Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-xQKwDNTpnsoOHzj8pkwrOvtPrU.roa
File: 1-xQKwDNTpnsoOHzj8pkwrOvtPrU.roa (raw, json)
Hash identifier: Ho1ozyykpzO5+yk1kciIesToqY6Ji2pN47i8KDrPoYU=
Subject key identifier: FB:14:0A:C0:33:53:A6:7B:28:38:7C:E3:F2:99:30:AC:EB:ED:3E:B5
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018CCA9933456640845B85318BB3AD7A2677
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-xQKwDNTpnsoOHzj8pkwrOvtPrU.roa
Signing time: Tue 02 Jan 2024 14:34:46 +0000
ROA not before: Tue 02 Jan 2024 14:34:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51026
IP address blocks: 81.12.24.0/22 maxlen: 24
81.12.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:33:45:66:40:84:5b:85:31:8b:b3:ad:7a:26:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 2 14:34:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb140ac03353a67b28387ce3f29930acebed3eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6d:67:05:12:96:a9:26:20:90:63:30:05:c9:
a6:ba:c6:f8:da:17:70:1c:c7:46:26:20:4a:fc:4a:
ac:0b:9a:65:49:25:76:85:5a:92:d5:82:bc:30:63:
91:f0:1c:bb:9b:02:5d:4d:a9:0f:57:15:81:cb:be:
66:55:b5:8a:aa:6f:d7:9a:b3:14:6f:fd:a5:1b:06:
9f:94:22:75:4d:a3:50:be:51:1c:38:2c:fb:db:24:
6f:7f:24:c3:38:94:40:7f:b6:9f:69:89:f8:39:81:
65:83:a8:b8:df:6d:fe:6e:f4:91:9d:23:7a:c8:58:
22:e8:35:86:05:f2:b2:f4:be:70:18:ab:0c:6c:5c:
4d:3c:e9:52:0f:73:ec:fa:f9:df:a1:59:91:22:ba:
58:8a:13:e4:80:94:e5:cc:42:f0:df:c5:5e:3a:3c:
95:1b:5a:34:7c:14:fd:77:75:b3:47:79:9b:78:3a:
50:c5:74:5d:87:80:11:76:5e:c6:d5:46:2e:a9:01:
be:68:41:e2:d5:9d:80:ec:a3:06:38:52:99:e7:3d:
97:33:89:d5:6b:bd:10:51:0f:24:5a:c6:0e:d4:bd:
44:37:36:29:8a:51:41:cf:6e:7c:98:dc:28:c5:09:
87:49:cc:c6:63:ac:79:35:5a:ce:7c:2f:3a:55:7e:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:14:0A:C0:33:53:A6:7B:28:38:7C:E3:F2:99:30:AC:EB:ED:3E:B5
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-xQKwDNTpnsoOHzj8pkwrOvtPrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.24.0/22
Signature Algorithm: sha256WithRSAEncryption
50:65:f6:1b:88:32:71:17:17:1a:70:71:2d:66:f4:bf:51:f6:
68:d6:99:2d:d1:19:e2:00:52:a8:07:ee:c1:4b:a3:38:1b:5c:
a6:96:70:c6:0e:31:d1:de:57:8c:31:bd:8d:3e:65:15:83:ca:
72:de:99:9e:4e:33:1d:3a:30:86:07:c6:ca:db:16:aa:a5:ae:
e8:30:ec:69:e7:04:d0:0a:f9:2a:0a:a5:fe:eb:9d:92:70:54:
0b:89:8e:d9:1b:b6:33:35:c0:fc:1f:e6:e7:ad:b8:15:2f:e2:
61:8e:26:20:3d:d0:b1:3c:a9:3b:0b:26:b0:49:51:ef:75:1a:
00:94:77:81:85:12:ab:c9:92:f7:80:5b:64:45:48:e9:23:31:
c7:dd:6c:7d:4f:ee:8c:24:6f:5e:24:ef:39:da:97:fd:15:c8:
8b:6c:83:20:92:0b:d8:07:1e:03:4b:41:fe:44:7b:02:6c:17:
8f:68:89:fb:7a:99:b2:d4:45:07:81:a5:b5:e6:b1:b5:3e:5b:
f4:5e:1a:b9:7f:6a:d3:98:0f:9a:dc:5f:19:01:65:7c:c9:a0:
15:23:f9:71:cc:bf:3c:02:9e:6b:3c:4d:6b:fa:a2:6a:d9:29:
a4:2c:d0:54:b2:2c:d4:ed:6b:07:07:2e:d5:8b:a8:2a:62:0f:
a4:51:71:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:17:49 2024 by rpki-client on console-fra.rpki-client.org