Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1RZL6Mz8BPIMdRVUxsnkImJg4RM.roa
File: 1RZL6Mz8BPIMdRVUxsnkImJg4RM.roa (raw, json)
Hash identifier: YdksGAFu1C7YMwSTBy7fkWR1pM71nNmbQx8czmdjyVQ=
Subject key identifier: D5:16:4B:E8:CC:FC:04:F2:0C:75:15:54:C6:C9:E4:22:62:60:E1:13
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B79EA757C91C02ECDE791013A5C480
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1RZL6Mz8BPIMdRVUxsnkImJg4RM.roa
Signing time: Mon 01 Jan 2024 20:29:31 +0000
ROA not before: Mon 01 Jan 2024 20:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31898
IP address blocks: 81.21.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:9e:a7:57:c9:1c:02:ec:de:79:10:13:a5:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5164be8ccfc04f20c751554c6c9e4226260e113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:69:17:c2:b1:ae:7d:09:7e:9b:60:83:21:
e6:69:c3:5b:75:ee:ae:bc:62:78:ac:1e:21:17:c7:
0d:9e:ca:f0:f7:f6:5b:3b:b3:2e:35:b7:33:1b:8d:
e8:5c:97:cf:6f:b5:0a:05:af:2a:2f:c4:4d:bb:de:
ea:42:33:d2:d8:da:c6:32:d5:50:36:19:13:7b:6b:
2f:74:30:7c:a7:8a:ca:d0:15:88:12:45:dc:b0:90:
f8:b1:46:0d:18:a6:5d:87:41:0b:15:db:e5:5f:fa:
0c:0d:8f:43:8b:90:78:cd:33:cb:fa:9d:6f:fa:73:
95:91:5a:cc:6b:4c:5f:e1:e6:f8:4f:c2:99:20:4c:
b6:a9:33:f6:2c:7f:8b:6b:6a:c1:3f:a5:0f:fc:45:
10:ea:39:be:0d:60:cf:df:a9:e5:de:5c:90:de:c9:
6b:f9:87:85:d3:f8:5c:91:db:98:93:16:be:85:26:
ca:b1:dc:cf:0a:87:3a:74:02:43:d9:2b:6c:cb:7d:
42:d2:6a:4c:3b:ee:26:bd:ba:21:2a:fd:e8:07:69:
32:c7:92:ed:2a:4f:16:48:fb:98:e9:12:d4:a7:2f:
21:0b:3e:96:6d:41:4b:19:e2:79:19:dd:9b:7c:f0:
aa:80:36:74:ba:19:d3:71:77:8c:7f:a7:c1:a5:48:
f3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:16:4B:E8:CC:FC:04:F2:0C:75:15:54:C6:C9:E4:22:62:60:E1:13
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1RZL6Mz8BPIMdRVUxsnkImJg4RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.13.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:a4:5a:81:a8:2b:3d:a1:b1:dc:5e:b9:78:4b:f5:3e:79:28:
d5:f9:a8:9b:74:ca:bd:5a:7d:84:25:d7:ea:85:6d:d7:05:3e:
a3:25:7e:a5:18:f2:b5:d9:2c:48:43:2e:f0:6d:bc:6d:e6:69:
58:0d:f4:2d:32:63:63:ea:89:61:2a:c8:1b:75:a4:e1:13:d4:
84:42:ad:95:7c:e9:56:4a:51:dc:6a:e0:30:ba:fe:fe:24:4e:
56:66:f6:5b:2b:e2:bb:4d:02:ce:65:e4:a3:22:57:b3:44:fa:
49:76:0d:b7:f9:dc:13:2f:a2:83:97:cb:12:03:e7:ec:d0:28:
8e:e1:57:22:78:78:1f:e2:5e:8f:e2:ec:f9:c8:8a:83:fc:76:
bf:bf:05:61:f2:34:8b:78:9b:c9:b3:02:3b:d0:20:8e:5c:e9:
03:38:ef:92:3f:d3:a9:76:a9:07:34:c0:62:87:75:15:88:cd:
6f:07:d0:2a:bc:ea:11:24:71:7c:56:ad:7f:ea:f8:d7:b1:1e:
60:11:c4:12:ec:7b:ae:7c:56:bd:ac:5d:b1:f9:15:16:80:a9:
27:48:b4:47:d2:cb:b2:7a:eb:cc:80:41:2c:84:76:5a:c7:86:
ec:53:91:e5:c2:b1:a3:eb:35:2c:78:c1:02:2d:27:aa:94:52:
1a:18:9e:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt56nV8kcAuzeeRATpcSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwMTAxMjAyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTE2NGJlOGNjZmMwNGYyMGM3NTE1NTRjNmM5ZTQyMjYyNjBlMTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW9pF8Kxrn0JfptggyHmacNbde6u
vGJ4rB4hF8cNnsrw9/ZbO7MuNbczG43oXJfPb7UKBa8qL8RNu97qQjPS2NrGMtVQ
NhkTe2svdDB8p4rK0BWIEkXcsJD4sUYNGKZdh0ELFdvlX/oMDY9Di5B4zTPL+p1v
+nOVkVrMa0xf4eb4T8KZIEy2qTP2LH+La2rBP6UP/EUQ6jm+DWDP36nl3lyQ3slr
+YeF0/hckduYkxa+hSbKsdzPCoc6dAJD2Stsy31C0mpMO+4mvbohKv3oB2kyx5Lt
Kk8WSPuY6RLUpy8hCz6WbUFLGeJ5Gd2bfPCqgDZ0uhnTcXeMf6fBpUjz5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNUWS+jM/ATyDHUVVMbJ5CJiYOETMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvMVJaTDZNejhCUElNZFJWVXhzbmtJbUpnNFJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURUNMA0G
CSqGSIb3DQEBCwUAA4IBAQCqpFqBqCs9obHcXrl4S/U+eSjV+aibdMq9Wn2EJdfq
hW3XBT6jJX6lGPK12SxIQy7wbbxt5mlYDfQtMmNj6olhKsgbdaThE9SEQq2VfOlW
SlHcauAwuv7+JE5WZvZbK+K7TQLOZeSjIlezRPpJdg23+dwTL6KDl8sSA+fs0CiO
4VcieHgf4l6P4uz5yIqD/Ha/vwVh8jSLeJvJswI70CCOXOkDOO+SP9OpdqkHNMBi
h3UViM1vB9AqvOoRJHF8Vq1/6vjXsR5gEcQS7HuufFa9rF2x+RUWgKknSLRH0suy
euvMgEEshHZax4bsU5HlwrGj6zUseMECLSeqlFIaGJ4o
-----END CERTIFICATE-----
Generated at Thu May 2 10:41:40 2024 by rpki-client on console-ams.rpki-client.org