Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AU96GNIgE8clhmP7C0YQOkYVUVQ.roa
File: AU96GNIgE8clhmP7C0YQOkYVUVQ.roa (raw, json)
Hash identifier: lN4nH5YFEMkitDKHW1AT/Dw1w53JiPmTVo8vlQh15dc=
Subject key identifier: 01:4F:7A:18:D2:20:13:C7:25:86:63:FB:0B:46:10:3A:46:15:51:54
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EE6A3A34D0BAC083C79105781DEB63747
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AU96GNIgE8clhmP7C0YQOkYVUVQ.roa
Signing time: Tue 16 Apr 2024 11:21:07 +0000
ROA not before: Tue 16 Apr 2024 11:21:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 81.161.230.0/24 maxlen: 24
93.123.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:a3:a3:4d:0b:ac:08:3c:79:10:57:81:de:b6:37:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 16 11:21:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=014f7a18d22013c7258663fb0b46103a46155154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:b2:dc:9c:be:5b:1e:a9:87:8e:34:62:42:
0c:56:a2:b3:bf:7b:b9:36:ea:f1:e2:78:43:7e:80:
9c:83:0a:df:c5:24:72:c6:f4:9e:e8:4d:74:0c:2a:
2b:4f:b7:07:6c:d9:1c:e7:9e:53:8e:ce:2f:55:3f:
46:c3:f5:59:bb:bc:53:3a:d5:7b:98:6e:48:1e:46:
65:4e:98:36:7e:e1:29:a8:25:20:61:cf:e2:dd:da:
8b:9e:b0:50:ff:78:c6:5d:d7:c2:54:2d:de:a4:45:
a9:ee:22:86:a1:9d:98:54:bd:4e:2f:66:c9:c2:28:
f8:35:2b:eb:50:d2:be:18:07:7a:86:72:a8:5e:26:
74:9b:a0:51:ed:a3:36:c0:d8:05:b8:a4:da:08:b5:
25:cf:b0:07:9f:69:87:04:8e:1f:eb:c2:74:59:9f:
aa:0c:95:33:63:42:78:a1:2e:b7:67:99:10:74:fe:
3a:03:77:d4:a9:28:8e:b7:29:f9:8f:86:1f:d3:15:
29:57:bd:a6:a9:1c:c4:87:8b:72:c4:6f:59:37:a1:
f9:0d:f8:24:a4:53:e7:d7:b8:c2:40:25:7f:24:d7:
ef:d8:ad:4f:e9:2c:a0:b9:57:97:04:19:76:64:5e:
21:fc:7f:ac:ee:04:7c:cd:ce:51:77:5a:c6:f2:19:
72:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4F:7A:18:D2:20:13:C7:25:86:63:FB:0B:46:10:3A:46:15:51:54
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AU96GNIgE8clhmP7C0YQOkYVUVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.230.0/24
93.123.80.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:37:e7:c2:8c:e2:c4:3b:98:35:79:9b:57:06:1d:e5:17:29:
58:eb:5b:2d:57:29:30:f2:c3:95:89:d1:13:f3:5f:ca:a3:25:
61:bc:80:d2:62:27:e5:32:b6:6e:98:7c:3c:b3:58:62:26:2e:
7d:ef:71:fb:d7:32:7b:39:32:2d:d0:da:ea:cf:d1:5c:6e:43:
94:12:97:00:53:15:72:1f:78:f0:23:d9:28:b1:9b:da:62:6d:
91:1c:69:c5:50:e8:a3:81:99:a8:2a:07:89:fe:82:66:c1:3a:
6e:fd:96:7c:18:51:12:17:5f:a3:82:e7:14:92:c6:c5:a0:79:
c8:09:5b:93:d2:3d:db:c8:10:34:84:03:41:45:ce:fc:27:fa:
a2:12:48:1b:95:73:1f:1d:86:59:a9:1f:e1:f5:a3:f6:c0:35:
79:23:e2:48:c7:8a:64:31:fd:59:44:34:63:5f:60:62:a2:28:
ba:f7:e8:b2:31:a4:f0:51:05:ce:1c:b8:9f:66:7a:19:cf:d5:
b4:a2:cd:77:b6:0f:de:c2:d2:46:b7:3e:6d:b5:f7:64:a0:d6:
3d:51:22:cb:2b:3f:9d:70:05:cf:b9:25:0a:7b:6c:85:57:c2:
a0:c5:93:a7:a7:f2:d8:62:ae:4e:fb:5b:5d:b8:59:99:55:3d:
14:67:d0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:10:21 2024 by rpki-client on console-ams.rpki-client.org