:b7:e8:ac:
58:65:7f:ca:4a:f8:cc:40:87:e4:ac:dd:bd:88:b0:
a9:50:a7:b5:80:ef:4e:4c:36:22:17:b4:2b:ba:9e:
39:d8:72:00:13:d6:6e:1b:83:0a:f5:9d:65:6e:78:
79:24:4c:38:94:d8:89:12:cb:27:a7:99:4e:a5:22:
e1:b3:6a:5b:42:f7:b8:e0:c2:c8:29:0d:28:8c:5f:
67:4d:b4:f2:46:2c:73:55:c2:2c:73:b4:08:eb:6f:
f3:1c:10:a2:78:fc:4d:d3:e7:28:07:bc:82:32:b9:
c1:43:58:34:2a:e3:9b:79:8a:0f:a3:59:54:40:d1:
5d:13:12:e6:72:d6:8d:ae:3d:aa:94:32:61:2e:1e:
3f:c9:c5:ac:a2:fc:d1:bd:21:80:a6:ce:fe:de:54:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:33:BF:B8:2C:4C:B7:70:45:2E:7B:F0:68:BE:F9:B4:C8:B6:52:82
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vzO_uCxMt3BFLnvwaL75tMi2UoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.247.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6e:ac:5a:4c:29:d0:22:46:5b:ad:06:c8:94:1e:04:56:39:
61:f6:cb:7f:e2:b9:5f:c6:25:05:a6:69:1b:2b:f5:76:c2:1b:
f6:18:79:ef:0b:59:b0:7a:50:9e:5e:7a:88:3e:32:4f:0e:5e:
71:26:52:b5:1c:cc:f5:1d:b2:f5:62:a4:1d:d8:fe:f9:9e:cd:
e9:2b:fc:d2:6c:02:de:03:03:5a:24:e3:82:6e:73:7e:b9:ea:
72:61:fa:b0:0c:f2:4e:40:20:88:82:22:ce:6a:c3:e4:e7:2f:
65:bd:26:06:a0:22:dc:65:11:c6:9b:3e:06:34:b4:51:02:a1:
bb:39:a6:d9:f0:cd:dd:7b:26:2f:17:56:dd:5c:92:1b:95:1f:
23:0a:81:fa:25:b9:31:40:fb:52:bb:d7:30:27:35:6f:2d:9f:
9b:11:02:34:1e:21:ba:d4:56:63:7f:b2:13:df:45:9d:80:05:
7f:f4:6c:14:07:d9:98:52:c6:0c:b6:7a:a2:c2:eb:83:19:5d:
fe:0a:e5:f3:08:2c:21:0c:77:43:8d:70:c9:b0:f5:46:f6:cc:
f0:ba:16:03:4e:9b:a6:29:9e:f1:b2:a4:c0:dd:a8:00:f7:e6:
92:5a:da:59:83:04:40:75:37:62:98:db:a9:b8:b0:dd:4a:c2:
9d:e4:db:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:48:12 2025 by rpki-client