Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7U3-C3kK8C6gnnJaIWg0fmObvnk.roa
File: 7U3-C3kK8C6gnnJaIWg0fmObvnk.roa (raw, json)
Hash identifier: 15+wXXeGV6cjPvZm8x28Jo2OQxQw8RrEWu0OFoJ/H20=
Subject key identifier: ED:4D:FE:0B:79:0A:F0:2E:A0:9E:72:5A:21:68:34:7E:63:9B:BE:79
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018D85A0F8FDF3BB76A00D457D87B5F3BC41
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7U3-C3kK8C6gnnJaIWg0fmObvnk.roa
Signing time: Wed 07 Feb 2024 22:12:15 +0000
ROA not before: Wed 07 Feb 2024 22:12:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43807
IP address blocks: 81.181.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:85:a0:f8:fd:f3:bb:76:a0:0d:45:7d:87:b5:f3:bc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 7 22:12:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed4dfe0b790af02ea09e725a2168347e639bbe79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6a:d0:aa:49:00:46:4e:b5:be:0b:e6:78:74:
95:14:f7:a2:f3:c9:54:7d:66:7d:a2:28:fa:91:b1:
3e:90:d9:28:8f:dd:ce:59:39:ac:02:5d:5b:35:cc:
92:9b:4d:c2:cd:73:ed:5a:84:46:ef:65:79:0c:c8:
c0:c1:9e:28:c5:26:ee:58:47:20:25:a4:f3:f4:e8:
98:0b:67:dc:b6:94:63:d0:6c:b3:32:00:b8:29:bd:
34:bc:cb:15:c5:75:01:09:ea:ce:d4:e7:3c:c5:dd:
8d:ce:e7:aa:f0:bf:14:e3:44:1a:42:de:9e:08:8d:
f8:d8:2c:54:b0:fc:6c:f6:75:ec:97:ba:50:ad:68:
8d:84:6a:e2:be:ed:74:8e:14:ce:a4:24:7c:08:1c:
c4:ab:cf:92:e6:b4:50:73:0c:81:1c:ca:8c:21:4f:
5f:f1:f9:1f:b9:49:0c:32:6d:30:e1:27:6e:08:12:
82:15:38:2f:54:3a:c0:26:0e:81:85:0c:2c:d1:ee:
9d:1a:b5:b5:c0:7a:0a:c6:f1:42:8c:30:0f:cf:01:
83:0a:85:71:23:ce:cb:a6:e6:72:7e:cd:5b:f4:9b:
3c:31:2b:18:e7:66:f7:31:c9:98:8f:15:d6:75:81:
ab:9e:56:57:56:34:64:a1:18:88:4c:7c:73:cd:0c:
51:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4D:FE:0B:79:0A:F0:2E:A0:9E:72:5A:21:68:34:7E:63:9B:BE:79
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7U3-C3kK8C6gnnJaIWg0fmObvnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.240.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a8:a6:d1:35:67:cf:09:9f:47:f7:dd:a0:a7:4a:ce:43:67:
09:c6:5b:6c:63:ba:2d:64:12:ad:16:1e:bf:62:ab:6d:09:50:
7f:74:cd:b9:9f:0a:7b:76:51:ad:58:73:26:47:1d:ca:42:26:
68:4a:65:0b:b7:b0:52:fa:ec:e2:19:d3:34:20:42:37:26:d6:
d8:e7:83:79:87:30:95:49:be:a5:4c:eb:f0:4e:e5:49:02:22:
cd:1c:cd:1b:81:0b:c8:a2:15:0f:cc:2c:ca:b2:61:26:0a:f7:
5b:49:63:70:58:d9:2a:dd:bb:67:d4:ac:bc:de:ba:12:fa:a8:
4d:b3:b5:14:16:37:58:1d:2f:d7:b9:94:84:1a:8c:85:4e:d8:
20:8c:1c:c6:ad:06:18:b3:1a:9f:7e:b2:d8:10:de:bd:70:ce:
3d:a2:ae:3e:cd:ed:d7:02:83:a2:b3:22:df:ec:d4:6e:4a:e4:
e2:47:39:de:dc:4d:1a:7d:55:f0:05:16:40:1e:61:20:bd:80:
3f:03:f9:bc:b3:21:a9:e1:76:fd:98:d8:17:80:7a:82:ce:36:
92:40:f1:ed:f0:15:98:9c:96:1c:f8:78:f1:89:56:fe:f2:30:
e0:b8:35:eb:01:71:37:d1:fd:3f:bb:81:10:f8:65:aa:2b:c5:
3d:a8:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 07:11:55 2024 by rpki-client on console-ams.rpki-client.org