Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/lU1eBgP81-E_lSoW0t2xfDikKNE.roa
File: lU1eBgP81-E_lSoW0t2xfDikKNE.roa (raw, json)
Hash identifier: FO2zy4xnOq3QvMgR9w8/Hu5lhWhfNbzdaTehj9Fahz0=
Subject key identifier: 95:4D:5E:06:03:FC:D7:E1:3F:95:2A:16:D2:DD:B1:7C:38:A4:28:D1
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 018CC94CC732BE40F804533033D36DEFEF42
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/lU1eBgP81-E_lSoW0t2xfDikKNE.roa
Signing time: Tue 02 Jan 2024 08:31:41 +0000
ROA not before: Tue 02 Jan 2024 08:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8737
IP address blocks: 195.121.128.0/17 maxlen: 17
195.121.64.0/18 maxlen: 18
213.75.0.0/17 maxlen: 17
213.75.0.0/16 maxlen: 16
213.75.128.0/17 maxlen: 17
195.121.0.0/17 maxlen: 17
195.121.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:c7:32:be:40:f8:04:53:30:33:d3:6d:ef:ef:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Jan 2 08:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=954d5e0603fcd7e13f952a16d2ddb17c38a428d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:5c:1c:02:fe:24:cb:52:db:c3:84:c6:64:
7c:ee:6e:cb:e5:58:4f:7e:0e:3c:30:6e:06:47:f8:
bc:26:de:56:a3:60:8c:d6:22:fa:6c:37:2a:1a:d6:
9f:39:cf:a3:a3:a1:35:38:30:67:12:34:1f:95:a7:
0c:f1:81:ee:fd:46:05:d8:32:88:96:ab:0a:48:2f:
51:a6:6e:4b:d1:c1:9e:68:f9:67:29:fe:00:6e:d7:
60:05:a2:72:68:ab:0d:31:40:6e:75:ea:84:e1:f2:
11:38:75:49:f4:8d:1f:4b:87:e5:a6:09:1b:b9:3d:
53:fe:cd:aa:cc:12:ab:16:64:13:24:ab:d9:33:58:
f7:1f:1c:74:e2:8e:b4:26:f9:5d:dd:88:66:97:01:
d9:e1:33:6c:fa:6e:c7:d1:47:bc:03:51:76:07:68:
f0:be:b6:e6:27:68:33:2e:b5:98:60:13:e4:75:45:
97:84:4e:bf:dc:6d:7c:06:e5:d5:7d:e2:06:f2:c8:
24:60:d2:06:24:73:8c:4c:0f:8e:65:ca:82:35:7d:
17:e0:36:97:db:a5:f5:4d:d2:5d:f5:ba:5b:96:ca:
0b:f4:c6:f4:20:c5:d3:a3:32:23:66:58:b1:5e:4e:
1a:e2:79:37:52:86:51:72:2a:7c:7b:53:d9:0c:40:
83:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4D:5E:06:03:FC:D7:E1:3F:95:2A:16:D2:DD:B1:7C:38:A4:28:D1
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/lU1eBgP81-E_lSoW0t2xfDikKNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.121.0.0/16
213.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:6d:f9:80:6a:53:e1:c0:79:da:2d:0f:c7:8b:6a:de:19:77:
d5:a6:48:01:19:ba:8c:2c:3b:24:f9:2a:da:90:1a:d0:5e:4b:
03:34:bc:3e:02:35:8a:b8:6b:0a:19:fa:cc:11:c7:89:40:9c:
fb:91:29:2c:46:ec:cd:31:98:83:00:c1:53:b9:5a:75:d6:0f:
11:91:7a:02:22:fd:53:c4:5c:ef:45:82:f7:db:a0:f5:9d:f6:
f7:9c:b1:8a:6c:5d:de:c6:9c:5e:d0:02:87:af:0c:95:e0:85:
6b:4b:4a:54:10:5c:43:4e:10:b9:26:44:6c:65:7c:dd:86:1a:
bf:44:8d:56:40:29:2e:90:c2:5b:33:2b:84:d4:5b:96:83:16:
f0:9e:01:32:f6:c4:cb:99:36:46:2c:49:b1:f3:8b:8b:44:54:
e7:0e:40:cc:e0:da:59:63:4d:00:f2:8e:12:14:18:71:cf:19:
d9:d7:73:71:25:80:7d:c3:0d:13:7f:72:e0:ef:60:37:d2:e0:
68:1b:f8:5e:c2:15:55:94:09:14:88:c7:77:f3:fa:24:dd:79:
df:38:4c:67:83:dd:a2:75:2f:78:06:b6:79:96:a7:1c:5a:d0:
94:78:dc:08:e6:74:67:ff:01:f3:ee:ea:40:6f:ec:10:2b:6f:
59:fb:b8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 05:25:30 2024 by rpki-client on console-fra.rpki-client.org