Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/8CNFtHeunOAHjVPuKNT21-SEA8M.roa
File: 8CNFtHeunOAHjVPuKNT21-SEA8M.roa (raw, json)
Hash identifier: fwwIPeUn0nsXgKw34ZvecC7VgTTCgABJxpG7ex26gWc=
Subject key identifier: F0:23:45:B4:77:AE:9C:E0:07:8D:53:EE:28:D4:F6:D7:E4:84:03:C3
Certificate issuer: /CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
Certificate serial: 018CC3B681002710CC22F0394748092711C3
Authority key identifier: E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/8CNFtHeunOAHjVPuKNT21-SEA8M.roa
Signing time: Mon 01 Jan 2024 06:29:26 +0000
ROA not before: Mon 01 Jan 2024 06:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21470
IP address blocks: 81.17.64.0/20 maxlen: 20
81.17.76.0/24 maxlen: 24
91.102.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:81:00:27:10:cc:22:f0:39:47:48:09:27:11:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
Validity
Not Before: Jan 1 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f02345b477ae9ce0078d53ee28d4f6d7e48403c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:63:38:7a:3b:6d:2b:62:37:3c:df:78:57:f2:
a7:db:07:b6:45:4a:d7:25:a0:ea:e9:1b:1b:e3:44:
70:0d:1f:8a:68:68:c9:47:14:73:10:03:37:1a:cc:
bd:bc:98:a7:59:e1:8c:c3:0d:b4:11:be:fb:42:5a:
72:f8:81:f6:c4:8c:03:8a:b0:c3:ce:db:f5:1a:a1:
c9:4b:af:80:d6:27:30:30:82:8f:01:97:3c:3f:70:
f7:4f:ec:7a:04:c4:89:0c:e3:9d:d0:96:a0:75:60:
e6:c7:e8:f6:cd:c6:17:a6:cb:a0:0b:56:bb:b2:37:
6b:06:99:62:a0:d7:f8:fc:9b:13:44:1d:e6:fb:54:
24:29:51:d7:87:c5:23:10:8b:9e:93:a6:e2:f1:f4:
f4:ed:a0:03:21:24:17:a4:1d:82:b3:47:2e:5b:89:
98:6b:93:b4:ef:14:53:dc:68:53:17:3f:41:8d:25:
0e:84:b6:d6:34:b2:51:eb:a5:18:85:f1:32:ed:98:
e0:29:cc:15:d1:79:96:e1:69:18:42:de:41:54:ac:
a8:ce:c0:ed:09:27:30:ea:c2:9e:1b:88:37:c8:1c:
2b:6a:49:f9:29:50:72:7b:37:3e:c4:c5:cd:fe:90:
4f:85:f4:cd:db:7e:14:a1:f1:7e:c2:5c:08:d0:b5:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:23:45:B4:77:AE:9C:E0:07:8D:53:EE:28:D4:F6:D7:E4:84:03:C3
X509v3 Authority Key Identifier:
keyid:E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/8CNFtHeunOAHjVPuKNT21-SEA8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.64.0/20
91.102.0.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:ae:5e:06:7c:ed:94:02:f3:af:ad:eb:c6:2f:a9:34:ef:a2:
cd:21:cf:8c:65:c5:42:00:b0:46:1c:9b:6f:f7:b3:84:71:07:
1a:2b:28:fd:df:89:49:ef:94:0e:bb:0b:b3:27:85:d5:b0:74:
36:c0:e9:fe:8c:88:e8:69:e0:e2:95:36:98:31:5f:10:d2:12:
df:23:ab:49:f5:e5:ae:bc:ce:6c:b1:ec:a9:0b:e5:be:7d:c4:
a5:c4:f7:7e:2e:75:43:c6:e5:3b:35:2a:f1:2b:e9:03:7d:99:
dc:d9:b2:6f:49:8c:87:f4:4a:2c:d7:b2:8e:fe:05:42:fa:d1:
19:a5:bf:e0:83:cd:d7:94:74:d8:9c:c6:e4:36:2c:c1:85:1f:
ea:d1:e4:27:80:00:c9:eb:68:13:89:f1:88:dd:25:9b:27:65:
dd:60:7b:c9:03:cb:3c:d9:37:e4:3c:87:bc:21:9b:25:dc:56:
48:6d:f6:d8:61:29:47:ae:5d:24:c4:94:14:d6:77:e0:2c:af:
b0:51:79:01:29:23:37:6b:2e:ad:a6:3e:ee:39:7e:71:12:33:
d6:bc:78:85:02:82:ff:fd:d5:fe:a8:38:e2:59:fa:a8:ff:37:
3a:9d:e2:74:d6:cc:8b:e4:b6:37:3f:17:12:bf:83:ba:07:b6:
7a:77:b7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 17:29:12 2024 by rpki-client on console-ams.rpki-client.org