Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/N81-PLZ7CZrD8E5tgzqH0n1Dn-4.roa
File: N81-PLZ7CZrD8E5tgzqH0n1Dn-4.roa (raw, json)
Hash identifier: ItbxJdHs3VaYqgsETmzM3RYt5jZs1GSREr8rp+vXqdE=
Subject key identifier: 37:CD:7E:3C:B6:7B:09:9A:C3:F0:4E:6D:83:3A:87:D2:7D:43:9F:EE
Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial: 018ED0A8CC128C6C63CA426668B1171DDD90
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/N81-PLZ7CZrD8E5tgzqH0n1Dn-4.roa
Signing time: Fri 12 Apr 2024 04:55:06 +0000
ROA not before: Fri 12 Apr 2024 04:55:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 178.248.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d0:a8:cc:12:8c:6c:63:ca:42:66:68:b1:17:1d:dd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Validity
Not Before: Apr 12 04:55:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37cd7e3cb67b099ac3f04e6d833a87d27d439fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:fb:32:9a:c9:cd:5f:e5:eb:bf:55:91:fc:
a6:1b:2d:40:2e:4d:d7:9f:98:5c:13:ff:a9:02:49:
a0:b8:56:7d:49:9c:74:0c:0d:c0:ae:23:eb:da:e5:
f9:9c:88:b5:3b:f3:6a:c4:f9:5b:4b:bd:e1:7c:54:
3e:7c:98:ef:5b:5f:04:43:b7:5f:27:c9:16:64:6c:
8c:3a:a5:63:a6:01:18:86:9f:a9:47:20:a5:6d:62:
8f:d9:f6:dc:9e:ac:34:7b:b8:50:2b:0e:f0:19:b9:
67:5f:d0:6f:04:c2:36:46:3e:dd:bf:8f:61:c2:89:
80:e2:d9:40:1a:57:bf:27:0e:13:28:2d:f3:8e:6d:
06:46:b2:b2:4f:45:71:c8:a2:52:96:0e:df:3d:64:
68:df:79:f5:da:b6:52:20:e9:1c:e0:85:71:de:7e:
52:3c:6b:94:84:d2:84:a5:a0:73:f8:48:d9:9b:c6:
c1:c1:90:93:1b:3a:b5:c7:99:11:88:4e:af:2e:38:
6d:13:e5:e3:c8:1d:b0:cb:e9:fb:5a:1a:32:d6:c3:
bb:4b:b9:2c:fc:0a:d8:ea:b8:ae:3a:4f:b1:91:a7:
76:eb:fe:5d:80:2a:78:5a:81:87:ba:9d:32:ea:83:
bd:a8:01:31:be:55:10:1d:19:2b:80:ec:4c:41:4f:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CD:7E:3C:B6:7B:09:9A:C3:F0:4E:6D:83:3A:87:D2:7D:43:9F:EE
X509v3 Authority Key Identifier:
keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/N81-PLZ7CZrD8E5tgzqH0n1Dn-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.79.0/24
Signature Algorithm: sha256WithRSAEncryption
98:31:f8:ca:9a:2d:b3:96:af:ee:a9:a2:12:32:80:f2:76:d8:
78:7a:b8:86:f1:33:74:61:46:06:e2:d4:73:69:66:67:df:76:
93:29:f7:2d:28:19:5f:ee:84:1a:3a:68:d2:94:94:9b:96:42:
56:f3:81:d4:0c:0a:e7:52:90:0d:d1:48:31:f6:53:b6:4c:c7:
18:fe:66:ff:15:96:42:2e:5a:70:e1:90:b3:5f:dd:cb:b8:f8:
d1:b4:e4:56:17:1f:db:49:f0:e7:02:20:3e:a2:f6:59:83:d2:
23:f2:1e:f8:44:b5:d2:58:24:15:ff:8e:af:d8:2f:56:fd:45:
90:97:2b:69:42:98:9a:a9:5c:c8:ac:02:e3:d5:7a:b2:ab:16:
ea:0b:0b:8d:e1:3a:11:7a:19:46:4c:68:31:e0:1c:a9:7d:50:
69:a2:2b:a9:a6:d7:d9:7a:93:50:20:4b:21:a4:93:fa:07:56:
a4:31:da:15:72:09:e8:0b:76:4c:33:a7:13:1a:6b:ae:87:f1:
80:5e:67:0a:bd:ec:9b:ce:4b:db:5b:09:a1:32:23:ef:ee:fd:
03:c5:98:81:44:73:e3:eb:89:de:cb:6b:71:8f:bb:ea:8f:bb:
bd:ab:98:b2:39:8f:43:45:16:1e:f9:6d:73:fb:dd:07:88:b4:
a8:31:fa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:05:36 2024 by rpki-client on console-fra.rpki-client.org