Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1LpQ8952OAlsr00KntObNSn7t4g.roa
File: 1LpQ8952OAlsr00KntObNSn7t4g.roa (raw, json)
Hash identifier: pBbyCGoYR6T0JgcLo/K4xogtQKLKUB7UhjJH2LuQ8Ek=
Subject key identifier: D4:BA:50:F3:DE:76:38:09:6C:AF:4D:0A:9E:D3:9B:35:29:FB:B7:88
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018FCF9C240B391171D26F51116C04892771
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1LpQ8952OAlsr00KntObNSn7t4g.roa
Signing time: Fri 31 May 2024 17:04:27 +0000
ROA not before: Fri 31 May 2024 17:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 81.22.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cf:9c:24:0b:39:11:71:d2:6f:51:11:6c:04:89:27:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: May 31 17:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4ba50f3de7638096caf4d0a9ed39b3529fbb788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:f4:a5:1e:a6:d6:43:4e:1d:71:49:80:1c:
36:6f:25:10:2a:2f:9f:dd:55:e2:3b:e2:35:8f:36:
dd:8c:8c:3f:ee:63:0a:d0:f2:8d:c3:ca:2e:26:fb:
7b:dd:5d:4f:b0:14:57:65:4c:fa:ec:12:6f:fa:87:
5b:10:79:8c:51:86:c4:b6:fb:ff:f0:bd:82:af:0d:
49:51:05:24:d9:c0:60:59:91:44:20:29:86:57:ed:
e5:bd:f4:d3:6c:16:5e:87:b0:58:be:b7:7b:29:99:
c7:a3:f3:39:de:ad:bc:50:31:7d:32:57:d0:7b:74:
bd:24:87:e8:63:0a:0a:28:0d:66:90:5c:c8:c0:eb:
f1:ba:c6:22:5c:b2:1d:3c:75:54:db:00:f1:59:10:
6e:e5:5b:0f:67:a6:7b:af:5f:85:aa:27:7f:f3:b4:
70:74:26:03:02:1a:5d:59:6d:a8:29:25:d9:91:f2:
d7:ce:03:74:cb:fe:c0:f0:9d:e3:e0:de:19:75:7b:
7b:f1:09:b5:84:38:4b:c5:b2:00:fb:75:69:af:a6:
8c:6d:31:2f:77:72:32:47:33:7d:7c:c8:70:0b:c5:
7a:97:82:31:fe:87:b6:4b:fc:b4:1a:f1:26:d0:68:
eb:8f:cf:e2:ba:26:56:f9:4a:5b:28:47:fb:70:0d:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BA:50:F3:DE:76:38:09:6C:AF:4D:0A:9E:D3:9B:35:29:FB:B7:88
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/1LpQ8952OAlsr00KntObNSn7t4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.139.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2d:6c:e2:08:49:66:91:21:8a:b0:fa:40:e9:b2:13:1c:a1:
df:f2:e1:88:6f:78:3d:bf:e2:9f:b1:eb:8e:3e:44:1f:21:80:
92:02:ca:d0:23:a0:94:ad:45:1d:28:1e:c9:41:41:f2:99:e0:
76:ad:89:6d:45:28:99:d3:72:f1:24:5b:c6:36:98:28:6c:eb:
5e:69:10:04:d8:88:12:67:c5:69:3d:0c:9e:98:f5:dc:76:98:
f7:ce:ca:c4:41:31:a8:48:77:60:5a:83:20:5d:b3:9f:73:d3:
95:a8:06:e5:bd:47:7a:97:eb:e5:2a:a4:27:e2:e2:b4:31:6e:
df:43:ca:ea:4f:27:76:1a:e6:f7:99:2c:b7:a0:87:73:41:8a:
c4:ca:70:71:ce:19:fc:04:4f:70:65:0c:b6:13:c3:9f:4c:3d:
d2:ff:cb:d7:74:b5:7a:4e:88:1c:75:57:6c:4f:c2:87:e1:07:
bb:a9:60:7f:53:d5:a9:d2:c6:c8:9f:9f:ab:00:9a:ee:4e:63:
36:ab:b3:d3:70:83:f5:d1:b2:0f:bb:63:16:4a:89:14:93:da:
67:49:ae:e8:bc:a1:a4:eb:ff:72:a4:07:48:31:8a:7c:ed:9e:
e8:0a:d7:07:bd:8a:20:0a:06:e9:9a:1c:d8:69:6d:89:5f:4f:
96:3b:83:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:23:35 2024 by rpki-client on console-ams.rpki-client.org