Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/0tFeszzClTVrKtw1QNGR81ewwiA.roa
File: 0tFeszzClTVrKtw1QNGR81ewwiA.roa (raw, json)
Hash identifier: ilOUScxICHdJ9j1UqTs9rFrwMtrCk7olMqEgWx9+OaY=
Subject key identifier: D2:D1:5E:B3:3C:C2:95:35:6B:2A:DC:35:40:D1:91:F3:57:B0:C2:20
Certificate issuer: /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial: 018CC501560103B2C39F5D06397F4A3CF159
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/0tFeszzClTVrKtw1QNGR81ewwiA.roa
Signing time: Mon 01 Jan 2024 12:30:48 +0000
ROA not before: Mon 01 Jan 2024 12:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 81.20.41.0/24 maxlen: 24
81.20.40.0/24 maxlen: 24
2a00:1fd0:ae00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:56:01:03:b2:c3:9f:5d:06:39:7f:4a:3c:f1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
Validity
Not Before: Jan 1 12:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2d15eb33cc295356b2adc3540d191f357b0c220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:2a:50:7c:3b:4c:a1:27:08:15:4f:99:69:
3f:d5:58:63:b7:09:e3:c6:d8:10:8a:8a:b5:ce:14:
cf:40:b3:d0:45:2c:71:d0:31:b3:d6:39:e2:2f:26:
79:87:fd:ca:cf:53:f0:64:35:32:73:d0:a8:0b:46:
88:da:9c:46:17:78:ef:6c:c7:d3:ed:8f:ae:fb:b0:
eb:6d:17:1e:61:fd:64:f6:e5:0b:16:69:3e:49:13:
ef:99:18:b8:de:0b:2f:5a:c9:45:53:28:92:e9:12:
56:71:c6:30:d5:2c:ca:80:97:e0:82:a9:ed:d9:f0:
14:eb:0d:ce:54:77:9c:bf:08:0a:ce:3f:72:a9:34:
21:14:fc:5d:b1:c9:e0:c5:8b:78:c3:f9:a2:d6:8c:
75:ae:e9:da:69:a9:01:30:9c:12:32:f1:57:d4:75:
1f:fe:da:31:c6:77:da:c9:f3:c2:d7:88:d4:ce:90:
cd:56:d8:3e:19:3e:66:a3:93:3f:c9:a8:a4:45:a2:
58:d6:36:9a:76:80:8b:d9:f4:c4:6c:a5:8a:0a:12:
b2:ae:1f:59:da:d8:4f:19:95:fd:9c:23:f8:96:11:
0d:96:f8:5e:40:7f:28:43:f2:d2:50:b9:30:2f:27:
78:03:0f:15:18:74:6c:e5:2b:79:08:74:d6:6c:40:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D1:5E:B3:3C:C2:95:35:6B:2A:DC:35:40:D1:91:F3:57:B0:C2:20
X509v3 Authority Key Identifier:
keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/0tFeszzClTVrKtw1QNGR81ewwiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.40.0/23
IPv6:
2a00:1fd0:ae00::/40
Signature Algorithm: sha256WithRSAEncryption
15:30:df:60:64:f8:f3:6b:2d:37:c5:da:ae:b9:fd:52:88:42:
2e:9e:08:db:2f:80:db:c7:2b:d1:0e:1c:27:a3:01:a8:78:7f:
b1:a2:6d:5f:87:be:9f:a8:40:0a:7b:90:04:a2:db:5b:f1:17:
05:b5:63:96:8e:49:14:1f:b6:1b:47:0f:9a:a5:63:18:f9:d1:
81:73:00:99:e1:be:13:ee:71:4b:bd:86:f7:52:89:4b:c7:d2:
07:f9:69:3d:11:a6:ff:d7:8b:48:99:62:c9:91:00:a0:86:36:
db:51:2d:64:08:c2:82:2d:16:14:85:c1:f2:2d:bf:3a:23:2e:
8d:ca:af:ee:7d:be:c4:ea:dc:3b:fe:97:db:2a:40:ec:45:fd:
97:ef:25:96:f8:f1:f8:ad:aa:2a:39:07:d9:70:1a:4f:a7:32:
78:e2:40:7e:41:e4:96:c4:f0:9d:64:60:58:e4:80:e8:30:90:
7b:99:77:84:ee:7f:74:83:b7:7a:e6:de:a9:64:fe:b6:88:05:
25:35:95:5e:ca:eb:6c:51:1e:c1:81:9e:a7:5a:55:70:9d:ed:
0f:d4:28:00:0e:6d:26:97:79:1c:12:85:91:69:13:6c:ac:b4:
70:65:00:f2:71:05:d2:b2:42:97:18:ac:af:ba:6e:4b:f2:ec:
28:f1:c6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:25:13 2024 by rpki-client on console-ams.rpki-client.org