Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/X4ZNHDaNz87KUwY_BNgXvIR4Its.roa
File: X4ZNHDaNz87KUwY_BNgXvIR4Its.roa (raw, json)
Hash identifier: Mdlg2abCxyIG2Db4a+oAzDJyIgt6hoiJAzmA8K/Grwg=
Subject key identifier: 5F:86:4D:1C:36:8D:CF:CE:CA:53:06:3F:04:D8:17:BC:84:78:22:DB
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAE220D8D7FC9BD71F1D69A5CA2FBC
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/X4ZNHDaNz87KUwY_BNgXvIR4Its.roa
Signing time: Mon 01 Jan 2024 02:29:33 +0000
ROA not before: Mon 01 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205034
IP address blocks: 81.15.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e2:20:d8:d7:fc:9b:d7:1f:1d:69:a5:ca:2f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f864d1c368dcfceca53063f04d817bc847822db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:08:cd:97:37:5b:20:b1:c9:72:01:b2:10:6b:
7c:ee:ff:ca:a8:5e:73:f7:7f:76:d2:87:0c:02:c7:
f6:05:41:74:a8:0b:0a:b1:46:5a:3c:21:0b:fb:6b:
12:9f:ec:82:40:cf:fd:dc:10:a6:d6:72:eb:2f:9a:
bc:82:80:8b:80:d2:44:9a:07:47:2b:84:2c:38:cb:
58:5f:ef:e8:ca:71:bc:51:7a:d8:3b:fe:6d:a1:4f:
a5:18:2b:18:bf:bc:39:ab:82:e3:b4:53:17:5a:a2:
ac:6f:c8:20:59:d0:b0:05:4e:1e:da:41:78:ed:88:
27:da:63:ed:81:d8:2c:15:f7:42:f9:de:d2:c1:1c:
9a:1e:ce:60:52:22:a1:4d:9a:2a:db:3a:79:18:1a:
4a:e4:7a:38:e2:87:bf:b5:30:26:17:8a:1b:d7:ac:
f4:c9:cc:d1:05:e5:65:50:9e:ed:cf:22:3a:06:81:
28:00:cb:91:f6:36:aa:2e:95:57:c6:00:7f:6a:8d:
14:f3:bb:11:b1:57:df:c0:1b:60:77:35:1b:ba:3f:
f0:83:64:fd:7c:50:65:0e:cd:2e:d3:8c:c0:c7:40:
d8:73:06:48:05:08:91:23:ac:04:73:7f:7b:59:3e:
0a:e7:88:d8:d3:39:ea:72:61:dc:42:90:fb:cf:57:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:86:4D:1C:36:8D:CF:CE:CA:53:06:3F:04:D8:17:BC:84:78:22:DB
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/X4ZNHDaNz87KUwY_BNgXvIR4Its.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:6a:57:8c:c0:3c:73:0f:22:d5:d8:09:06:02:0b:11:ef:78:
8f:e1:6d:0b:eb:f2:ed:9c:9a:f1:29:32:dc:49:1b:6a:69:6b:
bb:30:9a:00:52:d7:be:0f:13:01:d8:41:27:9c:3f:ca:90:4b:
ae:2b:2c:7d:d7:93:13:c8:83:af:ff:28:b5:61:e4:5e:4c:dc:
a9:a4:1d:0e:5c:f9:f8:09:9d:24:ed:96:74:36:b9:1e:11:98:
e4:ab:79:b3:e2:13:99:fe:ef:27:22:ca:e9:d3:a5:03:1d:a3:
81:3b:21:fc:a4:dc:d1:37:f8:0b:13:07:c3:ad:26:cd:dd:f1:
12:bf:fd:2f:33:b9:6c:7f:db:ff:37:56:a4:74:51:2a:8e:71:
fd:a3:05:f9:3b:c0:87:62:63:fd:bd:a3:50:54:63:24:ce:86:
3f:29:17:22:f3:d8:cf:3a:40:4a:0a:c6:64:81:86:3a:1b:50:
20:19:03:67:90:d9:db:b9:b6:42:f0:c2:db:61:02:18:8c:8a:
29:4c:be:1b:62:92:37:31:b3:ff:98:5c:3a:29:03:39:b3:e0:
f9:85:c8:0f:4b:3b:5b:21:dc:b1:6e:68:2c:f7:f9:a0:74:86:
40:5d:c0:33:f2:c8:83:9a:bb:31:f3:89:11:dc:a2:0c:05:7d:
2d:91:88:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 03:18:14 2024 by rpki-client on console-fra.rpki-client.org