Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h4b-GxRS3tSAymUea3TNNM67ckk.roa
File: h4b-GxRS3tSAymUea3TNNM67ckk.roa (raw, json)
Hash identifier: 8toTgiAyrWTFhbbps5nyos5D2lF/tYHODsyyP6CBaEM=
Subject key identifier: 87:86:FE:1B:14:52:DE:D4:80:CA:65:1E:6B:74:CD:34:CE:BB:72:49
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018DA799A9F2D6F7A43632F6AEBF7D00B988
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h4b-GxRS3tSAymUea3TNNM67ckk.roa
Signing time: Wed 14 Feb 2024 12:31:22 +0000
ROA not before: Wed 14 Feb 2024 12:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215578
IP address blocks: 81.181.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:99:a9:f2:d6:f7:a4:36:32:f6:ae:bf:7d:00:b9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 14 12:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8786fe1b1452ded480ca651e6b74cd34cebb7249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b3:71:04:fb:78:d0:26:1b:7e:49:9f:71:b6:
39:4c:33:c9:ce:95:cc:9d:02:89:c0:65:cc:45:0c:
fb:0d:0a:3b:7a:01:5f:18:b2:ee:e6:be:a1:67:46:
57:b5:78:23:aa:1f:43:c4:07:f5:3f:01:b6:cb:51:
43:4b:d9:4f:59:be:5e:ab:91:21:1f:c5:f4:e4:35:
d8:b2:2b:59:16:b9:06:2f:99:38:da:f6:3c:25:1a:
53:f9:c9:50:30:dd:77:3a:be:eb:2e:7a:ad:a3:a1:
67:69:1c:94:d3:64:cc:36:cc:3b:3a:74:fc:ca:4f:
4c:b7:2c:77:96:c4:58:33:55:f3:0d:6e:cd:ea:37:
11:a0:ba:8e:bb:95:ae:25:ff:cc:05:c7:cd:92:b8:
b5:cb:42:11:fa:28:82:9a:90:93:fb:04:08:1d:7a:
0d:b3:60:b6:ad:4c:63:55:ad:66:37:9c:23:0f:fe:
ac:61:ff:4a:ad:ea:fe:3f:eb:e6:bf:de:3e:7d:c5:
fe:9b:2f:ab:d7:fa:36:86:99:08:20:41:17:89:ac:
ca:f3:23:e2:f6:00:0f:58:e9:34:3a:2d:6e:7b:0b:
fd:ab:4e:60:f2:8f:23:d1:bf:b9:9e:98:1f:c9:89:
34:07:81:34:a4:86:fd:07:3f:e4:fd:a2:3c:16:d8:
91:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:86:FE:1B:14:52:DE:D4:80:CA:65:1E:6B:74:CD:34:CE:BB:72:49
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/h4b-GxRS3tSAymUea3TNNM67ckk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.86.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c9:38:fd:09:e3:10:56:73:23:c9:f3:24:d9:e4:3b:ab:ad:
fb:80:f1:b0:e8:cd:7f:dc:8a:c1:cd:75:90:cb:30:c9:24:3e:
7d:b2:ea:c5:38:00:25:75:e9:a4:a5:a0:c5:53:8a:20:04:13:
ac:8f:cf:7d:8a:06:26:87:e3:0f:e4:1a:f8:d8:34:7e:81:0d:
3a:b9:b7:08:84:8f:ca:e6:21:36:35:9e:66:92:a5:c5:83:3e:
0b:93:09:f2:81:2f:9f:9e:40:02:bb:fe:f8:1c:8f:18:ae:51:
a0:30:b1:0c:3a:ed:3e:76:45:7d:19:94:80:8b:cc:1c:70:6f:
70:e4:90:49:36:e2:84:e9:7a:ea:88:ac:85:d5:e2:c9:14:0f:
cb:5e:4e:61:55:32:e2:a7:b0:38:26:d6:0f:3a:0a:77:72:d1:
6b:0e:cc:27:23:b8:09:70:9d:ff:a7:32:c1:72:68:5a:3f:9d:
fd:21:b4:af:52:98:bc:72:17:98:09:b6:42:cf:77:75:c9:6d:
0c:b9:0e:dc:2d:1b:ac:4c:98:80:b9:62:9a:2d:92:01:34:b6:
be:9c:76:f8:1e:27:88:d7:df:49:b3:19:51:fd:fe:b7:0c:df:
fc:d7:4c:78:09:b3:e9:ce:bf:d9:11:a0:db:ff:13:1c:bb:36:
48:5f:56:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:18:35 2024 by rpki-client on console-ams.rpki-client.org