Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/6EJ6Is_Jff25_CqlDY5_bek5YlE.roa
File: 6EJ6Is_Jff25_CqlDY5_bek5YlE.roa (raw, json)
Hash identifier: Qov27Vg2XgcAcmzxQfPZUGEzG1+5mBQsGpIfJNgl0NM=
Subject key identifier: E8:42:7A:22:CF:C9:7D:FD:B9:FC:2A:A5:0D:8E:7F:6D:E9:39:62:51
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018D79A4205955B69D6182411F52B40F0523
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/6EJ6Is_Jff25_CqlDY5_bek5YlE.roa
Signing time: Mon 05 Feb 2024 14:20:15 +0000
ROA not before: Mon 05 Feb 2024 14:20:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56654
IP address blocks: 81.181.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:a4:20:59:55:b6:9d:61:82:41:1f:52:b4:0f:05:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 5 14:20:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8427a22cfc97dfdb9fc2aa50d8e7f6de9396251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:0e:42:c0:26:76:33:a7:01:c9:ef:88:cb:
bd:6c:a4:6c:1b:80:71:49:13:9b:1b:23:1e:2d:7c:
3d:10:84:30:a6:c0:0d:8b:5b:cf:35:66:95:7e:02:
2d:9d:5e:fc:2f:36:20:54:15:da:dd:f2:1b:2c:87:
e2:08:c4:75:ba:10:d6:70:ea:d9:f3:df:33:07:0e:
f8:45:e1:33:46:45:9e:18:70:02:6f:3a:92:b3:03:
85:b0:07:58:23:42:c1:92:e1:d2:38:5e:6a:51:e3:
ce:9c:56:7d:56:4f:e4:ab:dd:a5:76:a5:db:f2:af:
e1:8e:3c:4c:1b:15:09:67:ca:15:3e:82:ef:6f:ef:
83:1a:7a:1e:1f:18:3d:e9:52:36:89:84:3b:08:df:
7d:50:ce:99:1c:b2:cf:6b:9c:e1:44:1b:2e:01:dc:
d8:dc:29:16:4f:8a:a4:4d:7e:f2:b9:29:a4:53:32:
7e:04:f3:68:2d:8b:83:4c:1a:ca:91:19:7d:32:51:
c7:86:73:ec:eb:23:ee:80:2a:b0:f0:a6:67:52:53:
ae:64:82:ea:1b:60:f2:63:2c:ad:2e:94:49:34:fe:
56:f6:d0:56:78:2d:43:f1:96:bb:2e:8f:43:6f:60:
fb:47:7b:e7:65:ee:57:44:24:21:63:02:be:7e:ee:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:42:7A:22:CF:C9:7D:FD:B9:FC:2A:A5:0D:8E:7F:6D:E9:39:62:51
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/6EJ6Is_Jff25_CqlDY5_bek5YlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.250.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e7:49:7c:24:7e:41:cd:b8:dc:b3:2f:50:6c:30:6e:c6:d2:
a4:f2:8d:22:07:49:18:b0:86:05:1e:82:50:9a:b4:c3:67:17:
90:56:28:e8:68:73:57:30:69:cc:0f:82:ac:71:fb:58:67:dc:
1d:97:ed:b9:3e:7f:30:6f:4d:fd:d3:63:f9:fe:96:45:39:54:
de:81:84:bd:27:cc:8c:5c:bf:36:78:84:3a:f3:5f:29:28:2a:
6c:21:4e:7e:8f:d3:0b:b6:e3:4f:cb:f0:9c:5f:9a:20:10:ba:
e3:5e:26:7c:26:1f:27:48:ac:28:ff:15:7b:5d:6c:c3:b3:15:
31:41:d6:b3:cd:ba:71:b6:9f:99:c9:29:7e:d3:7d:79:c6:bd:
bd:e5:53:d5:cc:83:0f:f5:9d:a3:db:75:30:af:6e:a7:cc:cb:
90:75:b0:d8:6e:80:25:02:3e:d2:6d:77:65:6c:65:a9:7e:58:
53:6b:48:9f:df:05:46:32:2f:64:78:7b:16:3c:81:f9:95:6e:
5c:69:90:14:96:11:57:fc:1d:52:9a:57:13:18:26:11:68:47:
60:19:e8:3d:8d:4d:df:e6:91:54:4c:0f:13:51:5e:e6:13:bd:
d1:a9:1a:4c:89:38:a5:00:ff:6c:4d:dc:7a:0a:ae:99:e3:60:
8c:86:d6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:28:50 2024 by rpki-client on console-fra.rpki-client.org