Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/drW8f270OQ7Zuv8cl2-L-xlySEs.roa
File: drW8f270OQ7Zuv8cl2-L-xlySEs.roa (raw, json)
Hash identifier: GrGtezSBiX1CsljCEonvgjTZtt9LlMhF8aaCTgeLxU0=
Subject key identifier: 76:B5:BC:7F:6E:F4:39:0E:D9:BA:FF:1C:97:6F:8B:FB:19:72:48:4B
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 018CC56E8D34972157EE84DB033A3ABC4546
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/drW8f270OQ7Zuv8cl2-L-xlySEs.roa
Signing time: Mon 01 Jan 2024 14:30:05 +0000
ROA not before: Mon 01 Jan 2024 14:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51906
IP address blocks: 82.197.132.0/23 maxlen: 23
2001:7f0:101::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:8d:34:97:21:57:ee:84:db:03:3a:3a:bc:45:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 14:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76b5bc7f6ef4390ed9baff1c976f8bfb1972484b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9d:f7:30:04:79:ec:54:05:67:2a:a1:a8:1b:
cc:7a:0c:b2:82:54:19:c7:60:d1:e0:5b:35:cb:a9:
a1:6a:cd:3b:80:65:19:72:ed:43:b3:57:cc:dd:65:
b9:f8:c2:64:3b:17:2f:45:6a:80:76:b5:85:ba:29:
aa:01:e3:f9:9e:f3:f0:6c:6a:87:b5:3a:6d:92:14:
8f:5c:6e:96:64:da:73:85:40:51:8e:60:83:81:64:
ca:7e:4a:67:ad:55:f4:33:8a:8b:21:aa:e9:93:43:
7c:cf:ad:09:4e:d1:ce:52:b0:f5:2b:25:3e:33:f3:
6a:20:a2:1d:23:53:f6:38:41:ad:b1:e1:cb:5c:92:
b2:1c:c7:05:06:a2:04:05:29:4b:cf:5f:76:12:98:
99:58:a1:34:5f:2a:22:1d:55:fd:74:6a:db:a0:36:
13:27:bd:0d:4f:5e:c0:80:71:13:28:4d:33:2d:18:
5b:23:84:49:57:5a:60:b8:39:60:87:2f:73:73:8f:
09:c1:6c:94:c5:4f:94:11:18:eb:fb:07:e4:5b:19:
6a:52:33:5d:b3:91:86:97:7f:5e:8c:27:2c:3d:b6:
ce:d5:2d:85:42:0a:2c:e8:21:03:dd:4d:01:8c:c5:
40:f7:5e:fa:f5:b1:ed:2d:53:3d:ff:86:ed:2c:70:
14:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B5:BC:7F:6E:F4:39:0E:D9:BA:FF:1C:97:6F:8B:FB:19:72:48:4B
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/drW8f270OQ7Zuv8cl2-L-xlySEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.132.0/23
IPv6:
2001:7f0:101::/48
Signature Algorithm: sha256WithRSAEncryption
6b:ea:34:d4:1c:93:de:66:41:6b:33:79:79:af:af:1c:15:cb:
d3:29:e7:d9:b4:2a:bd:16:5e:94:53:41:fc:af:09:e8:fc:e5:
3f:b2:49:11:f7:49:4e:95:1e:af:34:35:d0:e3:18:66:5d:ed:
e3:ba:ae:64:9a:8f:d2:77:d8:36:41:af:82:f1:d5:c3:10:b1:
04:f9:4c:28:92:26:4f:c5:7f:90:0b:ae:35:20:71:a0:3c:13:
34:45:7f:26:8a:b6:ec:61:57:b3:72:1f:28:54:22:84:7c:fe:
25:d7:47:35:00:51:4d:82:0b:a9:f7:22:a8:b2:28:62:98:cb:
ea:36:c7:d6:ee:13:bf:2e:18:61:3b:47:5d:40:bf:7c:11:f2:
9d:26:41:10:26:ef:b9:32:4c:28:4f:6e:52:8e:11:bc:e8:d3:
86:41:1d:7f:1d:44:af:49:88:02:ac:fb:75:0b:f1:3b:6c:c4:
fc:66:16:f0:f3:21:17:8d:ef:5e:b8:a2:d6:c7:a0:e7:e3:75:
32:30:44:28:c9:d6:63:db:1b:0d:2c:67:0a:6f:85:35:9b:91:
8e:98:3e:c2:2f:2b:0c:e4:e0:d1:4d:19:13:18:67:07:1f:26:
4f:61:b9:b0:fa:bf:43:8d:6b:5f:ef:9f:df:a1:27:63:83:7d:
e4:7a:9c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:27:18 2024 by rpki-client on console-ams.rpki-client.org