Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/T2E7LSe1kLKoo6noK9BcMMWL8fc.roa
File: T2E7LSe1kLKoo6noK9BcMMWL8fc.roa (raw, json)
Hash identifier: uvj72arw1j5Xe64XxmryzLPoVl+L43d8KT2DcorQDD4=
Subject key identifier: 4F:61:3B:2D:27:B5:90:B2:A8:A3:A9:E8:2B:D0:5C:30:C5:8B:F1:F7
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 0193002FEEB3818C40F239125D9E85A50E3B
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/T2E7LSe1kLKoo6noK9BcMMWL8fc.roa
Signing time: Wed 06 Nov 2024 06:36:01 +0000
ROA not before: Wed 06 Nov 2024 06:36:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56449
IP address blocks: 81.15.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:2f:ee:b3:81:8c:40:f2:39:12:5d:9e:85:a5:0e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Nov 6 06:36:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f613b2d27b590b2a8a3a9e82bd05c30c58bf1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:cf:58:9d:f6:31:69:10:2d:70:eb:2e:d7:
bc:96:9d:a9:98:19:bb:07:f2:5d:56:89:98:6a:46:
7d:f3:28:db:d1:11:a4:2a:ac:bc:25:0c:d6:7e:1a:
c1:c8:e1:7c:14:b9:25:9e:1e:3a:f8:ad:3a:ee:94:
6d:af:5f:32:0c:e1:88:d8:2a:4a:d3:dd:58:2c:7a:
de:45:ad:e3:53:3a:a1:22:c4:03:a9:82:36:91:22:
4f:f5:63:06:ef:86:36:c6:70:37:f2:b4:14:4e:2f:
37:de:e8:00:74:f2:e9:38:7a:8e:3f:82:66:81:d4:
ca:14:eb:51:16:7e:a1:cd:f9:a6:45:f1:92:a9:8f:
d1:d0:47:6a:94:80:cc:df:67:c1:c8:71:05:9f:1d:
55:c1:35:49:44:3a:69:c0:30:d0:e6:20:0c:c2:5f:
e1:d6:03:c5:f3:98:56:26:9b:8b:b9:39:ee:4c:4f:
0f:6f:6d:16:75:9f:6e:24:8e:86:fb:f3:ba:32:51:
c5:3b:01:0e:a2:ae:b8:d8:f6:de:40:97:7e:64:53:
ce:42:c1:a6:98:6c:9f:6c:ef:54:65:1d:96:fe:22:
25:a4:c2:7b:63:c6:29:19:7b:02:30:fc:3d:7f:15:
01:73:21:b7:4a:17:7b:12:fa:3c:c5:d2:61:e0:e8:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:61:3B:2D:27:B5:90:B2:A8:A3:A9:E8:2B:D0:5C:30:C5:8B:F1:F7
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/T2E7LSe1kLKoo6noK9BcMMWL8fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.138.0/23
Signature Algorithm: sha256WithRSAEncryption
03:65:45:d4:72:dc:73:c6:04:a1:c0:30:8f:1e:b3:c7:b8:bf:
a9:89:6d:d0:f7:4a:cd:ec:d1:11:73:e9:cb:ce:0d:20:59:1e:
2b:c7:a4:b5:79:d2:93:ee:cd:cc:35:23:98:cb:c9:92:81:fd:
8a:be:af:ba:01:52:05:ee:26:65:fc:ef:6b:a5:00:fc:58:ca:
e2:5e:53:c1:00:99:df:a4:50:a2:41:aa:31:53:ef:79:32:dc:
d8:08:37:07:ad:9e:55:11:8d:a2:6e:3f:f8:e3:70:96:f8:3d:
c4:3d:f6:34:6f:50:c8:fc:07:a7:5b:63:c5:2e:da:88:6e:6e:
fe:af:c4:c9:32:57:c2:97:9d:db:6c:f7:b4:98:ff:0f:5b:77:
f9:29:49:ea:23:d5:10:ed:64:3f:d3:78:8e:9d:e7:e9:71:74:
5c:f7:e9:81:b0:3b:43:ec:70:f2:83:5a:53:db:4f:07:98:08:
b6:37:58:1b:7a:8b:07:eb:2e:f6:29:81:bf:d0:86:61:1d:27:
f7:4a:3f:82:17:59:af:c8:f3:24:12:76:f1:a9:54:0b:a5:37:
8a:63:28:b0:fe:e1:38:02:19:46:7e:47:28:04:e5:b4:14:7d:
7b:19:58:d0:f5:1e:73:42:74:6b:71:62:c4:75:e5:a8:9a:9f:
d9:2d:76:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:27:22 2024 by rpki-client on console-ams.rpki-client.org