Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/_WRAJXi3pIWY4Ud195tAdJDoA9g.roa
File: _WRAJXi3pIWY4Ud195tAdJDoA9g.roa (raw, json)
Hash identifier: /Q08lhtKYzFlsumBDMGdHrhXAQS3h1DXe4Ws726cF1Q=
Subject key identifier: FD:64:40:25:78:B7:A4:85:98:E1:47:75:F7:9B:40:74:90:E8:03:D8
Certificate issuer: /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial: 018CC2DB40F39715DC60C7D1FDADD93D3297
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/_WRAJXi3pIWY4Ud195tAdJDoA9g.roa
Signing time: Mon 01 Jan 2024 02:29:58 +0000
ROA not before: Mon 01 Jan 2024 02:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203428
IP address blocks: 81.8.150.0/24 maxlen: 24
81.8.151.0/24 maxlen: 24
81.8.152.0/24 maxlen: 24
81.8.153.0/24 maxlen: 24
81.8.154.0/24 maxlen: 24
81.8.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:40:f3:97:15:dc:60:c7:d1:fd:ad:d9:3d:32:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Validity
Not Before: Jan 1 02:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd64402578b7a48598e14775f79b407490e803d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:44:ea:16:f2:99:58:90:e7:e4:90:99:6e:80:
4b:5a:97:f6:c4:2d:4d:fb:9a:65:80:ff:80:26:f1:
50:b8:54:dd:a8:33:4c:e4:db:0f:40:77:b0:ea:9f:
46:46:13:ee:45:3a:92:da:6c:ef:62:10:9c:ac:e9:
b4:2f:1e:1f:55:4a:d8:98:a2:9b:63:db:e0:dd:0e:
e6:20:62:2c:4b:bb:1f:d8:4b:14:97:36:49:ce:a9:
df:02:62:60:7e:e8:fe:8f:f9:de:1d:bd:a2:2e:6b:
0d:ae:33:45:fd:4c:8d:74:6c:2e:56:3f:4e:5c:8d:
26:33:9d:61:0f:99:57:4a:8c:2b:3d:60:f7:e0:78:
93:3b:cd:ee:b8:b2:d0:91:4c:89:6d:f4:03:e7:ad:
9e:bc:6e:4e:3f:cf:52:a2:74:5c:00:21:32:ae:52:
13:53:95:be:d5:98:7e:c3:2c:cc:bc:4a:bf:0d:95:
41:7f:74:ba:86:ff:69:57:79:5b:53:56:a8:e3:5f:
da:ce:9f:73:2b:86:3c:b6:fc:66:fd:d9:b4:f8:ca:
64:17:3b:b3:96:12:b0:1e:4c:8b:b3:df:4a:51:ca:
db:c8:a1:29:dc:69:e6:0c:81:00:f1:9e:80:5b:95:
e6:a6:62:02:91:65:c7:a8:bd:4e:b5:60:c5:c8:52:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:64:40:25:78:B7:A4:85:98:E1:47:75:F7:9B:40:74:90:E8:03:D8
X509v3 Authority Key Identifier:
keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/_WRAJXi3pIWY4Ud195tAdJDoA9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.8.150.0-81.8.155.255
Signature Algorithm: sha256WithRSAEncryption
85:8a:13:3e:1c:be:16:49:6c:4b:b0:a3:f0:6f:9f:2c:c0:a9:
33:5b:c3:00:b6:a5:c8:26:03:21:2a:ea:01:d2:0d:10:83:64:
4c:c4:9c:e6:d8:3e:96:d7:a7:bc:9b:08:a1:47:6f:ca:e4:84:
e0:0d:26:de:f1:d0:f3:19:03:65:5e:8f:56:9a:17:a8:13:2b:
4a:46:62:2a:89:9c:b7:44:4c:e6:06:83:71:40:05:55:60:02:
e6:0d:81:b6:93:f3:c2:ad:7d:ef:f2:6e:50:a5:b3:0c:27:80:
fe:10:f0:65:c7:48:70:3f:4f:0d:7f:53:5c:43:14:7e:aa:0b:
c3:80:63:84:ce:e8:79:76:ca:53:6f:85:b2:f8:16:31:99:36:
cf:ef:7e:83:87:96:53:58:7a:af:e0:eb:8d:a0:84:19:8a:3e:
29:d0:8c:06:a6:aa:85:37:99:8b:99:84:59:7f:44:99:30:60:
8a:a1:f5:ec:94:e9:ea:3d:3d:7d:cf:0d:b3:b3:50:b8:19:68:
1b:dd:fd:fd:d9:39:52:42:53:3a:c8:ec:ce:da:65:54:04:ea:
c7:15:36:db:69:b6:8a:99:ef:95:d7:b4:9a:41:2c:2e:bd:94:
f2:57:3c:5f:28:74:71:11:4e:b1:ba:dd:e3:0a:fb:7d:79:c9:
f6:3e:ff:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:10:53 2024 by rpki-client on console-fra.rpki-client.org