Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pLKtVm6dF1MtADYeuQtyEJKfU6o.roa
File: pLKtVm6dF1MtADYeuQtyEJKfU6o.roa (raw, json)
Hash identifier: fmSgJOQExxLPtGzBtBF2mEXo3LnLhuAj7keikk8dr/M=
Subject key identifier: A4:B2:AD:56:6E:9D:17:53:2D:00:36:1E:B9:0B:72:10:92:9F:53:AA
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0190B9E29D368F45B971DEAD5CBFF8C28815
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pLKtVm6dF1MtADYeuQtyEJKfU6o.roa
Signing time: Tue 16 Jul 2024 04:52:34 +0000
ROA not before: Tue 16 Jul 2024 04:52:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56746
IP address blocks: 81.180.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b9:e2:9d:36:8f:45:b9:71:de:ad:5c:bf:f8:c2:88:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 16 04:52:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4b2ad566e9d17532d00361eb90b7210929f53aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a8:f7:2b:8e:e5:6f:f0:68:54:aa:fe:22:e8:
1f:31:84:5f:70:03:78:7f:64:e3:09:02:d6:67:a4:
a4:ca:02:44:15:8c:80:3e:f2:e9:b7:2f:7b:45:1e:
e0:c0:c8:2d:6b:3d:30:13:c8:d8:70:ae:2f:9c:48:
36:f7:57:aa:0e:22:18:a1:c5:04:f7:f1:91:e8:be:
f1:5d:7c:4b:9e:d7:b5:6e:4c:09:26:28:5e:26:8f:
69:d8:0b:d1:3a:da:45:18:46:eb:d1:bb:08:94:fd:
8e:ac:c5:d0:9f:f2:eb:c5:be:01:ad:c1:99:99:e6:
89:34:15:69:fd:ad:17:84:bf:4b:2c:ca:d8:86:8d:
aa:60:91:20:01:8a:40:93:4f:29:29:53:12:46:00:
7c:8f:3c:b2:ec:83:ef:da:eb:a0:94:9f:ef:58:1d:
e3:20:88:ee:b0:46:1c:07:63:83:d5:39:c3:49:20:
a2:47:39:38:6c:53:e6:df:36:54:c2:b1:88:da:f2:
3f:31:ce:0f:fa:a9:ff:d2:78:47:3a:97:54:7c:4c:
ae:a1:51:86:e6:fb:56:4d:2a:68:a1:a4:cd:7e:46:
6f:fc:66:ad:c7:97:c4:30:7e:01:95:29:0f:6e:af:
d5:73:53:31:db:1b:50:59:f9:8f:4e:ac:8a:f5:d6:
08:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B2:AD:56:6E:9D:17:53:2D:00:36:1E:B9:0B:72:10:92:9F:53:AA
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pLKtVm6dF1MtADYeuQtyEJKfU6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.232.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:bc:4d:43:79:af:a1:7e:e5:1b:39:b9:17:f1:1a:ea:1c:70:
fc:66:31:b1:0f:7e:f3:46:9f:e4:b8:b3:4b:d2:bb:8f:07:a5:
41:4e:c7:21:33:1c:9e:58:78:fd:a7:a0:84:b2:94:4d:e1:9c:
ee:48:46:6c:9e:b1:57:c8:f3:98:d3:55:12:58:d7:4e:9e:f3:
e2:a5:b5:a7:b9:cc:23:79:a3:a4:2d:59:30:5a:1a:4e:ac:cc:
1a:b3:22:f4:1a:9c:f6:9c:10:aa:58:de:64:1f:d0:14:9c:0c:
4f:d1:c2:cc:dc:81:1a:c4:71:87:3d:43:27:89:10:a5:a7:d0:
db:45:5f:96:38:36:2f:e3:6a:c3:95:2c:4c:f3:83:f1:31:ec:
2b:4d:44:85:72:3b:30:85:d7:e3:9b:c3:c5:1c:93:7c:80:e3:
6b:65:39:0d:3d:f9:36:a6:46:37:8e:f6:19:0a:c7:73:74:ef:
44:13:0c:14:22:91:26:09:8b:85:33:9b:5b:63:18:ed:7b:bd:
b8:78:03:ca:d4:3e:8f:c8:ab:36:f9:d6:1e:e4:6a:81:ca:05:
ea:5c:18:00:3b:ed:76:6a:d3:86:e9:3f:99:d7:20:a1:15:11:
db:b4:1c:c5:a7:e9:28:f0:ef:35:40:0b:d4:0a:80:1f:a6:02:
b4:11:64:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:18:35 2024 by rpki-client on console-ams.rpki-client.org