Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/Uyu6tpZVvzLIpVvOotOp7fQehTE.roa
File: Uyu6tpZVvzLIpVvOotOp7fQehTE.roa (raw, json)
Hash identifier: /LVjemBWKiwZ4wuYGjueXBDz8paHZN+ImSFZHgZMDh8=
Subject key identifier: 53:2B:BA:B6:96:55:BF:32:C8:A5:5B:CE:A2:D3:A9:ED:F4:1E:85:31
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 018CC3B6E1591D371F181473979C994FD7F6
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/Uyu6tpZVvzLIpVvOotOp7fQehTE.roa
Signing time: Mon 01 Jan 2024 06:29:51 +0000
ROA not before: Mon 01 Jan 2024 06:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34305
IP address blocks: 81.171.75.0/24 maxlen: 24
2001:4de0:2101::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e1:59:1d:37:1f:18:14:73:97:9c:99:4f:d7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Jan 1 06:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=532bbab69655bf32c8a55bcea2d3a9edf41e8531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:73:31:b4:f6:a7:09:2f:92:ef:cc:dc:b9:
95:a9:da:f1:4b:90:0a:02:7d:54:75:c9:68:69:fb:
d3:63:e6:45:53:fc:1c:b6:57:42:b7:6d:f0:bc:75:
f4:82:26:5b:74:38:6a:dc:5d:0b:b5:ee:d1:4d:17:
79:1b:dd:4d:43:24:5b:c7:b4:6e:7b:0c:dc:05:d0:
a0:94:c4:1f:b0:bf:91:f4:5c:9c:7a:54:22:f8:6a:
23:b2:25:54:50:32:d3:ea:f9:4d:c7:83:4f:14:7a:
be:2b:9c:b8:e0:36:35:70:ff:af:d5:f2:1f:76:d6:
78:c1:44:0f:30:dc:14:64:38:13:2f:88:c6:9e:8c:
b0:69:16:e7:08:32:e2:53:95:57:4d:f2:5a:fd:f6:
ba:63:6b:2a:12:9f:46:56:42:ce:93:2c:ef:49:41:
15:97:df:c0:10:4f:75:e4:5e:37:66:dd:55:fd:52:
27:29:b3:87:e0:03:69:24:e1:06:32:db:8a:6d:eb:
70:d6:e6:23:61:2c:4b:b0:11:c8:e1:a2:1c:c6:3c:
46:a6:e2:59:e7:07:c5:ee:d4:50:3c:1f:1e:ed:38:
6b:4f:b7:75:12:d0:1d:45:a7:05:15:41:35:88:37:
45:80:83:c8:3a:6b:fa:f9:9f:56:4d:7f:53:7e:ec:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2B:BA:B6:96:55:BF:32:C8:A5:5B:CE:A2:D3:A9:ED:F4:1E:85:31
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/Uyu6tpZVvzLIpVvOotOp7fQehTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.171.75.0/24
IPv6:
2001:4de0:2101::/48
Signature Algorithm: sha256WithRSAEncryption
91:6f:92:63:0f:a5:05:c6:5f:ab:f6:fa:81:d9:c2:8f:72:df:
ff:4c:d1:b5:dd:dc:72:9a:07:15:ad:15:ff:ac:6e:83:f1:4b:
95:fa:1a:b8:df:9f:e1:83:40:31:31:a4:75:66:91:da:33:9a:
20:ba:71:76:5f:7b:c1:eb:0a:bd:d0:98:e7:f6:5f:8a:44:d9:
36:f1:b8:02:ee:02:c7:db:04:1e:8e:11:cb:c4:ee:ce:ad:21:
a2:16:d0:bc:27:52:21:8d:9a:75:8f:29:01:c2:86:ab:59:08:
ba:8c:26:92:d8:bb:9a:6e:c9:44:cf:24:c6:54:f4:d9:01:79:
97:de:95:e7:8f:a4:86:e8:77:6e:5e:31:9e:26:56:b0:2c:1d:
3a:11:48:ab:6a:62:1e:da:2d:55:41:1a:99:5c:59:15:5a:1c:
ea:35:3c:a9:f6:c0:a6:5e:28:d5:36:2f:d2:99:8d:45:7b:24:
07:7b:86:d2:88:36:6f:06:da:55:46:c7:44:d9:ed:fb:08:75:
b3:fb:9b:10:25:df:3a:2c:e5:a2:68:71:2c:cc:7c:a0:55:22:
79:3b:38:92:24:70:ef:f6:fa:c6:87:f6:2b:49:d4:be:c8:92:
c7:3c:d4:57:f1:b7:08:d5:3c:a3:a5:0d:c8:39:8b:19:10:0a:
e2:cb:34:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:38:59 2024 by rpki-client on console-ams.rpki-client.org