Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1UuH-YmHxee4Zdc2l3IFy6bZGyA.roa
File: 1UuH-YmHxee4Zdc2l3IFy6bZGyA.roa (raw, json)
Hash identifier: KNIdFnwytmLK5suf304Rt/g8sWB93+74sVawD1uCArI=
Subject key identifier: D5:4B:87:F9:89:87:C5:E7:B8:65:D7:36:97:72:05:CB:A6:D9:1B:20
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018F772CF536122489711B869D76B3DEE51A
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1UuH-YmHxee4Zdc2l3IFy6bZGyA.roa
Signing time: Tue 14 May 2024 12:56:26 +0000
ROA not before: Tue 14 May 2024 12:56:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211975
IP address blocks: 81.21.5.0/24 maxlen: 24
81.21.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:77:2c:f5:36:12:24:89:71:1b:86:9d:76:b3:de:e5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: May 14 12:56:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d54b87f98987c5e7b865d736977205cba6d91b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:27:ae:8e:a3:6b:8a:bb:4d:e8:7d:32:00:fe:
da:ab:17:61:7c:bc:ab:4c:1d:b8:50:d6:c7:86:f7:
e1:00:d6:2d:26:81:a6:da:f5:77:b4:7d:f6:8d:e6:
a1:cb:06:05:36:65:c0:01:0b:39:a0:ca:b5:4b:2c:
90:d2:a1:c1:da:3d:15:6f:eb:a1:0c:af:44:1e:51:
9f:8e:37:98:c7:11:a6:0f:ad:67:ba:f6:92:1b:84:
3a:b3:90:0f:a8:2f:a0:c2:db:d8:46:62:c2:e1:70:
7c:48:04:20:91:29:64:dd:0d:d4:e8:e5:f3:06:22:
e1:a5:cc:f2:53:e5:57:02:4b:76:74:9b:55:6c:16:
bd:6c:6e:35:c4:15:19:fe:bc:b5:00:cf:2c:a0:4c:
4d:e7:73:6e:65:87:50:ff:19:96:0b:e1:cd:bf:17:
8f:b0:b1:f5:60:9a:eb:a3:06:14:b5:db:0b:9f:c4:
86:57:f0:ea:52:e2:97:3a:15:a4:07:92:9b:7b:01:
80:51:19:30:ff:06:63:a2:8c:53:c6:4f:cd:9d:c0:
00:91:e5:6a:21:da:cb:0b:d0:a2:18:c8:60:82:a0:
fb:cc:30:ca:fc:d1:85:bc:fd:e8:5d:5f:20:6b:09:
8a:e9:1e:b0:37:30:3e:63:65:f7:f8:38:bf:a9:e1:
2c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4B:87:F9:89:87:C5:E7:B8:65:D7:36:97:72:05:CB:A6:D9:1B:20
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1UuH-YmHxee4Zdc2l3IFy6bZGyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.5.0-81.21.6.255
Signature Algorithm: sha256WithRSAEncryption
5e:a2:f6:1d:fb:9a:f5:30:cc:99:f3:af:a7:88:c0:2e:5c:93:
41:0c:0f:62:de:bb:b1:cd:63:ae:43:65:28:f0:ff:44:0b:00:
1a:3f:ac:f2:0c:4a:51:af:e7:76:0b:ac:75:b2:95:28:ff:72:
22:97:14:5a:c5:6f:42:98:01:7e:3e:98:ec:21:e7:92:e4:3d:
4b:17:89:9b:b8:00:e2:8c:23:7e:96:7c:ab:c0:11:a2:4b:e6:
95:12:64:d7:39:5f:97:d7:62:59:11:10:42:ac:16:96:eb:fc:
d9:3d:73:df:ac:65:da:1f:d2:a0:66:83:1a:24:7f:3b:c4:ac:
4f:6c:cc:0b:11:31:40:71:38:fc:8f:ff:2b:4e:80:fc:0d:b2:
22:28:a5:9e:27:de:fd:b3:92:4f:67:59:00:ed:f0:35:ac:5a:
fd:ea:62:73:08:2c:63:f0:3f:a1:ae:a5:1e:c8:e3:18:8b:62:
21:b5:90:17:d0:86:6f:f5:f4:09:c9:4f:02:93:46:03:3e:e3:
2a:0c:62:d8:72:99:d0:41:20:58:46:95:5e:cb:56:b2:ad:d6:
ba:b4:d6:95:e8:94:33:80:7c:12:c9:2d:11:4d:59:ec:06:71:
0b:35:03:ed:f8:e3:e4:bc:89:36:37:08:4e:9c:ca:34:f5:5c:
ee:e3:b2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:52:24 2024 by rpki-client on console-ams.rpki-client.org