Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/iTsYIYGMEILzzTqPD6HL_IpWULA.roa
File: iTsYIYGMEILzzTqPD6HL_IpWULA.roa (raw, json)
Hash identifier: HKZXv97DDddVrt6fYnTx+wRMS2caItgz6HV/ZWxUTQQ=
Subject key identifier: 89:3B:18:21:81:8C:10:82:F3:CD:3A:8F:0F:A1:CB:FC:8A:56:50:B0
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018CC348F5065F78C9104A68CD3F3FE88011
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/iTsYIYGMEILzzTqPD6HL_IpWULA.roa
Signing time: Mon 01 Jan 2024 04:29:47 +0000
ROA not before: Mon 01 Jan 2024 04:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399045
IP address blocks: 185.81.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f5:06:5f:78:c9:10:4a:68:cd:3f:3f:e8:80:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=893b1821818c1082f3cd3a8f0fa1cbfc8a5650b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0d:66:6b:eb:0a:8d:46:15:61:71:ea:1b:7b:
ca:e6:a2:b2:ac:21:82:fd:a1:78:ea:bb:0f:8f:39:
47:dc:f6:57:95:41:9a:07:21:ce:89:6b:a4:09:a4:
5f:48:88:7e:fe:b0:36:cc:73:50:90:1f:6d:e4:da:
82:14:06:d0:eb:aa:70:d0:5f:c2:36:d7:c3:44:13:
97:b5:2b:8b:65:d5:ba:3f:45:a5:4a:26:74:f4:a3:
8e:72:2b:45:b1:75:8b:62:ce:b3:2f:37:b1:d1:60:
80:80:51:2d:7a:be:13:5a:f8:7d:e3:df:66:2c:8a:
c0:72:71:2b:bd:52:fa:ab:73:ca:bf:14:e2:7d:5a:
26:f6:a3:d4:3f:ce:f0:b7:42:13:9a:47:56:48:be:
3f:f2:ff:af:b3:57:e9:b9:0c:0e:6d:c8:5b:83:f8:
27:f6:3b:1a:60:cd:bd:6c:f1:6b:00:46:4f:ee:cb:
38:59:7d:29:9c:19:49:49:93:5f:a6:71:9f:03:d2:
22:47:25:4e:25:bf:f5:df:61:9b:4c:23:d7:f9:c1:
28:d1:62:5b:c2:9f:f4:b3:3d:53:dc:06:03:a3:4a:
8e:3d:06:ac:e8:31:53:b3:dd:8b:6f:b0:07:01:a9:
a1:29:28:2b:30:e3:36:f0:26:87:ee:db:ca:29:96:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3B:18:21:81:8C:10:82:F3:CD:3A:8F:0F:A1:CB:FC:8A:56:50:B0
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/iTsYIYGMEILzzTqPD6HL_IpWULA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.30.0/23
Signature Algorithm: sha256WithRSAEncryption
86:39:80:65:f5:df:4c:23:c7:0d:2c:04:66:0e:86:fa:9e:2d:
f7:91:95:b1:29:08:47:fa:0b:2e:40:df:a3:a3:90:75:6d:5e:
07:9a:b1:f7:e8:85:69:d2:d9:2b:cf:4e:42:e0:32:9f:fd:9c:
f0:5b:ae:65:a2:c8:ef:43:c8:20:ea:bc:5b:d5:cb:6a:50:08:
34:a7:a2:2c:43:96:af:7b:fe:e1:97:2f:04:b5:d2:31:09:4c:
f3:61:42:5d:a4:e1:20:f0:b5:fa:c3:f1:2d:a7:e3:97:16:3a:
32:b3:d9:d2:43:39:0f:67:57:20:ed:92:51:23:a1:97:a3:c6:
92:bb:34:35:e8:2c:bc:98:f3:3e:3a:ab:7e:d6:40:91:9a:72:
ee:e3:04:03:21:be:c4:cd:99:6e:4e:05:1c:8c:b7:5d:f4:b1:
86:34:54:a4:e8:ff:fe:14:d4:31:8f:e9:fe:c2:97:66:90:c0:
4d:44:84:94:41:76:6f:5f:66:50:d5:a4:d7:23:2c:3f:6d:49:
72:f0:a6:e8:cf:49:a4:41:52:39:cc:bc:c8:b5:17:32:e8:96:
ae:4b:7e:9c:b1:34:87:92:87:82:37:06:98:f0:04:22:2f:36:
f4:ae:ed:a3:79:c7:2f:e1:52:cc:ab:e7:ea:c4:35:9d:94:cd:
0e:7b:38:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:34:40 2024 by rpki-client on console-fra.rpki-client.org