Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/tHVUApeqKwSn2ZYG3gd2WBK2C_Y.roa
File: tHVUApeqKwSn2ZYG3gd2WBK2C_Y.roa (raw, json)
Hash identifier: 7CH6eRlHBpSIhsNTO/nD+NmzwnuywYJjpuOfHSSMXVU=
Subject key identifier: B4:75:54:02:97:AA:2B:04:A7:D9:96:06:DE:07:76:58:12:B6:0B:F6
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018CC3B6DCAF16D256C28860260BC35B16E9
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/tHVUApeqKwSn2ZYG3gd2WBK2C_Y.roa
Signing time: Mon 01 Jan 2024 06:29:50 +0000
ROA not before: Mon 01 Jan 2024 06:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44400
IP address blocks: 81.31.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:dc:af:16:d2:56:c2:88:60:26:0b:c3:5b:16:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 06:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b475540297aa2b04a7d99606de07765812b60bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:20:cf:06:a7:01:49:97:32:11:e6:45:ed:
0d:c6:2f:c9:9d:af:9d:8b:f6:5e:0a:2a:a2:08:ba:
31:1d:04:9c:e0:fd:70:5d:70:a0:b1:bc:ed:5b:57:
8a:4c:b6:36:60:f7:0f:54:aa:7d:3d:19:d8:d4:69:
9b:36:46:18:60:1f:9b:4c:5b:b3:43:be:a6:1e:9d:
e8:9c:be:5c:e6:01:70:85:1b:07:86:83:2a:49:3e:
9b:ba:50:f2:1c:b1:49:2c:6c:ab:9e:ce:ac:7f:1c:
e8:da:3d:04:61:cf:ec:7a:8d:d7:52:34:b0:04:5c:
7c:b1:c9:6e:00:2c:2c:e3:43:26:8c:47:7e:41:39:
86:f6:e7:3c:20:90:30:ed:74:15:d4:0e:fb:b8:11:
c6:44:1e:38:79:bf:c6:93:be:1d:c6:09:cc:dc:a7:
4a:bf:9d:5b:f2:46:c0:cf:d5:78:49:92:e9:d4:08:
8a:56:77:ad:33:33:14:67:a9:b9:3c:c8:50:3e:cc:
46:e2:dc:43:8a:ec:6f:bc:42:e7:38:4b:c8:f2:8b:
67:57:9d:3a:aa:8d:0d:19:cf:b3:c2:0e:25:35:ad:
1c:a2:39:a6:a0:1b:00:eb:07:0c:40:96:d4:d6:7b:
b7:d9:a2:a4:17:f0:57:74:98:61:ca:ef:a7:65:ac:
71:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:75:54:02:97:AA:2B:04:A7:D9:96:06:DE:07:76:58:12:B6:0B:F6
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/tHVUApeqKwSn2ZYG3gd2WBK2C_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.252.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:69:1d:34:c0:c7:04:57:ed:b6:ac:2d:17:10:d0:be:62:6a:
4b:a6:1b:55:35:f4:82:30:cb:4e:eb:dd:48:f9:25:8a:33:30:
a6:e5:5f:d1:b5:db:f4:b6:43:3c:28:dc:21:21:fc:94:bb:80:
10:c0:a1:6b:61:c0:ba:20:8a:58:58:e2:a7:a3:2f:9b:52:6e:
48:ce:fd:14:52:34:8c:63:23:09:c9:f9:f0:ff:ee:69:12:06:
09:51:59:35:0d:3b:03:74:64:a8:f7:df:d4:ff:6d:ef:98:35:
ad:91:51:05:e3:68:e2:bc:0a:e5:f0:5b:aa:ab:82:4b:04:d1:
fa:9a:32:06:a4:5a:c2:6e:1c:1b:ab:e9:9f:31:70:83:2a:96:
4e:1f:11:dd:73:78:9c:7f:83:d9:0b:54:38:97:a8:22:49:ae:
6e:3d:b5:9f:d3:25:f4:35:bc:de:50:b0:ea:cb:6e:95:4b:3f:
b0:ce:d0:f9:22:e7:60:7d:b8:c4:e1:b6:98:ae:af:23:26:7d:
f5:ac:59:f9:53:e5:1b:18:a5:06:e3:50:49:24:c5:22:b7:b6:
98:28:66:94:98:35:71:0b:4c:7a:81:46:c3:63:83:73:20:23:
ef:1a:a7:67:bf:7c:ec:b2:f4:b8:3f:40:b1:12:19:27:9b:58:
18:26:b2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:10:43 2024 by rpki-client on console-ams.rpki-client.org