Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/G3pXMBf8V-WrRWqzYkBJVK57ZTo.roa
File: G3pXMBf8V-WrRWqzYkBJVK57ZTo.roa (raw, json)
Hash identifier: z9VNyEZ0WXjJFP73NvebdkN4lzB8t048ksteAP+6hMg=
Subject key identifier: 1B:7A:57:30:17:FC:57:E5:AB:45:6A:B3:62:40:49:54:AE:7B:65:3A
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 0191565692732565CE5487D9A292D089C428
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/G3pXMBf8V-WrRWqzYkBJVK57ZTo.roa
Signing time: Thu 15 Aug 2024 13:59:59 +0000
ROA not before: Thu 15 Aug 2024 13:59:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4134
IP address blocks: 81.173.16.0/24 maxlen: 24
81.173.17.0/24 maxlen: 24
81.173.18.0/24 maxlen: 24
81.173.19.0/24 maxlen: 24
81.173.20.0/24 maxlen: 24
81.173.21.0/24 maxlen: 24
81.173.22.0/24 maxlen: 24
81.173.23.0/24 maxlen: 24
81.173.24.0/24 maxlen: 24
81.173.28.0/24 maxlen: 24
2a04:f580:8010::/48 maxlen: 48
2a04:f580:8011::/48 maxlen: 48
2a04:f580:8030:100::/56 maxlen: 56
2a04:f580:8090::/48 maxlen: 48
2a04:f580:8210::/48 maxlen: 48
2a04:f580:8211::/48 maxlen: 48
2a04:f580:8290::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:56:92:73:25:65:ce:54:87:d9:a2:92:d0:89:c4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Aug 15 13:59:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b7a573017fc57e5ab456ab362404954ae7b653a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:17:e1:44:7b:c5:b4:38:58:a9:02:cb:58:
51:20:ff:58:c6:bd:ee:ff:ce:ea:51:38:1d:e8:cf:
55:9a:4b:8d:65:4b:dc:ae:e1:65:cc:6f:f2:22:41:
0e:cc:97:ae:b2:ce:b0:13:fa:5f:f2:81:bb:8e:2b:
6f:25:83:52:71:8d:95:e0:9e:74:09:94:bd:7e:7d:
db:4b:0d:58:4d:f5:36:f3:89:be:8b:05:97:a7:bd:
4f:7b:7e:e3:40:fc:6e:47:47:86:42:32:4c:d6:57:
36:b3:22:44:91:c7:21:96:0b:7a:ab:4b:20:89:1d:
6f:5c:5d:e4:77:63:75:e7:80:ec:29:5f:0d:6e:df:
fa:dd:f7:1f:f6:45:67:da:39:ae:98:cd:c8:e4:87:
31:ad:19:79:6d:6c:08:ad:1b:82:65:40:d0:29:4c:
4e:33:8a:5c:07:6d:20:f8:92:14:37:a8:0a:47:6d:
9a:d9:1f:64:28:19:ca:1a:b7:c2:06:a2:fc:8f:e2:
41:91:67:fa:1a:ad:78:35:a7:3e:03:be:98:0f:5f:
9a:36:4e:19:af:69:8c:5d:b0:ca:af:72:e6:90:2c:
93:4b:43:59:0a:08:5f:1a:7c:5d:0e:a6:eb:99:f9:
a8:56:6f:43:f5:64:81:48:c1:35:8b:52:fa:10:fd:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7A:57:30:17:FC:57:E5:AB:45:6A:B3:62:40:49:54:AE:7B:65:3A
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/G3pXMBf8V-WrRWqzYkBJVK57ZTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.173.16.0-81.173.24.255
81.173.28.0/24
IPv6:
2a04:f580:8010::/47
2a04:f580:8030:100::/56
2a04:f580:8090::/48
2a04:f580:8210::/47
2a04:f580:8290::/48
Signature Algorithm: sha256WithRSAEncryption
12:05:c9:a5:1b:54:cc:0a:d1:c5:07:78:73:84:8f:19:4a:ee:
a1:89:50:5e:e2:70:b7:76:50:51:b3:e5:0f:f4:72:23:3d:d1:
5d:0e:84:75:78:6b:6f:b5:74:89:1b:a3:d1:77:49:ef:bc:b7:
d6:af:d4:f0:a8:71:1d:aa:b4:13:31:84:4f:46:05:6a:68:43:
a5:20:6c:bd:ca:27:8f:45:02:ee:d9:9f:67:ad:53:32:46:a0:
14:78:b0:3f:57:e1:a0:3a:f8:fc:1c:9e:cc:13:ad:4d:d9:a3:
af:bc:1e:5b:1d:f2:a8:1d:61:93:3d:df:b7:05:6f:f6:d3:32:
51:f7:73:1d:8a:c0:2b:39:56:e6:26:02:38:27:d1:66:76:e9:
5e:8e:55:25:c8:a1:46:58:24:90:90:b3:70:3f:ab:20:ca:c2:
2f:82:72:c4:ec:ba:bd:bd:7a:2e:28:a3:57:46:91:64:83:dc:
10:da:5a:1c:a3:48:ac:14:4b:75:dd:31:f8:ad:01:ca:8b:bc:
79:44:5a:6a:89:3a:ad:34:98:12:b3:aa:f4:61:9f:ce:50:26:
f4:0e:2d:32:bb:59:be:3e:47:c4:97:99:83:5a:d1:60:83:58:
49:0b:85:59:09:14:de:f5:08:6a:1b:ce:a6:76:e9:18:78:2d:
65:da:ca:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:53 2024 by rpki-client on console-fra.rpki-client.org