Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4ERXUa3ElAPQ58Lr5tnbUeksHAw.roa
File: 4ERXUa3ElAPQ58Lr5tnbUeksHAw.roa (raw, json)
Hash identifier: rUeRqmGsTyWfSSuaHG0LxY7EKubwJnnG6qi1hWRtksQ=
Subject key identifier: E0:44:57:51:AD:C4:94:03:D0:E7:C2:EB:E6:D9:DB:51:E9:2C:1C:0C
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AE744185FF2E1336817BE901C8603
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4ERXUa3ElAPQ58Lr5tnbUeksHAw.roa
Signing time: Mon 01 Jan 2024 18:30:46 +0000
ROA not before: Mon 01 Jan 2024 18:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42790
IP address blocks: 81.181.131.0/24 maxlen: 24
193.231.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e7:44:18:5f:f2:e1:33:68:17:be:90:1c:86:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0445751adc49403d0e7c2ebe6d9db51e92c1c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d7:b2:8f:31:c5:0c:9b:10:55:57:57:62:12:
0f:e7:96:cd:51:ed:84:8e:0f:10:4a:fb:ac:34:55:
ca:0e:a3:df:aa:ea:20:fb:64:35:7b:eb:d4:19:dd:
32:99:4e:9d:b9:e7:2b:3d:d2:d6:c5:16:55:35:29:
57:69:a3:d5:5c:11:c5:e7:2b:b8:49:9e:1f:e7:eb:
3a:36:5f:24:a6:c1:df:9b:ae:7d:e2:d0:21:68:63:
2e:7d:bf:d5:8d:5c:32:0e:d9:7e:ef:04:71:9f:00:
ab:6a:30:39:98:ff:18:b5:98:39:8a:9b:22:34:ca:
86:3e:d7:e2:f6:e9:58:e9:b7:29:70:ef:ed:d9:b8:
4f:4b:56:64:1b:19:0b:10:6a:d4:64:a6:f8:95:ad:
8a:ee:be:43:b5:c2:1c:e6:56:0e:49:44:f5:28:c6:
e5:c9:d1:db:d4:c6:0c:b9:91:d3:78:b5:86:a2:da:
e6:f0:f7:4c:8f:89:9f:14:b8:cd:71:ec:43:b9:05:
a2:65:2e:2b:d3:4a:fb:b3:2c:e8:9b:79:fd:5a:f2:
ba:8c:2a:18:5a:aa:be:71:8e:26:27:15:44:c3:a0:
24:bf:b0:76:27:c2:c5:8c:0c:f3:fb:26:79:fb:11:
38:0f:cb:3f:e9:35:db:71:c1:98:b8:a1:98:25:aa:
28:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:44:57:51:AD:C4:94:03:D0:E7:C2:EB:E6:D9:DB:51:E9:2C:1C:0C
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4ERXUa3ElAPQ58Lr5tnbUeksHAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.131.0/24
193.231.197.0/24
Signature Algorithm: sha256WithRSAEncryption
60:34:10:75:82:0b:a9:81:02:46:57:f4:f2:d8:aa:be:c6:bc:
15:87:21:31:1b:f4:3e:ce:76:73:46:f9:5d:ac:f9:29:68:be:
12:9d:72:cf:f3:cc:70:9c:61:c6:f2:76:0c:35:26:0e:f3:d9:
83:16:e2:81:b1:40:28:62:bc:d1:48:72:c7:41:a3:92:32:16:
66:c1:04:68:79:97:64:79:6b:71:85:6b:db:e1:d6:2e:bf:79:
d7:e4:a4:da:55:8d:4a:32:b2:73:2a:73:f7:fa:c1:0f:db:2b:
f4:b9:27:1c:e9:ad:a3:d7:08:25:d2:8f:be:d7:f1:52:fd:7c:
d6:03:ff:7c:33:10:7f:da:98:7c:ef:c4:58:04:86:8b:04:ec:
3f:b2:aa:8a:e9:2b:c8:8a:b7:6e:eb:9b:8c:f2:72:4e:40:d4:
ff:a3:a4:38:75:00:f0:71:5b:9d:9b:fe:6b:70:ec:72:4c:59:
c5:70:9d:12:98:29:72:8f:23:36:1e:6d:98:03:e5:c8:9c:ee:
2a:c4:be:9b:c3:5f:c7:4a:0f:dc:b8:04:ad:01:4b:03:95:04:
e4:3f:87:0a:50:c3:cb:a8:45:df:ed:cd:50:1c:59:93:10:4c:
2a:d0:3d:bf:bb:2c:b7:53:77:6e:89:8c:a0:ab:74:68:91:1f:
e1:0f:6b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:32:13 2024 by rpki-client on console-ams.rpki-client.org