Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uKem5AWJVmtISmUh_VdFM-ZSbzE.roa
File: uKem5AWJVmtISmUh_VdFM-ZSbzE.roa (raw, json)
Hash identifier: fDklRASfMPx1dqlCOgT5FwNRFvFl2bAWcHjcJ5rp0Xg=
Subject key identifier: B8:A7:A6:E4:05:89:56:6B:48:4A:65:21:FD:57:45:33:E6:52:6F:31
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC349592CABF55F72156B8CC9A823F897
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uKem5AWJVmtISmUh_VdFM-ZSbzE.roa
Signing time: Mon 01 Jan 2024 04:30:13 +0000
ROA not before: Mon 01 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139989
IP address blocks: 81.168.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:59:2c:ab:f5:5f:72:15:6b:8c:c9:a8:23:f8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8a7a6e40589566b484a6521fd574533e6526f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:07:ed:cb:82:d8:ab:71:15:4a:17:8f:77:6f:
3b:e9:8e:d8:a4:77:01:20:a9:0f:1a:49:da:d8:a2:
a5:e4:e7:2b:5d:22:b7:e6:c5:a2:84:ae:67:58:9e:
af:dc:bd:46:c6:85:f2:46:61:c5:1b:e3:8a:bc:67:
2d:c0:06:30:f7:e4:4a:89:db:3a:47:4a:f4:f5:51:
7c:34:d7:db:b5:40:24:ec:00:04:06:10:ed:38:e5:
2e:80:a7:7b:a6:26:ee:3a:e4:2c:fa:5a:fe:b2:7c:
25:7e:3f:de:55:18:10:33:81:52:ca:1f:8f:30:64:
c6:86:55:7d:78:14:0c:62:19:23:38:c1:4c:f7:66:
ad:ef:97:aa:40:f1:a4:b0:f6:df:71:b4:c9:95:37:
8e:68:e6:d1:e3:d2:2a:91:37:a3:70:54:5e:e5:e0:
d8:be:4f:c4:af:8e:a4:da:e8:48:14:8c:ec:e9:4b:
3c:98:52:b7:25:9f:f2:bb:2a:f4:f7:01:49:61:29:
d2:f8:4e:45:3f:2e:c6:e9:7a:bf:ea:a5:f6:45:47:
99:c7:66:e5:14:16:57:9c:f5:13:71:d9:dd:5c:66:
e0:47:f5:19:21:17:9b:bd:e8:98:bc:2a:2a:d2:ac:
31:3b:ed:a9:24:19:c3:8b:a3:82:6a:c3:35:b3:2b:
6f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A7:A6:E4:05:89:56:6B:48:4A:65:21:FD:57:45:33:E6:52:6F:31
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uKem5AWJVmtISmUh_VdFM-ZSbzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.116.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:0e:ac:7f:8c:a7:6a:d1:9f:6a:55:6d:7b:46:9b:59:c7:da:
bb:0f:b3:e4:18:14:4c:6b:de:c0:66:d2:a5:e6:b9:7c:77:16:
30:b5:a6:de:c1:b7:a6:bc:d7:ea:59:eb:87:4c:a5:b2:4c:57:
5a:01:1e:5c:b3:07:66:59:a3:36:5e:fe:c7:2e:2f:2a:17:6f:
65:cd:3d:87:aa:8f:c4:27:8f:da:55:47:d7:b7:8d:7e:00:29:
77:43:28:79:41:59:7d:26:aa:e1:75:db:e8:e2:a0:8d:4b:c4:
e6:25:6c:b2:81:30:80:ea:18:ec:69:83:83:57:24:85:91:c6:
2f:c9:1f:7c:00:71:92:88:5d:7f:94:a4:cc:a7:4d:16:fd:34:
44:de:57:9c:b6:9f:7b:5c:38:c0:2a:18:be:57:d5:fb:a6:c1:
f4:34:10:4f:ef:fd:d2:96:3f:a3:5c:91:d1:85:24:e0:57:14:
63:ff:ce:b5:ef:b2:52:9c:c8:c5:64:b2:5c:e6:a7:6e:0d:96:
a2:c3:21:1f:fd:61:74:f9:a1:61:4a:c6:5b:a7:2b:08:76:83:
2e:f8:e1:21:b7:bd:ae:28:67:9d:6a:3f:3c:86:0c:c5:2a:43:
31:05:52:33:88:de:1f:d8:f2:45:b2:98:b4:0b:56:b8:15:6c:
3a:2c:82:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:16:18 2024 by rpki-client on console-fra.rpki-client.org