Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/q6VJWTp2SRcZqozvm-ClgQCoFA4.roa
File: q6VJWTp2SRcZqozvm-ClgQCoFA4.roa (raw, json)
Hash identifier: d6EoZCQnTAN8Xdu63QE/zW0ntRtadvWrWksOoGn0QSE=
Subject key identifier: AB:A5:49:59:3A:76:49:17:19:AA:8C:EF:9B:E0:A5:81:00:A8:14:0E
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CC79529B79C30E8B3975066D045BDC6BA
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/q6VJWTp2SRcZqozvm-ClgQCoFA4.roa
Signing time: Tue 02 Jan 2024 00:31:30 +0000
ROA not before: Tue 02 Jan 2024 00:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202376
IP address blocks: 81.25.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:29:b7:9c:30:e8:b3:97:50:66:d0:45:bd:c6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 00:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aba549593a76491719aa8cef9be0a58100a8140e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7c:df:47:a9:e5:6e:41:f5:01:1d:f0:79:f4:
53:f8:57:05:77:ff:26:57:5e:f6:ae:58:b0:d8:b7:
c1:45:05:ce:d8:b0:6b:76:10:c8:61:ba:53:d3:2b:
9d:3d:51:5f:58:3e:96:f9:f4:b3:50:ae:fb:f9:55:
c5:2f:00:41:a7:d2:68:61:49:ac:eb:56:76:53:64:
c6:1f:b4:7e:d0:94:9b:67:37:37:27:2e:b3:ac:19:
2b:fa:00:8f:a7:73:f4:2a:c3:f4:2d:57:4f:ec:e8:
92:77:9c:ac:cf:a2:f0:b6:8c:05:52:36:68:45:9b:
66:ac:43:ec:88:0e:91:97:30:10:dd:3b:1e:83:e6:
5f:48:ca:dc:77:21:5b:d5:48:95:4f:df:cd:b8:52:
fc:18:c7:86:15:43:c1:68:2f:45:67:33:45:e3:27:
20:76:ab:d1:97:b4:b5:54:a4:07:72:f6:9a:82:2f:
a2:c7:4b:44:16:6c:20:51:ee:87:d9:d8:dd:b5:6c:
56:1d:1c:ef:72:96:37:7d:d4:c1:9a:17:0d:16:c1:
bf:6c:92:57:dc:ae:e9:a0:41:95:62:b7:2e:4f:67:
5a:be:27:2b:b7:cc:38:a7:62:45:2e:af:07:48:30:
10:02:be:6e:42:96:76:9f:9f:1c:40:8d:4b:fa:ae:
19:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A5:49:59:3A:76:49:17:19:AA:8C:EF:9B:E0:A5:81:00:A8:14:0E
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/q6VJWTp2SRcZqozvm-ClgQCoFA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.69.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a5:38:c3:b4:4e:fd:34:32:ab:5b:84:d1:38:10:8b:23:e3:
dd:3c:27:58:4f:43:47:41:1c:c5:57:4e:76:34:a2:11:a7:16:
2b:d9:75:63:09:82:20:43:04:f2:ce:8d:f8:63:dd:90:5a:5e:
c4:d7:a7:9a:4e:f1:37:f3:0e:1e:90:c7:90:3c:88:08:41:47:
af:39:ab:5c:05:1f:d7:06:ad:2d:72:b6:5b:90:86:60:a4:65:
6a:4b:9d:d0:eb:bb:1c:8f:f5:ba:42:1e:26:57:cf:1b:46:31:
6c:15:be:be:38:a8:35:63:97:0e:42:40:a8:27:9d:9e:0f:8b:
75:0a:e2:f0:86:f8:b9:cd:6e:7f:49:fd:56:9b:84:92:87:34:
14:29:d1:2b:6c:79:8c:98:1d:78:d9:81:ae:75:45:12:a1:13:
a1:d4:46:a8:9f:66:5a:c1:52:5a:6f:18:e9:4f:77:47:f1:1d:
af:09:b4:07:07:7f:59:c7:94:08:83:da:c0:10:b8:62:02:ce:
01:4c:f9:67:ab:ed:dd:21:1d:23:7c:96:2a:45:00:04:28:87:
f4:d5:f0:40:4f:23:89:af:90:25:44:dc:8a:fa:e7:cb:2f:cd:
4b:3c:cb:7b:32:d1:d4:49:77:9d:db:12:37:94:06:28:e1:cc:
08:ed:1a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:50:14 2024 by rpki-client on console-fra.rpki-client.org