Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/e4AB4BjFFS7oHZDMV-qbuUbN3MU.roa
File: e4AB4BjFFS7oHZDMV-qbuUbN3MU.roa (raw, json)
Hash identifier: hbekrmF5P8Gw8TrXus1WoUhIoo/Bx5ru7k3yjoWgGUg=
Subject key identifier: 7B:80:01:E0:18:C5:15:2E:E8:1D:90:CC:57:EA:9B:B9:46:CD:DC:C5
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AFCE3B92E9B361CBA8D508E773C46
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/e4AB4BjFFS7oHZDMV-qbuUbN3MU.roa
Signing time: Mon 01 Jan 2024 18:30:52 +0000
ROA not before: Mon 01 Jan 2024 18:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216281
IP address blocks: 81.180.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:fc:e3:b9:2e:9b:36:1c:ba:8d:50:8e:77:3c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b8001e018c5152ee81d90cc57ea9bb946cddcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3f:56:67:b7:74:b9:b5:d5:ab:ea:43:26:ae:
bd:57:18:e4:f4:87:3c:1c:7c:c7:86:c4:e2:fc:46:
13:bd:5e:7f:a6:d4:ef:c1:4c:b1:9f:6d:fe:c0:c5:
91:09:94:7d:57:fe:5c:d4:ee:d0:3a:74:91:71:7f:
18:56:0a:e6:9a:c5:de:34:fe:db:ff:28:44:78:12:
8a:51:c7:47:50:6a:59:5a:14:47:2b:7b:9c:5b:83:
f5:48:9b:f0:c4:a2:55:32:21:0f:03:af:7f:d9:de:
61:04:33:4c:fd:86:09:8a:41:a0:23:4b:9a:c7:bd:
41:3b:f8:63:1e:c0:be:8a:8e:c7:6d:41:66:ae:77:
72:59:4a:b3:ba:75:76:cd:df:cd:08:be:e4:fc:65:
87:46:2c:b8:94:89:ee:5f:b0:bb:3b:f0:f7:d3:8d:
75:8d:57:85:ea:dc:2c:f7:4f:2c:a3:66:7c:5e:9e:
23:59:20:82:84:6d:06:65:2c:69:bf:5f:ee:16:f2:
1e:31:7a:b1:06:f3:45:e7:34:62:47:00:a4:e3:0f:
8d:a1:ac:55:4e:6d:3b:a1:40:30:71:b8:4b:b7:07:
ae:b5:86:11:85:ba:12:de:c6:c0:05:ef:f2:49:a2:
ba:14:ac:fc:de:dc:5b:ef:8e:4b:0b:80:0f:72:b0:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:80:01:E0:18:C5:15:2E:E8:1D:90:CC:57:EA:9B:B9:46:CD:DC:C5
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/e4AB4BjFFS7oHZDMV-qbuUbN3MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:19:c5:41:09:5e:40:14:56:8b:c4:35:cc:bb:73:e7:9e:ca:
2a:c5:62:ef:63:69:18:88:4d:7f:36:2e:80:3d:f7:79:17:00:
b9:38:4a:35:2a:ef:d0:33:8d:67:f4:75:be:5a:e8:5c:c5:09:
82:2b:a9:8d:9b:98:c2:34:b1:5d:68:01:93:44:3a:fc:bc:ce:
e6:27:4d:85:b1:2b:81:db:c7:48:2d:ca:17:a6:da:19:0b:c5:
86:74:a0:c1:f6:b6:4c:0c:9d:af:da:32:32:ab:2e:75:0e:97:
b8:fe:a4:94:4f:ea:f8:80:6f:c3:9e:24:a4:88:dc:6b:db:26:
42:e5:e5:e5:0e:85:0c:1c:75:4e:a9:13:9c:59:8b:70:b0:91:
81:49:b0:b7:32:22:0e:2c:0c:97:7c:2c:4a:5e:79:d9:3f:d1:
a9:d8:1d:85:bd:24:66:da:c3:00:b6:65:ea:a2:e0:0e:c5:4a:
8b:a9:4c:12:db:64:d4:02:2f:87:87:65:40:bd:ba:af:8d:1e:
ad:65:6d:b1:d7:25:b9:4a:8d:75:9b:f2:b2:41:39:3c:b2:3d:
51:49:35:72:3f:88:e4:ea:e2:5e:d0:25:06:8e:c4:11:1e:b9:
41:4d:6c:b6:e9:0b:9d:0c:32:17:97:17:bd:cf:3f:46:b6:2b:
bd:d8:a2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:32:13 2024 by rpki-client on console-ams.rpki-client.org