Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/_SRd9-jnhzoZhmioLNmTQnooO10.roa
File: _SRd9-jnhzoZhmioLNmTQnooO10.roa (raw, json)
Hash identifier: EYM3jpvUqrqdHraSGULYWyF3fiwTNPdZMhniKdxAMgU=
Subject key identifier: FD:24:5D:F7:E8:E7:87:3A:19:86:68:A8:2C:D9:93:42:7A:28:3B:5D
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 0191E2DA63E3EEC04459257210C691B2A75A
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/_SRd9-jnhzoZhmioLNmTQnooO10.roa
Signing time: Wed 11 Sep 2024 20:50:48 +0000
ROA not before: Wed 11 Sep 2024 20:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41268
IP address blocks: 81.19.128.0/23 maxlen: 23
81.19.130.0/24 maxlen: 24
81.19.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e2:da:63:e3:ee:c0:44:59:25:72:10:c6:91:b2:a7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Sep 11 20:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd245df7e8e7873a198668a82cd993427a283b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:18:b7:8a:78:fb:28:a1:85:49:95:37:7c:
d3:aa:5f:dd:95:b8:f9:19:8a:b7:84:62:d6:1c:7b:
6d:44:c3:37:0d:df:4e:f8:91:0a:3f:af:c4:24:f0:
53:95:f0:e2:b3:50:92:4d:26:0e:e9:c7:a2:f7:0b:
88:9f:55:00:b1:55:c6:a1:2c:92:76:2c:11:13:81:
be:4e:7f:29:f2:e5:5c:a9:fb:e2:ba:36:89:1e:10:
56:cb:fd:1c:41:a6:62:39:0b:12:cb:e9:dc:f4:8e:
3a:fb:72:67:cb:3e:0c:e6:50:82:ce:cf:11:40:e5:
d4:42:0c:97:ef:e6:28:ec:d0:58:11:ba:e6:95:86:
3d:6e:6b:9f:3b:c5:c1:06:be:51:be:f7:ad:a8:da:
a3:4f:e7:83:ed:59:24:2d:7f:15:f1:2c:46:73:06:
60:4c:a8:32:57:7f:a8:53:26:76:ec:64:05:1a:37:
a3:88:80:ea:82:58:af:65:8c:88:9e:7c:49:8b:6a:
19:78:8a:ee:7b:99:61:db:5b:4a:c2:1a:6a:e5:9e:
da:8f:dc:67:c2:d0:8f:17:67:72:af:8d:ef:75:a3:
33:fb:37:2c:22:36:ed:ef:f7:4b:5c:04:fc:6e:50:
99:27:22:d7:83:1d:03:44:61:bc:b0:19:91:b3:69:
69:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:24:5D:F7:E8:E7:87:3A:19:86:68:A8:2C:D9:93:42:7A:28:3B:5D
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/_SRd9-jnhzoZhmioLNmTQnooO10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.128.0-81.19.130.255
81.19.142.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:2e:01:9d:7f:ac:25:e1:4a:02:e8:fc:e5:59:fb:36:96:ed:
c6:39:2b:a5:e9:6d:80:b4:11:e4:51:a5:83:fe:4e:e7:00:4f:
88:e9:b0:1d:06:0f:97:87:34:e6:84:7c:9d:b8:ee:55:22:3f:
9a:d9:85:b6:5c:df:fb:03:8c:a0:07:e2:8b:a3:99:c3:b9:dd:
0b:1a:56:e1:98:5f:82:ae:66:19:bb:53:56:e6:44:c0:a0:1b:
03:5c:cb:15:18:79:8a:5d:b3:5e:cf:54:00:78:b4:15:4c:43:
53:0a:bd:0b:d2:9b:71:14:62:05:a8:0b:07:d2:38:65:33:82:
b6:15:0a:ea:bb:f6:7d:4b:b6:24:4b:19:9e:27:33:ce:e0:16:
f5:fc:9b:95:b5:3b:dd:1c:58:98:02:c2:e2:3a:b2:1f:09:4d:
c7:cb:c4:e2:ee:2b:ad:90:65:28:51:ce:1f:82:5b:79:35:2c:
7c:2c:ec:1b:d5:cc:22:60:75:c1:c7:a3:a8:db:58:05:73:1f:
82:cc:b1:fd:24:31:ef:7a:9a:c2:50:31:0a:53:57:48:db:a2:
65:a6:5a:9f:90:6d:2b:1c:fc:30:03:cf:71:2b:7c:ef:f9:89:
31:97:cb:a6:0d:ca:03:6b:42:11:a9:e5:2a:f7:32:59:c1:9b:
6d:46:6b:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:44:57 2024 by rpki-client on console-ams.rpki-client.org