Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x2deg16eijj0UB3h0pplnEF9jgk.roa
File: x2deg16eijj0UB3h0pplnEF9jgk.roa (raw, json)
Hash identifier: YUoFA3o6GfB8aCO+ii4WUaW70v+JZOc6GXIufPBpIuQ=
Subject key identifier: C7:67:5E:83:5E:9E:8A:38:F4:50:1D:E1:D2:9A:65:9C:41:7D:8E:09
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01910E03F1733386EC35763C12FF60DB6884
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x2deg16eijj0UB3h0pplnEF9jgk.roa
Signing time: Thu 01 Aug 2024 12:57:05 +0000
ROA not before: Thu 01 Aug 2024 12:57:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14445
IP address blocks: 82.152.140.0/24 maxlen: 24
185.49.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:03:f1:73:33:86:ec:35:76:3c:12:ff:60:db:68:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 1 12:57:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7675e835e9e8a38f4501de1d29a659c417d8e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:02:26:91:d9:cc:84:1b:d4:27:9a:ec:3e:
7e:1a:f7:fe:c8:13:b5:b0:68:62:da:18:36:04:4f:
42:9a:89:d8:d0:19:39:6a:99:ae:37:3d:e7:30:e3:
fa:cf:17:d5:12:55:ed:47:30:18:7d:dd:d8:9f:0e:
4e:cb:05:74:4e:d4:2d:98:77:49:3d:94:0f:09:14:
4e:65:cf:c7:fc:bf:11:4a:5e:7c:e5:3d:67:98:e1:
56:e5:f6:69:9d:f1:b5:10:58:6e:60:1f:e7:97:0d:
2f:a3:0b:70:ad:16:41:3c:c9:ce:f4:cc:99:00:97:
f3:50:e1:42:d2:cb:03:51:8b:4a:1b:45:4c:f7:96:
94:f9:62:34:80:99:33:dc:a8:d0:77:f7:e7:7f:4f:
5c:af:08:1b:32:4f:da:b3:cc:12:f2:ca:a7:eb:cc:
97:cd:7a:bc:ba:dd:a7:9f:dc:f6:18:37:2d:fc:fe:
b6:88:35:6f:cb:8a:ab:75:8d:f5:95:df:df:31:10:
8b:f8:5a:26:4c:5a:cf:5f:78:b7:20:75:d2:c7:1d:
54:b3:79:3c:a7:64:46:98:59:41:27:d9:8c:0d:65:
2d:94:0e:9f:f6:d4:e8:b1:2f:97:4c:5b:92:6a:b0:
ad:ab:06:4a:7b:fa:23:85:ba:c5:0e:fb:79:b6:c5:
78:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:67:5E:83:5E:9E:8A:38:F4:50:1D:E1:D2:9A:65:9C:41:7D:8E:09
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x2deg16eijj0UB3h0pplnEF9jgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.140.0/24
185.49.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:17:52:c4:4d:b4:62:04:c3:3a:31:44:d4:46:eb:9e:0b:d3:
da:fa:0d:70:f8:bc:e3:34:cd:ca:23:53:f6:2e:df:b2:21:9a:
f5:4a:91:b0:6d:62:b9:ec:e1:2f:33:59:b5:6b:60:8f:a5:6c:
0e:48:b7:56:fa:a2:0e:ac:c8:3c:6b:09:7f:f7:d7:20:3d:6c:
50:d2:62:44:3b:49:8b:ae:1c:5b:fb:51:8a:c3:4f:35:75:90:
f2:cd:e7:73:56:42:e8:dd:00:a3:43:58:37:e6:19:5e:92:12:
d0:66:44:39:c3:12:a4:66:38:d3:5a:88:0b:0d:e4:a7:b1:71:
b9:f8:6c:33:a4:76:0e:e6:23:0f:39:8b:88:81:84:b3:68:18:
1d:2c:4f:7c:36:8f:5b:ec:ce:72:b1:16:39:81:74:5f:b4:80:
ee:d6:c9:50:57:87:1c:ca:bd:97:0a:f8:e1:ce:e8:eb:16:74:
cd:c7:b2:92:04:bc:55:c1:92:4e:b6:8a:c8:fd:2c:9d:f3:0d:
e3:82:09:db:1d:d1:f5:0d:64:47:d4:fd:1a:c5:de:b6:bc:cd:
c5:ee:0b:99:e4:34:8f:68:39:4a:32:66:cd:68:97:5d:9c:c6:
d8:6c:63:f1:60:69:9a:71:22:8f:9a:ab:55:fd:3f:59:4d:e2:
4e:2f:f5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:56:13 2024 by rpki-client on console-ams.rpki-client.org