Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/4_u5etgo27VkkJ9aRm9yE5UubS8.roa
File: 4_u5etgo27VkkJ9aRm9yE5UubS8.roa (raw, json)
Hash identifier: cZVtReYzb69l+TEWsjvkvcUXVIUUHOe6YwgnDYrH+6A=
Subject key identifier: E3:FB:B9:7A:D8:28:DB:B5:64:90:9F:5A:46:6F:72:13:95:2E:6D:2F
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018CCA2A4A0F3198019AF2DD4CACCAC8D210
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/4_u5etgo27VkkJ9aRm9yE5UubS8.roa
Signing time: Tue 02 Jan 2024 12:33:38 +0000
ROA not before: Tue 02 Jan 2024 12:33:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395839
IP address blocks: 81.29.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:4a:0f:31:98:01:9a:f2:dd:4c:ac:ca:c8:d2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 2 12:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3fbb97ad828dbb564909f5a466f7213952e6d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:0f:e9:f3:01:80:a3:04:06:93:40:54:40:
4a:51:da:ab:65:df:8d:3d:7c:2d:b5:4d:e9:7d:52:
64:25:cc:39:5a:92:87:45:31:4b:e5:a2:53:7f:f6:
7d:3c:d9:fa:f7:9e:7a:2a:b5:bd:b2:9b:23:7b:4d:
e1:1d:61:dc:db:8b:e2:4d:b4:79:d5:ec:39:fb:10:
12:c8:3e:65:3c:f5:96:a7:a8:41:71:68:1b:e7:7c:
8c:c7:93:17:75:fb:b9:ef:61:da:ce:c4:1a:e9:59:
80:3d:82:8f:fa:d2:c2:78:2e:55:72:a7:ee:16:f3:
94:d8:28:c4:6a:50:92:d4:bd:4c:7e:cc:48:ed:b3:
04:8f:33:e8:b8:9e:15:9a:ac:80:f2:a7:a7:8a:60:
36:e8:cb:7e:fe:41:d3:e4:58:e0:82:5d:73:86:cd:
31:8b:40:bb:32:e9:0d:c1:a8:42:68:9d:7f:03:ba:
e9:aa:fc:44:d2:b3:03:17:07:36:58:8c:da:dc:2c:
29:5d:8e:19:6a:c8:bc:79:42:8c:bc:4d:ba:a8:e6:
c1:8b:91:f5:f5:e3:6a:ec:9b:2a:5b:7f:8c:6d:e8:
2c:42:b3:22:94:77:44:8f:69:38:0e:78:28:a8:30:
c5:ea:ae:41:eb:27:90:fa:7b:25:9c:45:7d:37:6e:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FB:B9:7A:D8:28:DB:B5:64:90:9F:5A:46:6F:72:13:95:2E:6D:2F
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/4_u5etgo27VkkJ9aRm9yE5UubS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.144.0/24
Signature Algorithm: sha256WithRSAEncryption
56:2f:8b:bd:3c:8e:0e:31:ba:c1:5e:75:b3:b3:20:66:49:ed:
77:97:d8:9d:fa:36:ae:3d:24:d0:87:ed:a9:f3:be:4d:02:16:
82:8d:b0:c0:ca:4f:db:a3:38:d4:9a:a5:fc:db:6a:ce:31:fa:
a4:5c:fb:4c:57:6e:15:9e:e5:ef:11:6f:be:3f:b6:d6:9c:0a:
fc:ae:de:25:e9:c2:8a:90:c6:f1:27:36:86:6b:a1:22:88:a9:
c8:c6:29:71:25:27:0e:de:f1:72:8e:2b:d4:89:68:d4:57:94:
bf:d4:ee:78:6d:74:04:33:d7:2a:18:f8:98:9e:64:4e:be:1d:
e1:74:bf:bf:77:ea:13:99:a8:7b:13:2f:b0:05:15:f9:0f:af:
f4:a5:57:a7:57:db:28:8a:c3:dd:07:25:1e:56:f4:cf:e1:fb:
44:45:d9:cf:50:7b:91:f0:d4:e2:fc:88:87:c7:34:4f:11:ac:
f3:e7:78:d4:66:35:a4:ee:08:e8:2a:28:c7:24:8b:10:a8:24:
0d:79:fe:4d:1d:57:81:6b:23:6c:86:75:b7:5d:64:3b:89:7f:
33:2d:02:84:7b:a4:69:6f:11:e8:0e:2a:7d:2d:81:06:5f:b3:
ba:be:e9:6e:78:3f:23:0c:87:d4:2f:57:b8:72:63:dc:6f:a2:
94:4e:5b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:50:40 2024 by rpki-client on console-fra.rpki-client.org