Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3XbdhDgzpcMMlYI0AL9SENrD-kI.roa
File: 3XbdhDgzpcMMlYI0AL9SENrD-kI.roa (raw, json)
Hash identifier: 8qt2zIEeHAui23YIk2Ya6Om0o+Hh/uw7mObeoyvLGxU=
Subject key identifier: DD:76:DD:84:38:33:A5:C3:0C:95:82:34:00:BF:52:10:DA:C3:FA:42
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018D44F0DAA0C5806A797CE8C15BEC5341AB
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3XbdhDgzpcMMlYI0AL9SENrD-kI.roa
Signing time: Fri 26 Jan 2024 08:44:11 +0000
ROA not before: Fri 26 Jan 2024 08:44:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211439
IP address blocks: 81.29.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:44:f0:da:a0:c5:80:6a:79:7c:e8:c1:5b:ec:53:41:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 26 08:44:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd76dd843833a5c30c95823400bf5210dac3fa42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:aa:94:49:61:79:3d:5f:98:3b:3a:37:52:
af:b1:19:6a:7a:6f:c3:3a:d2:ea:c9:e2:4e:89:cd:
9b:81:2f:db:2b:b2:42:8a:73:d8:02:15:5e:6c:76:
fb:d9:10:9d:7c:8c:5d:80:d2:89:b6:d7:6d:ae:27:
7d:38:26:c6:c0:f4:77:d3:00:9a:8d:61:ac:67:34:
bf:1c:66:59:01:f8:ea:43:3d:d3:0a:fc:5f:44:47:
17:9f:73:52:09:1f:c0:2a:5a:52:a4:d2:dd:ef:ff:
db:3b:d0:23:71:7c:9d:6d:04:53:9a:fe:7b:2f:14:
b0:bd:1d:14:f7:70:82:da:d4:8e:38:bd:18:bb:f3:
9f:6e:d8:55:52:2a:5e:fb:88:58:d0:cf:26:ea:96:
ad:95:36:00:68:91:af:fa:5a:b7:bc:b5:88:dd:9c:
90:ff:1e:88:5d:ed:ae:05:cb:5c:c9:29:63:08:1d:
65:ef:33:22:18:a1:5a:b3:ae:44:56:2f:0c:87:07:
ad:74:46:f4:01:fd:84:9f:a6:9a:bb:45:50:17:15:
78:70:88:60:22:c9:15:15:c3:f1:77:f4:a8:fa:1c:
1f:84:0d:73:82:6e:9c:d1:b7:43:66:22:5d:34:1d:
7e:18:13:7f:b7:8b:d1:05:c1:99:12:b0:bb:53:ec:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:76:DD:84:38:33:A5:C3:0C:95:82:34:00:BF:52:10:DA:C3:FA:42
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3XbdhDgzpcMMlYI0AL9SENrD-kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.156.0/24
Signature Algorithm: sha256WithRSAEncryption
43:7f:4e:50:7e:f7:5c:ca:c4:9e:3f:40:ae:4c:6e:83:ad:8b:
b9:b1:44:61:52:51:57:f8:9a:16:61:76:6c:be:a8:4b:53:66:
f2:42:3a:da:f9:93:9e:37:96:18:fb:06:dc:10:c0:9e:91:fa:
46:6c:5d:c4:5e:d7:9d:0c:aa:f1:ea:fa:ba:a2:1b:fe:66:16:
55:bb:96:06:44:b9:b5:d0:4b:f4:b0:ed:4a:9d:68:95:72:a6:
63:70:c7:1a:e2:9e:51:c5:c3:2c:5d:86:2a:de:69:cb:fa:2d:
49:1e:b6:77:5a:95:0a:3b:9c:42:70:7c:d7:0e:31:b6:bb:0b:
b9:8e:5d:c7:9a:cc:89:b9:8b:47:b3:88:89:af:09:f4:eb:9c:
05:ea:53:82:70:37:f9:f7:6b:c6:20:b9:50:97:22:af:3d:f9:
9a:4d:17:b7:83:aa:11:f3:c4:39:45:e9:3e:ee:50:4c:28:05:
19:7a:e7:5b:63:90:70:40:1a:74:89:4e:4b:e9:78:b0:6d:d2:
78:89:55:03:23:dc:42:62:34:cb:70:24:df:cc:6d:17:ea:cd:
5e:fa:4f:5b:a9:a2:7c:d4:c9:c3:3c:a0:ec:90:7d:f3:65:e2:
98:4b:51:a4:30:c9:c9:47:64:1d:7b:ce:a5:bf:88:2f:32:80:
86:0b:3e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:55:26 2024 by rpki-client on console-ams.rpki-client.org