Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/coMIAUfsxKtGYE-hzn5HVJu7tXM.roa
File: coMIAUfsxKtGYE-hzn5HVJu7tXM.roa (raw, json)
Hash identifier: R4wvLEhddnWcKFgR/aVleZh28x06YSwWAmeYhMI/ouQ=
Subject key identifier: 72:83:08:01:47:EC:C4:AB:46:60:4F:A1:CE:7E:47:54:9B:BB:B5:73
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 018CC794CE045CAD71A62E6A582D55706DF3
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/coMIAUfsxKtGYE-hzn5HVJu7tXM.roa
Signing time: Tue 02 Jan 2024 00:31:07 +0000
ROA not before: Tue 02 Jan 2024 00:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 81.199.31.0/24 maxlen: 24
81.199.30.0/24 maxlen: 24
81.199.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:ce:04:5c:ad:71:a6:2e:6a:58:2d:55:70:6d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 00:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7283080147ecc4ab46604fa1ce7e47549bbbb573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:be:34:2f:2f:a2:82:c9:93:ad:9a:4c:f5:1e:
be:da:0d:0e:32:20:8b:19:15:7b:10:7d:b2:c7:ee:
a4:20:60:0d:8b:30:e4:b3:eb:fb:8f:25:a4:b2:8b:
51:b7:b6:fd:bf:78:c1:b4:79:33:3b:83:1c:33:2c:
e1:07:e5:2c:03:a4:b5:4b:4f:66:e3:5e:c1:36:fe:
60:44:d7:8d:4e:e9:ab:14:aa:8a:cd:65:8b:46:9c:
74:be:e4:c5:89:1f:da:07:6d:4c:ff:a3:06:f7:26:
bf:cd:ec:d1:02:de:1e:3a:38:10:39:04:99:61:84:
ed:24:d5:9f:a0:dc:9e:b8:1e:7c:61:eb:1e:11:e6:
b7:0b:85:78:32:58:51:b6:7f:01:ef:b7:cf:b5:b2:
2d:98:2b:9a:d7:e7:a8:3e:9a:5d:d6:6b:93:c2:ee:
fe:4a:93:79:16:2b:4b:0e:2c:e7:87:c4:e0:a6:5e:
ee:62:40:a0:dd:b9:a5:43:8a:69:82:d9:03:dd:53:
9a:42:b8:9c:76:69:b3:2b:bb:06:98:df:86:6a:bf:
06:7b:c8:b4:51:39:d1:d7:a0:db:de:b3:df:f5:1a:
e3:65:aa:ef:e9:e3:2b:8a:aa:ba:49:b1:0f:4b:c3:
f8:16:40:33:fd:e4:72:1e:48:63:32:2f:cb:bc:0e:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:83:08:01:47:EC:C4:AB:46:60:4F:A1:CE:7E:47:54:9B:BB:B5:73
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/coMIAUfsxKtGYE-hzn5HVJu7tXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.29.0-81.199.31.255
Signature Algorithm: sha256WithRSAEncryption
64:f4:b2:b4:8e:7f:3e:1c:17:1f:99:59:f5:43:37:ba:48:d9:
bc:66:ae:75:fb:4e:88:6c:35:50:27:29:45:66:63:4c:00:4f:
2b:b5:53:fc:76:d1:dc:ca:fc:d6:00:30:a8:c1:99:3c:28:14:
c2:7c:ee:98:e2:18:4f:44:dd:74:83:85:b2:99:a0:0c:52:29:
42:35:5e:6b:f1:33:83:15:85:a5:e4:7e:fd:db:f3:0f:bb:4a:
38:97:ed:94:df:e3:9e:81:5c:74:04:22:9b:80:8f:79:70:e3:
79:79:04:83:86:16:17:13:fe:39:71:ef:39:3e:e1:56:fa:44:
7b:f2:f5:9c:dc:da:d3:f1:d6:54:88:56:fb:b2:e5:e5:17:e3:
6c:3a:44:4d:8b:d7:21:53:d4:ab:6f:60:a2:c7:99:03:81:26:
2a:00:e1:97:f2:5b:6c:5a:1e:65:4d:78:9c:87:74:ae:55:98:
1e:06:f2:cc:75:bb:c7:ba:1d:c3:9e:30:2f:5f:19:95:7a:d2:
f9:dc:2c:d2:85:e1:91:01:da:4b:13:1c:b4:40:2a:3f:8f:e6:
d9:b2:58:c8:dc:01:ba:e6:f6:d8:55:6d:07:42:d5:b1:bd:5e:
60:81:41:76:01:2b:17:36:95:7b:1a:c1:0b:6e:c8:8c:07:0c:
dd:b5:b6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 18:19:25 2024 by rpki-client on console-fra.rpki-client.org