Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/z6PAG1qtnjRK4FDjcQ6Ez4OOeUA.roa
File: z6PAG1qtnjRK4FDjcQ6Ez4OOeUA.roa (raw, json)
Hash identifier: fnzYxNcTzD/bemoJcZ7ev8njPxOv4VJsfDEVBrDpnJg=
Subject key identifier: CF:A3:C0:1B:5A:AD:9E:34:4A:E0:50:E3:71:0E:84:CF:83:8E:79:40
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018ED27639372951D6B07C2377F46BBD13DF
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/z6PAG1qtnjRK4FDjcQ6Ez4OOeUA.roa
Signing time: Fri 12 Apr 2024 13:19:07 +0000
ROA not before: Fri 12 Apr 2024 13:19:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8398
IP address blocks: 82.179.128.0/21 maxlen: 21
82.179.136.0/22 maxlen: 23
82.179.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d2:76:39:37:29:51:d6:b0:7c:23:77:f4:6b:bd:13:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Apr 12 13:19:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfa3c01b5aad9e344ae050e3710e84cf838e7940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:f5:d3:c8:1e:c9:ba:c0:80:2b:99:23:0c:
96:86:75:cc:f6:e9:db:37:a5:90:20:21:0a:79:9e:
99:85:54:7d:0e:5c:70:2e:08:0e:34:08:9b:67:c4:
c2:c9:38:86:e8:12:5f:38:a8:a4:b5:e3:6f:f8:38:
c8:8c:b7:74:e6:07:54:a7:1a:1a:a2:77:2e:53:6a:
98:f7:bc:cc:85:ad:2a:ae:50:d3:24:bd:b8:be:ce:
f1:dc:80:c9:e8:ad:bb:6b:1e:69:88:06:74:da:c7:
57:ab:f1:17:cd:c5:84:c7:72:7b:31:9f:8e:fc:38:
73:da:12:d0:c6:e8:5c:4f:d2:5c:21:37:5a:27:16:
5f:c9:bf:b4:9c:34:7f:45:53:ef:24:60:68:03:9a:
71:63:fc:af:3b:e4:e0:ce:d4:ab:03:00:cb:65:0c:
ba:5a:d9:86:15:9a:92:f1:54:ac:c9:97:83:76:4d:
4d:30:93:2e:b2:ec:63:ee:43:80:c1:e2:96:82:3f:
51:23:1e:1f:0c:10:41:e6:02:32:37:e2:e1:89:23:
da:da:f0:58:ba:94:07:25:16:ba:b3:da:84:87:f7:
b2:be:b4:28:fd:98:29:91:2a:b6:8e:d2:62:7f:77:
58:58:93:ca:16:72:5a:20:56:c7:3c:ac:58:63:ec:
72:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A3:C0:1B:5A:AD:9E:34:4A:E0:50:E3:71:0E:84:CF:83:8E:79:40
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/z6PAG1qtnjRK4FDjcQ6Ez4OOeUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.128.0-82.179.139.255
82.179.142.0/23
Signature Algorithm: sha256WithRSAEncryption
44:e2:25:b1:ee:8b:8d:b8:26:c4:32:a9:d7:74:d1:9d:81:7a:
af:52:c9:43:ea:4c:74:ec:5d:62:7f:c4:44:da:04:7e:27:f6:
91:8d:d5:da:83:03:02:3f:e2:88:8a:d7:c1:4e:00:8e:46:47:
7e:80:90:f0:cb:db:01:80:d3:b6:76:1b:16:62:ce:eb:eb:f3:
58:a3:3b:95:7c:06:d3:79:f5:d4:f4:60:0e:31:58:14:cf:88:
24:7e:ce:73:a8:34:34:72:f2:c9:c7:ab:b5:80:ee:bf:e8:fd:
f3:a7:9a:cd:60:fb:5d:ca:55:22:0d:d0:62:85:19:1e:26:ba:
14:bf:d7:7f:41:54:1b:7d:a7:56:3a:12:8f:2a:7a:77:22:21:
b0:59:9b:30:f9:3e:7b:5a:22:9b:4b:a5:43:c7:45:d2:10:82:
a8:59:62:c1:48:0a:c5:3b:3d:8c:4a:60:d4:93:9a:91:1f:69:
5b:bd:d0:ef:d0:de:fa:33:b8:be:72:55:99:db:89:52:ba:f4:
3d:68:73:57:92:ea:f9:e4:94:cd:f8:55:34:c5:78:ce:c1:f1:
00:4a:3e:8e:e3:4b:5a:4a:13:a4:36:48:4e:50:9f:43:07:7b:
a0:14:41:58:1c:f7:18:26:76:e7:c5:61:25:03:c0:92:dd:98:
87:4e:95:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:59:57 2024 by rpki-client on console-fra.rpki-client.org