Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fRsPSdk3ICKwu_W06GrL6u7uELs.roa
File: fRsPSdk3ICKwu_W06GrL6u7uELs.roa (raw, json)
Hash identifier: Qp4+PXVUoMrluupXoNPzed2rRvvOn4QMfUxeD25c3Qo=
Subject key identifier: 7D:1B:0F:49:D9:37:20:22:B0:BB:F5:B4:E8:6A:CB:EA:EE:EE:10:BB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCD236AFD998F222E404DEFA15879C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fRsPSdk3ICKwu_W06GrL6u7uELs.roa
Signing time: Tue 02 Jan 2024 06:29:23 +0000
ROA not before: Tue 02 Jan 2024 06:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20454
IP address blocks: 81.161.237.0/24 maxlen: 24
93.123.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:d2:36:af:d9:98:f2:22:e4:04:de:fa:15:87:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d1b0f49d9372022b0bbf5b4e86acbeaeeee10bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:39:0f:21:e5:f8:d1:78:0c:54:5c:c8:49:a6:
19:bf:d0:b8:52:67:eb:22:08:3c:22:c8:84:4b:66:
fa:3f:a8:78:15:87:34:f7:c8:9c:c7:e1:ed:e2:77:
4a:b9:38:8d:50:87:bc:36:fc:dc:7a:61:da:2e:44:
89:ae:fe:7e:6a:3b:f1:6f:8e:1b:e5:fb:9d:06:10:
43:74:d4:73:c1:61:38:d2:55:de:0b:07:43:66:29:
08:f4:da:94:11:fe:5f:73:55:2c:70:60:76:41:51:
1d:db:f2:24:cd:34:f7:31:e1:c3:f6:3c:ab:a6:d0:
7f:e4:04:7a:28:0b:0e:b8:3d:78:3d:46:94:41:b2:
9a:3d:40:c6:d6:80:d4:f0:12:0b:7c:8a:7a:90:ff:
37:22:e3:86:f4:ae:65:6d:af:48:18:63:d3:c2:5e:
f9:e4:40:c7:e8:0a:0b:52:27:f2:84:a5:1b:15:44:
69:63:97:a3:7a:74:75:75:1b:82:4c:67:b1:59:91:
15:08:5f:b2:67:97:c5:7f:6a:1e:66:2e:93:19:2d:
82:bb:19:2e:d7:ed:6d:8e:1a:37:cd:ee:b6:5a:bf:
0a:d5:1f:fe:18:1a:c7:7d:24:fa:4d:41:84:6b:c7:
dc:ac:18:3b:6d:1c:05:05:1c:36:50:c8:76:94:39:
e1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1B:0F:49:D9:37:20:22:B0:BB:F5:B4:E8:6A:CB:EA:EE:EE:10:BB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fRsPSdk3ICKwu_W06GrL6u7uELs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.237.0/24
93.123.81.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ab:f0:cb:c9:38:97:a1:25:93:c7:20:b9:9d:d1:f1:ec:f8:
79:25:14:f5:bb:cd:2c:ad:6f:33:69:16:bf:f6:2d:1f:e0:11:
16:d9:4c:a6:09:9d:5a:ee:1c:1f:94:e8:dc:42:a6:3c:9d:81:
12:2f:96:6d:47:17:91:ed:84:d2:9d:7d:fa:73:92:84:8f:15:
9f:a2:50:4a:03:6c:49:24:41:a7:3a:86:88:15:7b:da:37:61:
1d:0f:dc:9f:50:45:2b:93:82:74:85:c2:99:2b:42:76:eb:53:
3d:59:cf:1c:f8:e7:e9:21:d6:ff:33:c1:93:0b:66:19:02:57:
ae:21:b3:e0:f2:30:71:1a:cd:74:a7:c3:19:d1:e0:9b:0b:5a:
71:b6:60:85:c8:9c:29:f3:66:14:9e:a4:aa:40:26:ae:ab:45:
26:e8:da:d2:44:7c:00:fd:52:68:a3:48:09:2e:1a:7e:7e:12:
4c:c1:64:23:6e:fc:c2:5b:81:ca:34:84:3f:7b:7e:2e:66:b0:
e7:18:4b:5b:d7:6f:ab:c2:37:61:4c:f4:5a:20:1b:b3:d9:d1:
7e:d1:ba:e4:82:ed:d5:f0:58:bd:86:32:15:6d:e3:d0:24:96:
95:17:70:d9:18:5f:7d:d9:fc:0e:2a:f5:54:ce:f4:ab:5c:62:
c1:f0:3e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:47:48 2024 by rpki-client on console-fra.rpki-client.org