Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/3UGwBRl_XLeX8ImHBfloAp4c0iQ.roa
File: 3UGwBRl_XLeX8ImHBfloAp4c0iQ.roa (raw, json)
Hash identifier: 9nG9jriV04D0P6dgilO86iD9FrM5UGQdOjkfvdXg1O4=
Subject key identifier: DD:41:B0:05:19:7F:5C:B7:97:F0:89:87:05:F9:68:02:9E:1C:D2:24
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 018D81B2CE5AB8269945DECED4D25F63EEF4
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/3UGwBRl_XLeX8ImHBfloAp4c0iQ.roa
Signing time: Wed 07 Feb 2024 03:53:15 +0000
ROA not before: Wed 07 Feb 2024 03:53:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62200
IP address blocks: 82.202.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 18:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:b2:ce:5a:b8:26:99:45:de:ce:d4:d2:5f:63:ee:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Feb 7 03:53:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd41b005197f5cb797f0898705f968029e1cd224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:bd:9f:46:6e:81:2a:7b:99:4b:d6:54:e6:
43:a6:3a:d0:74:31:39:93:cc:72:55:57:ef:a8:01:
cc:28:fc:db:99:e3:6c:4d:63:8d:db:b8:64:12:84:
a2:93:fc:36:6a:7e:b5:06:e7:5c:09:40:18:bd:6b:
09:7a:6a:48:70:d3:85:a4:b1:3d:4d:e6:99:45:a9:
f2:f5:7d:e2:12:b3:de:c3:de:ff:86:70:19:01:9a:
f9:95:bb:27:1a:62:80:b2:ab:f6:82:e5:c7:92:45:
fd:94:d8:62:7e:3a:5c:ae:d0:af:4f:c5:ec:84:e7:
b6:df:38:05:56:e5:f5:4d:3d:d0:bc:61:36:b5:1d:
b6:8c:30:fb:77:81:07:0d:b0:cd:22:01:3d:e2:6e:
35:ea:03:94:d3:18:a0:35:6f:93:79:15:95:9f:b9:
7b:96:02:8b:58:75:8c:18:14:aa:fa:38:0c:1e:21:
90:d1:b9:48:74:f4:a5:74:78:1b:14:9e:5e:78:72:
ac:00:cd:9d:49:f7:e7:b3:7f:97:53:7f:f4:4e:be:
bd:01:bb:4e:10:16:b3:86:37:84:08:f2:5b:58:7e:
12:8e:28:b4:9c:88:5d:9a:14:53:b6:b4:e2:06:0a:
45:e1:51:4c:29:15:96:cd:4c:38:eb:b3:1a:cd:78:
2e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:41:B0:05:19:7F:5C:B7:97:F0:89:87:05:F9:68:02:9E:1C:D2:24
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/3UGwBRl_XLeX8ImHBfloAp4c0iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.202.164.0/24
Signature Algorithm: sha256WithRSAEncryption
63:17:42:b0:63:c7:45:3e:b4:eb:21:23:5a:22:23:6c:04:a3:
b5:2c:02:ce:97:dd:c0:4f:65:42:e8:a9:62:51:11:ee:09:8c:
45:d7:7a:39:b6:e4:7d:e2:04:c5:1d:b3:99:df:51:6c:fa:59:
7f:7d:66:eb:90:c7:93:28:6e:50:0c:96:cd:02:24:b2:6d:fe:
fc:90:4f:1e:c6:d3:b2:70:b6:60:e3:3b:52:9b:29:c9:3f:cd:
13:28:d9:ab:01:39:64:08:04:34:30:f2:66:36:df:3e:1b:3a:
7b:44:eb:fd:de:f5:52:23:81:5c:37:a5:17:82:38:b0:d7:1a:
1b:d2:13:1e:9f:4b:c3:46:56:dd:9a:f6:82:87:b9:f8:15:ba:
44:e2:a6:e3:f4:8f:4d:09:1f:6a:02:6c:aa:80:a5:87:a1:72:
85:89:f8:b6:c1:37:a5:c6:aa:95:eb:95:bd:ae:07:f7:a3:3d:
36:8a:16:5d:f8:18:d1:de:23:b7:5b:98:a4:62:61:7c:22:ca:
1d:b6:bc:be:1d:a7:60:60:84:8c:96:ef:12:5e:7b:ad:d0:06:
e4:88:9f:a2:c1:59:e1:b9:c7:98:fd:24:24:59:de:69:83:67:
03:55:9d:2f:1b:29:3a:40:01:55:0d:49:7e:a3:81:7f:87:91:
c2:1f:a8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 00:21:51 2024 by rpki-client on console-ams.rpki-client.org