Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mX_Hyw7kHsLa1y3iM1uV8M89JtM.roa
File: mX_Hyw7kHsLa1y3iM1uV8M89JtM.roa (raw, json)
Hash identifier: fUPIfa1Tywd95k5UY2ZwniHSw5gBGZi10hR8ZnubrSg=
Subject key identifier: 99:7F:C7:CB:0E:E4:1E:C2:DA:D7:2D:E2:33:5B:95:F0:CF:3D:26:D3
Certificate issuer: /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial: 018CC348FFBC3F48AF2E0C93DD0ED29FF7D6
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mX_Hyw7kHsLa1y3iM1uV8M89JtM.roa
Signing time: Mon 01 Jan 2024 04:29:50 +0000
ROA not before: Mon 01 Jan 2024 04:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7155
IP address blocks: 81.20.216.0/21 maxlen: 21
213.151.176.0/22 maxlen: 22
213.151.180.0/22 maxlen: 22
213.151.184.0/23 maxlen: 23
213.151.186.0/23 maxlen: 23
81.20.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ff:bc:3f:48:af:2e:0c:93:dd:0e:d2:9f:f7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Validity
Not Before: Jan 1 04:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=997fc7cb0ee41ec2dad72de2335b95f0cf3d26d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:89:86:0d:0d:a7:39:83:69:ea:ed:9e:b1:
d1:13:36:4d:b7:81:5b:0d:5d:15:93:14:44:84:7d:
c0:2f:92:b2:28:90:1e:c7:38:ad:f7:f2:85:cc:a2:
c4:e5:86:4b:31:33:b4:bb:f3:0f:87:3e:bc:63:ce:
bb:01:32:f2:3e:8a:38:c9:78:b7:01:7a:40:59:25:
fb:7d:17:c5:54:12:b0:5d:e1:d0:00:fc:c2:d7:79:
42:57:6e:74:bd:3e:d2:c8:1b:84:50:95:df:eb:d0:
94:7a:03:50:3d:c6:b5:c3:26:50:0d:0e:5a:e2:eb:
b9:7e:d6:1a:c4:3c:2c:92:12:38:af:ad:10:29:ba:
58:9b:5f:bc:61:29:99:51:91:9e:cd:90:51:85:e8:
fd:9a:db:d1:f1:a7:f9:47:25:06:95:ed:3c:13:20:
07:58:d4:d6:40:fd:9e:5c:7d:5b:c5:9e:0d:f6:62:
a2:8c:c5:f9:09:cd:6c:21:b7:f4:34:30:e4:53:b7:
6f:c5:46:f2:93:94:12:9a:96:a8:82:fa:e5:23:cc:
4c:f1:24:c2:2c:de:3f:11:30:5d:72:f8:c8:cb:99:
6d:c1:97:86:5f:e0:32:97:34:c6:5f:19:1e:1f:74:
4d:15:93:b3:29:4b:ac:85:df:00:40:8f:03:ae:d2:
e0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7F:C7:CB:0E:E4:1E:C2:DA:D7:2D:E2:33:5B:95:F0:CF:3D:26:D3
X509v3 Authority Key Identifier:
keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mX_Hyw7kHsLa1y3iM1uV8M89JtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.208.0/20
213.151.176.0-213.151.187.255
Signature Algorithm: sha256WithRSAEncryption
ce:4c:ce:10:f3:99:8f:e9:22:ec:47:a3:85:a4:74:22:1d:04:
32:8d:16:b0:c1:17:e2:2a:f4:30:e7:cb:57:0b:82:4c:fc:ab:
c4:ad:6d:f3:71:8a:0c:fb:15:10:b2:f1:6e:88:89:94:8c:47:
4f:0c:d1:12:dc:54:51:18:e4:45:5b:75:8d:23:29:5a:26:02:
c0:97:fd:d6:81:9f:8e:b9:73:8d:c9:32:71:00:20:82:b2:04:
2e:13:4e:56:a7:bf:3e:fa:bb:53:28:bd:86:75:cb:91:cb:d7:
17:db:dd:d5:22:4d:03:9d:5d:96:4e:a6:d0:34:b3:36:ff:5e:
5b:14:58:8a:6a:e5:54:48:13:f9:04:5f:71:7a:74:f2:ec:99:
09:19:9a:e0:81:57:47:47:d9:2d:e1:3c:54:58:0a:ac:11:a8:
d6:e0:55:e7:3a:93:fa:5f:e4:7f:72:86:8f:89:df:92:0b:fa:
cf:60:80:f2:7b:23:7a:08:fd:41:97:8e:84:05:27:34:d9:ab:
9c:39:55:20:53:07:0d:57:f9:07:b7:b6:1e:94:be:08:29:34:
96:70:4a:be:ef:d1:3d:ac:a8:c1:cf:ed:44:45:ea:cd:a9:d3:
86:04:81:9b:9a:eb:76:3a:d4:42:db:d8:de:25:88:c2:f3:e6:
1b:55:d1:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 13 13:30:29 2024 by rpki-client on console-fra.rpki-client.org