Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/9ut8u_rYJ-GVgefvLk_VPyEcamQ.roa
File: 9ut8u_rYJ-GVgefvLk_VPyEcamQ.roa (raw, json)
Hash identifier: L4Y3x1kKHZSYwqR/BtbLrseHt/9bQEU2CI5XE1PoJrg=
Subject key identifier: F6:EB:7C:BB:FA:D8:27:E1:95:81:E7:EF:2E:4F:D5:3F:21:1C:6A:64
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018CC3B6DFDBC2726862C4540DD2F03EDC77
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/9ut8u_rYJ-GVgefvLk_VPyEcamQ.roa
Signing time: Mon 01 Jan 2024 06:29:51 +0000
ROA not before: Mon 01 Jan 2024 06:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198100
IP address blocks: 81.31.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:df:db:c2:72:68:62:c4:54:0d:d2:f0:3e:dc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 06:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6eb7cbbfad827e19581e7ef2e4fd53f211c6a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:dd:0c:58:80:49:b3:b9:4a:fd:3b:78:e9:
01:37:a4:5d:ab:df:ab:3c:0a:2b:7c:c9:33:f5:d9:
f3:da:d6:c4:df:1f:c6:82:f6:09:fb:57:2d:35:db:
79:c1:69:51:68:57:02:37:67:e8:e4:7d:c6:7f:84:
98:2d:14:51:f0:76:6e:3f:46:ca:9c:65:13:ac:a0:
d6:89:d9:28:fe:eb:54:31:a3:7a:ed:6f:d5:3e:d1:
59:fa:cf:4f:5a:10:8d:d7:ac:2c:88:12:38:c5:ab:
86:8e:4f:84:42:08:fe:fb:d0:7a:60:89:04:79:fd:
06:80:93:b3:7c:fb:4c:6c:0c:74:d0:f8:11:a9:cf:
71:8c:d7:1d:8b:7f:14:d2:f3:3e:dd:33:61:f1:07:
6b:e6:e5:68:df:c5:f5:1e:ae:71:dd:02:0b:6b:17:
a4:7f:74:e1:9c:65:37:41:d3:9c:33:92:00:f2:21:
13:01:1f:2e:7a:9d:d0:f2:95:84:e5:34:61:7e:93:
75:8d:7f:a5:da:6e:06:21:86:eb:de:70:39:8b:8c:
5a:f1:06:0b:8c:b7:2e:5d:09:13:02:80:76:c9:61:
0b:89:81:6e:ce:e7:c8:1d:95:78:c9:18:b6:cb:89:
e6:78:2f:a3:41:16:b2:2b:f6:c3:ff:de:eb:d2:92:
ed:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EB:7C:BB:FA:D8:27:E1:95:81:E7:EF:2E:4F:D5:3F:21:1C:6A:64
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/9ut8u_rYJ-GVgefvLk_VPyEcamQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.232.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:37:84:ca:81:48:f3:fc:81:a7:03:07:4a:0f:aa:d8:36:bf:
6c:83:f4:01:4c:97:4d:33:12:cd:9c:58:93:b9:35:7e:20:08:
d5:33:7a:db:80:61:c8:13:03:73:84:72:44:74:cd:61:4b:be:
1a:67:47:d4:cd:e4:8f:02:24:41:58:0c:ec:8b:6a:59:76:fa:
43:d1:94:5c:82:6d:2f:79:08:dc:74:9c:c3:98:cd:a0:ba:ce:
2b:20:85:c0:91:94:3b:fc:3a:2b:2e:3e:16:fb:a7:4a:2f:79:
b9:a5:83:a9:92:12:9e:ba:c6:3a:ea:58:71:5d:6e:17:d6:01:
24:44:4c:18:04:c8:0e:84:f3:ad:0b:93:db:6c:89:4d:4b:95:
92:1b:b4:52:de:9f:f8:6a:ec:10:af:00:d7:21:7c:87:c2:b2:
04:7a:6b:4c:79:11:01:26:8d:a6:db:bf:e3:c3:18:dc:21:5e:
1b:b0:a0:87:3b:84:1d:d3:8a:04:78:77:a2:a1:65:52:83:7b:
c1:fd:e8:cc:0b:58:4f:b6:99:61:17:6c:f4:88:93:78:38:4d:
fd:83:8f:56:2d:25:a8:5d:47:58:0d:73:e6:7a:87:de:48:14:
56:6e:82:8a:0e:39:2b:ae:b8:89:74:3a:55:cb:6f:9a:35:08:
44:9f:4a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:11:07 2024 by rpki-client on console-ams.rpki-client.org