Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/iRmJInafWsrPnm-8oCXHSceiWVw.roa
File: iRmJInafWsrPnm-8oCXHSceiWVw.roa (raw, json)
Hash identifier: m79KKtEwgs3DnyorJjVuInTvlHy1Lvf0Ndoqeh7tmfM=
Subject key identifier: 89:19:89:22:76:9F:5A:CA:CF:9E:6F:BC:A0:25:C7:49:C7:A2:59:5C
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 018CC8DEF5C19053B1F4E2182647E8559A6C
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/iRmJInafWsrPnm-8oCXHSceiWVw.roa
Signing time: Tue 02 Jan 2024 06:31:44 +0000
ROA not before: Tue 02 Jan 2024 06:31:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34049
IP address blocks: 77.240.181.0/24 maxlen: 24
81.19.12.0/23 maxlen: 23
81.19.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:f5:c1:90:53:b1:f4:e2:18:26:47:e8:55:9a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Jan 2 06:31:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89198922769f5acacf9e6fbca025c749c7a2595c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f0:6a:e3:11:02:d3:09:c4:1a:50:a7:cf:c2:
24:47:d5:c2:cd:b4:f0:bd:27:fd:e6:62:5a:ae:a3:
ad:e2:60:3e:19:f3:da:d3:9e:22:8f:82:2d:4e:e6:
91:41:eb:36:ab:48:67:8d:f7:67:19:79:49:6f:8d:
dc:4d:38:16:b9:9e:e4:ef:e6:ef:f6:7f:c3:ad:ee:
e4:59:cd:d9:10:0d:0a:16:10:56:60:7e:d4:0c:e0:
df:e1:c3:6b:33:8b:f1:44:b5:ab:0b:3f:18:89:48:
04:88:0b:36:e4:ae:49:ff:d2:5c:fe:7c:47:ca:d3:
01:20:25:d1:00:4e:fe:76:53:3f:e0:d0:f8:62:5d:
90:87:37:62:8d:b0:e0:84:a9:3c:34:85:fe:5b:3b:
cd:87:50:19:5b:83:4d:82:83:ef:ab:07:ed:7f:3c:
4b:83:a4:e6:da:89:d2:28:1a:cf:1d:9d:7f:f7:b8:
78:5b:b1:de:b4:20:3d:64:92:aa:ff:7b:4a:a6:4e:
ad:89:ee:62:8c:f4:67:73:20:e4:8f:19:86:82:81:
d8:1f:87:18:6d:f8:ab:c8:ff:9c:3c:9d:47:3f:5f:
45:57:91:15:9d:dc:4e:fe:81:42:96:77:96:22:42:
84:ca:6d:57:96:78:4d:cf:d7:84:d4:41:76:0c:c3:
54:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:19:89:22:76:9F:5A:CA:CF:9E:6F:BC:A0:25:C7:49:C7:A2:59:5C
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/iRmJInafWsrPnm-8oCXHSceiWVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.181.0/24
81.19.12.0-81.19.14.255
Signature Algorithm: sha256WithRSAEncryption
50:1b:c5:81:5d:04:82:92:98:b3:bc:0f:22:c3:64:2c:80:0f:
da:0f:a7:66:e4:7c:f7:00:4f:52:72:26:26:51:70:0e:2a:f1:
4a:be:31:60:30:9e:4a:ef:9c:80:73:5a:53:cc:1d:e9:8b:c5:
03:f9:a5:e0:50:c0:44:4b:9b:27:5c:3f:e5:04:46:5e:bd:b4:
7c:e8:7a:56:77:b7:90:3b:1a:56:aa:98:2e:02:3e:38:dd:ba:
26:99:e9:51:4c:e2:e1:3b:22:11:3e:c7:e7:3a:5c:7e:af:e5:
c7:e4:50:da:44:85:a8:0c:d3:b0:91:df:59:3f:5f:30:71:b2:
43:8a:ad:cc:87:6d:2c:3d:f5:37:7b:b1:da:52:9b:db:26:33:
9f:88:89:a4:fb:27:05:07:ca:92:89:c2:7a:f9:08:02:8c:9c:
f0:45:b4:a7:e5:f8:6a:66:7f:20:af:e2:a3:38:97:4f:13:7b:
d5:1e:a6:b3:ec:6e:43:2e:f9:c2:59:b1:72:29:ca:62:0c:c0:
e3:0f:78:15:1e:56:64:77:39:51:18:34:d8:d5:bd:40:2c:dc:
79:de:38:5c:a6:eb:b1:6e:4e:14:80:8d:cd:9d:c2:80:b3:d1:
3d:3c:e2:3e:10:dc:8b:0a:a7:c1:2c:10:4a:7f:21:df:6b:d2:
0e:cf:49:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:44:59 2024 by rpki-client on console-ams.rpki-client.org