Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/2rk-wig0NSg4teptDJQwpEBmsaE.roa
File: 2rk-wig0NSg4teptDJQwpEBmsaE.roa (raw, json)
Hash identifier: hHVIzwE+eMFffINWLYhCmBSeRAWs6Iqm9qAIoqonEdM=
Subject key identifier: DA:B9:3E:C2:28:34:35:28:38:B5:EA:6D:0C:94:30:A4:40:66:B1:A1
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 018CC64B6D6405678C4DDC83CE17F7E27581
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/2rk-wig0NSg4teptDJQwpEBmsaE.roa
Signing time: Mon 01 Jan 2024 18:31:20 +0000
ROA not before: Mon 01 Jan 2024 18:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21437
IP address blocks: 81.17.128.0/24 maxlen: 24
81.17.132.0/24 maxlen: 24
81.17.131.0/24 maxlen: 24
81.17.135.0/24 maxlen: 24
81.17.134.0/24 maxlen: 24
81.17.139.0/24 maxlen: 32
81.17.133.0/24 maxlen: 24
81.17.138.0/24 maxlen: 24
81.17.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:6d:64:05:67:8c:4d:dc:83:ce:17:f7:e2:75:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jan 1 18:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dab93ec22834352838b5ea6d0c9430a44066b1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:df:7a:4c:69:4c:a9:1a:f9:9b:94:7f:e2:
6b:9a:53:90:4c:eb:fe:d9:0c:72:3d:37:18:19:fa:
44:ff:ba:0e:3d:1b:1e:3c:32:55:72:b8:6b:23:a7:
9e:90:b9:74:fe:85:7f:14:f4:1f:3d:cc:85:77:41:
a2:c1:d6:18:47:1a:13:6f:17:42:0a:b5:5b:a4:d5:
c7:7a:de:e2:ed:78:fc:18:7f:97:74:92:97:a8:ac:
c7:b0:6c:96:a1:df:fc:35:16:e2:d3:78:5c:01:13:
75:00:c4:3d:9f:28:d1:39:bc:23:1f:80:04:d4:e9:
47:be:be:a7:11:da:b1:ec:37:fc:c2:5b:ec:bd:71:
b7:8e:4d:97:57:8b:7f:47:7c:f1:07:f4:4f:cf:e0:
e1:65:49:37:37:f3:e8:ce:2d:bd:54:d6:70:a9:b7:
b7:cf:38:a9:25:c7:e5:0b:84:19:0c:14:3c:df:72:
51:c5:12:50:31:03:fb:45:f4:85:f8:6f:03:56:49:
04:22:2b:46:8d:f3:6e:83:0a:7c:d3:20:25:e4:a4:
22:bf:52:35:a1:d4:b1:7f:6f:8c:3e:9c:32:8a:af:
e6:ff:46:d9:23:33:15:3d:a4:fe:07:65:2a:af:6a:
c5:1c:8e:42:4b:43:6e:ee:82:a4:02:90:6f:ca:41:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B9:3E:C2:28:34:35:28:38:B5:EA:6D:0C:94:30:A4:40:66:B1:A1
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/2rk-wig0NSg4teptDJQwpEBmsaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.128.0/24
81.17.131.0-81.17.136.255
81.17.138.0/23
Signature Algorithm: sha256WithRSAEncryption
77:66:8c:05:21:b3:d2:bc:27:7e:94:48:de:33:c7:76:51:69:
83:7a:19:29:2c:e9:89:24:b4:a4:50:be:37:19:4d:53:98:99:
6a:41:85:0c:58:ee:c3:75:f4:06:8d:93:b2:a3:f4:66:9a:ea:
23:d2:a7:03:73:ac:69:23:11:ef:a2:af:31:be:58:d5:10:ac:
43:26:df:b8:01:63:19:24:21:d7:0c:e1:26:ea:54:f8:65:f6:
2e:36:d4:39:89:41:02:9a:f6:fa:e2:46:09:da:3c:4f:b6:cd:
fe:c2:0c:d1:66:f2:c2:e1:33:bd:f4:6e:a3:08:fd:2e:03:4e:
f0:eb:79:ba:18:46:47:dc:bb:72:01:ad:8b:bc:ed:b6:c8:76:
34:56:91:a7:5a:f0:17:dd:71:48:0a:83:d6:50:48:84:44:22:
ca:35:ba:02:a1:ec:9a:85:86:e5:ef:26:84:4b:c4:e9:5e:0c:
b2:eb:8f:be:6a:09:d6:90:8d:b9:9d:26:89:c5:81:07:2e:3e:
8a:7f:7b:0b:46:12:e4:e5:10:e8:8c:db:13:9c:3f:9c:7a:99:
bb:08:b3:53:69:22:24:51:e9:23:7c:70:0f:00:8c:97:11:72:
63:80:4c:56:7d:ff:c5:97:ab:a5:b9:65:df:09:dc:36:56:20:
29:8d:f4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:14:52 2024 by rpki-client on console-ams.rpki-client.org