Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/zuNb_ENhItc9d3C-Wr9Ih7fwhno.roa
File: zuNb_ENhItc9d3C-Wr9Ih7fwhno.roa (raw, json)
Hash identifier: f7VkQM61KOvEr4Up9vusjZ5zN9dX2+Ax7MlGTC6rXpM=
Subject key identifier: CE:E3:5B:FC:43:61:22:D7:3D:77:70:BE:5A:BF:48:87:B7:F0:86:7A
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 018CC7942E8DE032F41167DD5BA2421D881E
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/zuNb_ENhItc9d3C-Wr9Ih7fwhno.roa
Signing time: Tue 02 Jan 2024 00:30:26 +0000
ROA not before: Tue 02 Jan 2024 00:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48227
IP address blocks: 81.6.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:2e:8d:e0:32:f4:11:67:dd:5b:a2:42:1d:88:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Jan 2 00:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cee35bfc436122d73d7770be5abf4887b7f0867a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:5e:f9:a3:c9:6a:f9:d5:1a:02:7a:1f:30:
8e:db:db:20:69:77:4f:91:74:94:27:17:ef:8e:60:
0d:12:f9:5c:a2:04:b3:47:13:3a:5f:1e:09:d1:a8:
ce:08:87:31:b2:96:c4:0d:ea:45:59:ab:70:ff:7c:
b9:4c:b7:b8:3d:48:ee:be:8a:01:ac:a2:27:e4:b3:
54:4d:27:0a:83:96:ec:a8:77:e0:31:b8:ef:1f:90:
c6:ce:ab:be:2c:ad:12:e4:b3:19:c5:28:ef:a7:26:
9c:4e:98:6e:a1:d7:7d:5f:f5:85:35:74:db:bd:f3:
8c:4e:3d:a2:05:a7:32:b3:03:c6:0e:07:71:bc:f9:
e9:df:6c:d9:5f:02:ca:f0:7c:7b:7c:de:24:98:97:
62:ec:9b:ca:33:82:07:1b:37:94:42:d3:a2:4a:9e:
29:18:a3:d8:bf:2c:22:33:bd:64:e7:1b:6e:ec:0a:
97:11:dd:ff:bb:69:77:f0:c3:08:22:7d:88:af:f0:
22:cf:04:e7:32:61:6a:b8:f4:d5:33:13:03:01:b9:
2a:90:f7:41:57:82:90:3c:f6:63:f2:0e:40:78:1c:
6e:92:3d:71:10:8f:74:11:2e:4b:56:a5:c7:03:8d:
84:cd:c1:49:8a:b1:57:8c:8c:55:15:a0:4d:15:3e:
3d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E3:5B:FC:43:61:22:D7:3D:77:70:BE:5A:BF:48:87:B7:F0:86:7A
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/zuNb_ENhItc9d3C-Wr9Ih7fwhno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.6.187.0/24
Signature Algorithm: sha256WithRSAEncryption
16:81:a9:7d:49:7c:e1:97:ce:96:60:42:53:c4:d7:75:ad:1d:
55:46:50:e7:8a:09:b1:ed:29:37:d2:e1:51:c2:49:49:35:e5:
c7:a1:98:ff:d7:17:2c:65:f3:f3:8c:b3:1c:f0:d9:48:a2:6e:
a8:3a:b6:f6:02:63:95:fc:cb:ab:b7:ef:58:57:58:9f:71:40:
b8:10:2d:bc:57:6e:70:e3:a5:80:08:49:f8:63:d9:9d:59:5c:
bc:7e:d8:01:c4:72:2e:c0:ba:4d:5b:51:8c:e0:71:6a:bf:0f:
93:22:99:c0:ed:63:57:32:88:e3:9e:fe:11:ac:5b:5b:31:47:
7e:7f:b9:67:87:1c:27:4b:72:13:2c:ee:93:86:c1:a6:55:3d:
7d:d8:3e:7e:45:41:ae:da:6b:5e:00:ba:c1:01:6d:dd:90:6d:
1a:e9:96:06:4a:3d:45:e1:76:b8:b2:1a:1f:72:f2:57:b9:1a:
7a:c4:b3:59:93:12:3c:42:7d:0e:47:32:2e:3a:20:61:3c:6e:
4f:7e:83:b4:5f:c7:bc:0f:a5:40:32:52:37:22:d2:8d:3b:c6:
84:32:3c:d0:b5:0b:17:5b:b8:a9:57:87:c2:44:5c:49:38:72:
ec:c2:9d:07:74:db:8e:28:5e:1e:90:16:26:b8:54:61:6b:4c:
01:d6:5d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:24:47 2024 by rpki-client on console-fra.rpki-client.org