Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/RIX8teQ0OhHfcf44Ec89KhiWKio.roa
File: RIX8teQ0OhHfcf44Ec89KhiWKio.roa (raw, json)
Hash identifier: +aQThLxpVtvERsTfSAP6pwGmoswJVZNwEIifsGFgxDA=
Subject key identifier: 44:85:FC:B5:E4:34:3A:11:DF:71:FE:38:11:CF:3D:2A:18:96:2A:2A
Certificate issuer: /CN=0c6824158b730c44167ea773a977218cc62f416a
Certificate serial: 018CC9BCE4C24D1EE334099F543B0BEF3A68
Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/RIX8teQ0OhHfcf44Ec89KhiWKio.roa
Signing time: Tue 02 Jan 2024 10:34:08 +0000
ROA not before: Tue 02 Jan 2024 10:34:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60409
IP address blocks: 81.25.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e4:c2:4d:1e:e3:34:09:9f:54:3b:0b:ef:3a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a
Validity
Not Before: Jan 2 10:34:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4485fcb5e4343a11df71fe3811cf3d2a18962a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:26:13:f8:d2:7d:5c:6a:a9:1b:9d:3a:18:d8:
88:ef:a2:42:0f:d2:a0:12:fa:d8:fb:30:41:f3:54:
01:42:b5:32:00:a9:2e:37:30:9a:c3:93:d3:f0:a6:
96:a6:34:4d:4a:8a:99:b9:31:ac:d7:15:26:98:d6:
15:fc:70:64:93:7c:35:32:4a:82:ea:7d:95:2e:d1:
7e:df:67:90:40:05:4b:77:25:d5:c3:e7:16:c5:1e:
1c:5e:98:7c:cd:29:83:ac:a6:ea:71:27:19:c9:e3:
f3:c3:ba:ef:0c:cf:d4:19:66:2a:12:2a:a6:0a:9c:
e9:54:b3:ee:bd:9c:09:f8:55:40:33:ef:2b:7d:ab:
a3:f4:da:4e:43:ee:8f:11:1d:81:9d:2b:ac:aa:d9:
6e:ce:38:51:90:13:94:f4:16:54:0e:b8:8f:3b:00:
c3:9a:52:b4:bc:0c:27:f9:b0:08:85:b5:76:51:d8:
05:48:a7:e0:c9:6f:6a:de:18:5d:9b:26:1b:e3:f9:
96:3f:d5:5b:b0:22:42:cf:82:4d:ac:ac:77:0a:9b:
e0:c2:18:63:f1:df:de:08:16:02:28:83:af:23:25:
86:27:de:49:25:ef:79:11:23:07:54:78:e7:d5:49:
28:46:e5:4c:bb:a4:cc:e8:ab:93:36:e4:0b:19:83:
90:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:85:FC:B5:E4:34:3A:11:DF:71:FE:38:11:CF:3D:2A:18:96:2A:2A
X509v3 Authority Key Identifier:
keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/RIX8teQ0OhHfcf44Ec89KhiWKio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.96.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:c1:b7:18:65:19:60:95:68:a9:a4:ce:bd:22:29:1f:91:b1:
4b:13:2f:e8:c0:f7:7e:ff:a4:f2:d7:b7:40:10:16:33:19:1f:
c5:c2:ea:cf:9c:c4:b5:ed:dd:99:72:11:19:94:b8:c6:21:af:
1c:1a:00:5c:00:5c:32:94:7f:26:04:c0:cb:41:59:40:05:bc:
cd:66:96:f8:7e:4b:6c:2a:36:88:d5:d9:b8:80:6b:f0:d5:ba:
a9:92:3b:7b:09:1e:95:8f:cc:80:07:0c:f6:65:f0:78:eb:81:
ca:60:d8:25:55:d9:c1:5d:fd:ef:21:86:2a:d1:0d:d8:0a:ca:
0d:d9:00:09:7e:f4:6a:87:15:2d:80:49:25:a5:9a:d7:3c:35:
62:11:23:79:30:9a:dc:7d:a5:ca:69:2e:f3:80:e7:74:3a:57:
02:c1:e9:1d:ef:46:ac:fe:0c:86:4e:68:60:1a:d2:bb:04:6a:
27:dd:c6:dc:55:aa:39:99:98:27:52:32:d3:bb:8b:a2:8f:c4:
5c:a3:74:09:3d:f6:30:5c:5d:72:ec:29:e3:95:1e:26:3f:bd:
8a:18:81:0e:28:44:1b:c8:33:0f:be:65:54:07:71:66:2b:c3:
56:24:f6:b7:17:92:5d:f1:e1:57:46:f7:36:c6:c3:1d:39:fb:
54:42:15:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 06:43:59 2024 by rpki-client on console-ams.rpki-client.org