Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7IlmyDNgDno-bFZ1Ubsff3yMwX0.roa
File: 7IlmyDNgDno-bFZ1Ubsff3yMwX0.roa (raw, json)
Hash identifier: +1B2kkzsjiYcDMk0LG8fhQK+b1ErIoHrMLqnRrH74CE=
Subject key identifier: EC:89:66:C8:33:60:0E:7A:3E:6C:56:75:51:BB:1F:7F:7C:8C:C1:7D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019039E4CD8500C2E34FC08B3098097F9014
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7IlmyDNgDno-bFZ1Ubsff3yMwX0.roa
Signing time: Fri 21 Jun 2024 08:23:34 +0000
ROA not before: Fri 21 Jun 2024 08:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48881
IP address blocks: 81.181.166.0/24 maxlen: 24
217.156.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:e4:cd:85:00:c2:e3:4f:c0:8b:30:98:09:7f:90:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 21 08:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec8966c833600e7a3e6c567551bb1f7f7c8cc17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:fc:d3:f5:d2:ba:b5:bf:85:39:f1:1e:5d:
b0:d1:34:93:21:f5:b1:6f:f0:bc:a5:62:c2:3c:a8:
ab:2f:fe:5e:d9:40:aa:c1:34:dc:28:29:b0:5c:67:
4f:02:15:3d:c7:08:e9:9e:7c:85:f8:ab:f6:37:b7:
f1:eb:98:e2:6f:61:40:42:94:4c:4e:da:ca:2c:5c:
e8:eb:3f:81:69:f4:18:29:83:5a:65:6c:b3:05:25:
8c:75:78:12:90:47:70:66:71:b9:a3:7e:04:bc:60:
0d:2f:b3:39:7f:fd:60:ea:7f:f4:3c:72:28:df:97:
54:28:16:dc:91:15:0f:9f:9a:49:fc:1c:28:32:f2:
2a:7d:76:41:9a:16:cb:6e:ac:ad:0e:f7:9a:0d:ec:
57:93:97:a3:3f:0a:67:d8:db:7a:33:9e:66:df:7f:
74:ac:6d:d9:f5:59:ba:ef:79:c5:ec:21:d4:d3:29:
92:3b:93:2e:89:b7:d3:c1:de:bb:2f:ce:2c:79:21:
c0:ea:49:0e:6a:c7:f7:e2:23:f6:aa:b6:43:64:c2:
f9:3e:4e:e4:7e:d2:08:4b:4d:5d:7f:ac:18:89:45:
5f:a2:b5:87:0d:25:39:ed:45:6e:6d:17:4e:c1:b6:
47:18:43:0c:e4:aa:a1:5d:e4:f4:ee:23:d7:6c:6e:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:89:66:C8:33:60:0E:7A:3E:6C:56:75:51:BB:1F:7F:7C:8C:C1:7D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7IlmyDNgDno-bFZ1Ubsff3yMwX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.166.0/24
217.156.93.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:6a:1f:cb:9b:cf:0c:45:05:f0:ac:c0:ff:22:5d:b2:50:9f:
2f:ae:9d:42:36:34:18:07:58:aa:48:46:70:f9:b3:de:2d:a1:
e1:c7:e4:14:78:e2:ea:9a:de:a0:5b:b6:86:81:9b:d8:77:c8:
8d:98:a8:7a:c5:5c:d3:0b:e3:2e:13:89:b3:a5:6e:c7:68:d9:
d3:19:b2:07:04:17:01:cd:63:7a:01:89:ae:6b:bf:ae:44:4c:
d1:9f:9e:5d:5b:80:f6:9a:4b:a3:25:fc:8a:37:36:62:cb:1e:
e0:c3:e0:88:02:bc:9f:91:8e:b2:d4:6e:b3:30:05:4d:d9:86:
3a:cc:32:41:b0:de:19:ce:6e:12:93:4d:38:0a:ae:ab:cd:b1:
84:a4:ce:16:e2:73:d6:48:c3:ff:5e:7e:d7:20:de:0d:b0:0a:
ea:7f:59:46:2e:2e:09:55:de:1c:71:b6:fa:e8:fe:dc:ed:db:
42:3d:e3:42:bb:bd:59:30:eb:21:12:27:f3:43:81:0a:a7:b8:
79:25:54:ea:d7:f4:fb:81:34:ac:cd:9b:55:e6:3b:70:f7:4f:
0b:05:2a:d3:9b:03:54:ec:ac:88:79:2d:98:fa:47:19:05:9a:
08:01:1c:35:ff:62:56:4c:bc:d7:92:31:c5:74:6a:79:cb:0d:
94:fe:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:47:15 2024 by rpki-client on console-fra.rpki-client.org