Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/fuUps2aRQkJHHd5iIfnTKFZGxHM.roa
File: fuUps2aRQkJHHd5iIfnTKFZGxHM.roa (raw, json)
Hash identifier: sJ25TtqdOaT/n5KyVJJPUK/zQ3AMSASckTZRULIgdlI=
Subject key identifier: 7E:E5:29:B3:66:91:42:42:47:1D:DE:62:21:F9:D3:28:56:46:C4:73
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 018CC794DC84652162965A1EDC3FCB9D13E1
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/fuUps2aRQkJHHd5iIfnTKFZGxHM.roa
Signing time: Tue 02 Jan 2024 00:31:10 +0000
ROA not before: Tue 02 Jan 2024 00:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 81.19.131.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:dc:84:65:21:62:96:5a:1e:dc:3f:cb:9d:13:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jan 2 00:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ee529b366914242471dde6221f9d3285646c473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:48:e5:73:27:9a:67:f9:2b:c4:63:2e:b2:
fe:0b:00:24:a1:a4:ac:33:f4:5d:36:c8:89:3f:75:
fd:ff:19:57:ff:94:70:f0:46:51:82:87:0a:9c:f7:
57:40:f7:ca:13:a7:98:e2:e7:30:0f:af:b3:2c:08:
58:62:34:c7:78:5c:87:1f:03:79:08:83:d4:55:e3:
9a:5c:e4:4a:ba:4f:35:57:6f:38:f1:db:4e:8b:1e:
dd:5b:72:81:91:f0:6c:d2:4c:e2:87:3e:0f:3a:69:
f2:90:4a:26:5d:36:2d:70:9e:0b:d9:71:57:de:47:
09:fd:a8:7b:1c:78:ff:f7:f4:23:43:1d:b3:f8:a6:
a7:ee:16:60:99:fa:90:df:73:71:f7:c8:e3:5e:9d:
01:28:b4:02:86:85:d5:09:cd:23:c1:29:18:16:c1:
4d:4d:c6:6f:77:0d:1d:9c:0c:76:71:d1:9a:40:6a:
d9:b9:3e:22:36:2a:fc:36:28:a3:e0:66:8c:1c:3f:
78:3d:f0:a9:54:db:17:fc:e1:ca:bb:a0:4e:bb:41:
05:30:69:e0:90:b8:79:92:57:1e:af:af:73:a0:f9:
ec:91:15:ce:23:f6:61:31:dc:d8:6a:12:05:58:ca:
22:a1:3d:fe:1b:9a:b5:03:d9:bb:a1:c7:94:a5:4e:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E5:29:B3:66:91:42:42:47:1D:DE:62:21:F9:D3:28:56:46:C4:73
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/fuUps2aRQkJHHd5iIfnTKFZGxHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.131.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:28:fe:70:03:3f:55:9c:81:51:d5:73:8e:48:d8:ca:8e:0b:
7e:77:0e:ff:5c:47:56:10:be:ab:c1:6a:a9:a5:66:0f:41:c8:
b0:5f:5e:18:5f:17:49:63:e1:29:22:ee:ea:25:95:17:10:66:
e4:42:4d:1e:7b:cb:fa:84:a6:8f:db:8a:4a:56:c8:5b:4b:f2:
d6:dd:ee:b0:5f:7f:4d:59:3a:d4:18:a9:ce:01:4b:f8:b5:03:
69:b5:a4:b1:25:35:21:99:bc:d5:96:5c:43:bf:ed:27:a1:fc:
39:0d:83:49:86:9b:71:06:18:51:32:2b:35:d4:a7:12:2e:c5:
b7:ff:cb:1e:73:1a:ef:76:5a:ab:2c:62:0e:91:a8:dc:fa:54:
8b:6b:5c:0a:6f:3c:8f:95:45:cd:0d:6e:a9:a1:bf:89:84:5e:
a2:f4:66:7a:4d:05:f8:5c:9d:f3:3b:cc:e2:7c:54:01:c0:a3:
be:09:20:a4:95:e9:cb:47:1d:66:29:ef:44:09:e2:ad:a9:ec:
50:2f:e7:06:39:41:54:d1:3c:f6:b8:45:8b:ed:7d:ea:86:d9:
00:bc:fa:4f:1f:8e:3c:2d:c5:be:72:c8:b9:60:bd:dc:dd:71:
75:1c:43:06:25:40:36:67:d2:17:aa:cf:b3:99:66:00:ea:9e:
f2:a0:3f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:11:43 2024 by rpki-client on console-ams.rpki-client.org