Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/ApRdPtkDGF7knufILyJUTIUrLpc.roa
File: ApRdPtkDGF7knufILyJUTIUrLpc.roa (raw, json)
Hash identifier: RcjfRtkEMwlN9U9+uIh1CUcaJ4wUNeSxRrIh2H4U7rs=
Subject key identifier: 02:94:5D:3E:D9:03:18:5E:E4:9E:E7:C8:2F:22:54:4C:85:2B:2E:97
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 0191E33A85BA465182556C94A212C08EC8D5
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/ApRdPtkDGF7knufILyJUTIUrLpc.roa
Signing time: Wed 11 Sep 2024 22:35:48 +0000
ROA not before: Wed 11 Sep 2024 22:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41745
IP address blocks: 83.217.210.0/24 maxlen: 24
83.217.211.0/24 maxlen: 24
89.169.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e3:3a:85:ba:46:51:82:55:6c:94:a2:12:c0:8e:c8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Sep 11 22:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02945d3ed903185ee49ee7c82f22544c852b2e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0a:e4:04:53:41:d7:02:8c:c9:e9:0b:dd:3f:
d2:8c:0c:6c:61:12:16:84:63:e7:ab:d2:81:9e:25:
ed:d9:79:03:b6:83:e2:85:73:f2:f8:dd:67:40:1f:
a5:de:4c:44:90:1f:07:53:6c:bf:ad:64:06:77:31:
9b:b2:9c:c5:bc:64:4e:06:ba:db:3c:78:52:18:8f:
11:43:2f:5c:d0:3c:3b:9f:c4:99:3e:7b:76:24:1f:
db:cc:c8:f3:f3:c2:59:a5:16:16:d9:e5:05:29:c4:
c0:b8:28:8c:94:2a:78:1a:d2:1e:54:58:1d:67:b7:
4f:61:8f:30:30:36:82:90:e3:81:ce:51:3b:a1:31:
e7:e7:6b:a5:45:e0:7e:ad:4e:cd:2e:5c:c1:df:ef:
4e:41:7d:93:bb:6c:6c:99:d6:6f:47:cb:e0:46:b2:
d7:04:c3:b4:af:cb:25:68:69:a9:49:f1:86:80:1c:
24:0c:5a:42:5f:44:73:1e:6c:dd:58:dc:92:30:29:
d4:03:2e:11:c8:1c:a8:8a:b7:e3:9d:b9:a1:41:61:
4e:7a:ea:f0:90:81:f9:bf:dd:fd:cf:dc:6e:89:17:
87:f1:dd:97:45:ad:74:a0:ce:13:85:11:f7:df:06:
c5:bb:3b:00:a9:90:02:1d:6a:f6:f1:18:68:10:00:
c4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:94:5D:3E:D9:03:18:5E:E4:9E:E7:C8:2F:22:54:4C:85:2B:2E:97
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/ApRdPtkDGF7knufILyJUTIUrLpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.210.0/23
89.169.15.0/24
Signature Algorithm: sha256WithRSAEncryption
32:69:1e:b4:35:67:49:c8:1f:89:c4:b2:74:87:75:45:f6:ef:
f1:7e:f6:cf:76:dd:ce:f7:b2:e4:bc:c9:2d:31:fd:3b:8e:65:
77:5b:7b:74:c2:dc:e9:9b:9a:04:86:c0:22:c8:02:07:87:ba:
3a:a8:2c:35:9d:62:44:a9:e4:5e:b5:f3:26:91:ef:cf:53:2d:
c2:57:13:85:08:4c:0d:f1:59:99:f1:d9:b0:a2:f6:bc:37:28:
5e:f9:f2:8d:e0:fd:de:d1:50:fb:c4:af:5b:a7:f2:b4:25:84:
88:2b:86:09:4f:e6:60:e3:20:29:c9:1d:26:1e:5c:45:5c:2a:
7c:92:7d:79:3f:61:c7:1a:62:9a:c8:d0:82:e2:1f:b8:d4:ae:
d6:ae:20:bd:74:97:34:e9:82:3f:fa:2e:44:78:8f:b8:4b:bb:
b9:a0:ee:31:fc:12:63:8e:91:fa:04:2d:4c:44:a7:23:fb:1f:
d8:6f:64:8b:22:e4:fe:3d:8d:ea:38:3a:c4:c4:16:75:3d:7f:
2d:3c:5f:bc:a8:cb:a7:82:b7:40:c0:5a:ba:47:af:bf:73:41:
58:c3:f3:bf:c8:17:4b:89:2c:a2:33:4e:ee:e6:d5:d9:fc:d7:
58:1b:08:9c:50:b6:85:ee:e1:08:e7:58:92:d6:39:bc:e7:3b:
e2:d9:76:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:53:05 2024 by rpki-client on console-fra.rpki-client.org