Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/82Fn2JZNV-xXZd5fWsjXKsAcB6I.roa
File: 82Fn2JZNV-xXZd5fWsjXKsAcB6I.roa (raw, json)
Hash identifier: EZYNoVBuDuwJF48L9SYfVVuYez340Cb//zmx/2l0VDI=
Subject key identifier: F3:61:67:D8:96:4D:57:EC:57:65:DE:5F:5A:C8:D7:2A:C0:1C:07:A2
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0190A687C736394BBF7C53E4756E1484E66B
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/82Fn2JZNV-xXZd5fWsjXKsAcB6I.roa
Signing time: Fri 12 Jul 2024 10:40:34 +0000
ROA not before: Fri 12 Jul 2024 10:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 194.79.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a6:87:c7:36:39:4b:bf:7c:53:e4:75:6e:14:84:e6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jul 12 10:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f36167d8964d57ec5765de5f5ac8d72ac01c07a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:a1:f9:8b:13:13:ed:ea:7d:5f:ce:a9:b7:
6b:08:16:bd:54:1d:e6:a8:75:d8:24:49:c6:0f:0b:
96:b3:7d:f5:7f:c8:86:3c:9a:0c:18:ec:d8:d0:60:
f7:c8:80:16:80:4e:f6:0d:8d:90:5c:e9:b7:7a:c3:
af:a1:c9:ee:08:1e:32:15:9d:d4:8c:84:27:6f:c4:
14:90:07:1e:70:f3:88:c5:43:4f:0a:b4:81:66:b3:
e0:2a:ff:fb:58:1f:05:aa:e2:f8:18:1c:55:5e:e9:
50:19:37:0d:9e:7c:ca:58:88:12:e1:cb:63:9b:48:
f3:f6:89:70:8a:2f:9d:e7:c9:24:07:bd:21:f4:31:
ec:61:56:18:77:a9:3a:df:97:67:2a:96:bd:0c:93:
59:6f:70:c8:03:ff:00:62:38:d0:6f:c7:78:d8:01:
85:2b:45:66:10:6e:34:b8:ca:8a:1f:ab:9f:17:a7:
4e:6e:c4:25:cf:60:e9:9b:aa:70:2e:8c:76:3a:aa:
f3:9f:e4:1e:d1:0c:db:a9:7b:ee:41:00:4d:1c:97:
b6:a0:52:66:f6:c4:e1:5e:2d:a2:86:5e:25:a7:1b:
03:d9:9c:d4:86:fb:21:73:8f:92:60:d3:f2:e7:96:
c9:60:96:42:5e:e3:3e:c6:43:f9:3a:d5:6a:ef:d7:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:61:67:D8:96:4D:57:EC:57:65:DE:5F:5A:C8:D7:2A:C0:1C:07:A2
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/82Fn2JZNV-xXZd5fWsjXKsAcB6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.15.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f1:b9:c4:a7:66:0e:dd:23:80:0e:a7:15:1e:41:4d:75:d2:
7d:f9:94:b8:4a:87:73:04:9f:74:43:b2:91:62:74:96:e1:8d:
d5:44:18:8d:e2:56:84:ac:15:2f:4a:c3:c8:f6:34:a7:dd:3c:
92:1d:47:ea:05:f0:ff:0c:a8:2f:2c:32:b8:d5:ed:6d:b7:c1:
57:d1:40:4a:ca:c8:63:7b:cd:28:4c:67:bb:e2:53:13:71:16:
e7:21:ed:89:7f:65:bb:de:cc:8a:7b:83:da:a7:f5:44:dd:1e:
7a:a0:2e:3d:f5:cf:bf:a4:30:20:02:d0:67:93:75:87:a0:8a:
b8:59:a9:d4:5c:0c:6c:13:d5:70:56:f4:d8:8f:6b:f3:0f:57:
03:e3:0b:61:16:64:2f:8f:11:e4:a9:1e:9f:93:d5:28:04:7e:
92:c9:c4:c0:31:e0:4c:66:9c:4f:33:ca:4b:ee:41:a0:60:33:
6a:94:fb:27:79:6f:b0:d8:c4:5b:7c:3d:1b:12:a4:60:a9:c7:
2b:3e:d3:97:1b:72:68:59:29:e7:63:d6:dd:60:35:45:98:32:
2e:3d:b4:e5:da:4c:56:81:a3:cd:34:26:27:f0:6c:52:5f:0d:
6d:93:4e:c0:0d:78:2a:24:b6:45:df:d3:cb:03:9b:52:39:af:
0b:ab:ef:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:03:26 2024 by rpki-client on console-ams.rpki-client.org