Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/Irje-HhBRXWI-E0JO8haxhdN8UY.roa
File: Irje-HhBRXWI-E0JO8haxhdN8UY.roa (raw, json)
Hash identifier: Q3LMPf4TNmst7Nwa54SbF8QZlU1Fvg/n3vmdBjUpjM0=
Subject key identifier: 22:B8:DE:F8:78:41:45:75:88:F8:4D:09:3B:C8:5A:C6:17:4D:F1:46
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 018CC64B6C82EE538FE56CFBA3D363D433A6
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/Irje-HhBRXWI-E0JO8haxhdN8UY.roa
Signing time: Mon 01 Jan 2024 18:31:20 +0000
ROA not before: Mon 01 Jan 2024 18:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20709
IP address blocks: 81.17.137.0/24 maxlen: 24
81.17.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:6c:82:ee:53:8f:e5:6c:fb:a3:d3:63:d4:33:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jan 1 18:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22b8def87841457588f84d093bc85ac6174df146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:f3:f9:14:5e:d7:3e:18:34:67:b2:c7:2b:
1a:81:44:f4:44:31:aa:3c:ff:73:8d:97:95:79:09:
8d:a0:78:76:0d:7b:27:db:96:5e:74:ef:01:76:28:
33:10:da:0f:e9:7d:98:74:f5:af:92:8f:4d:51:f6:
a1:c3:60:58:0a:88:d9:75:89:f8:77:1c:0f:05:81:
05:1d:ee:33:45:15:ce:86:79:fa:64:b3:27:dd:16:
28:78:eb:63:91:fb:f4:be:4b:f0:3a:34:61:1e:a4:
0b:2e:60:01:dc:2f:0e:36:78:99:56:17:be:00:51:
e8:07:45:a4:1d:1a:f8:e2:31:a9:d7:52:ec:6e:4d:
30:b6:08:28:f9:1f:b3:28:44:da:3d:79:1d:24:b6:
7c:81:70:e5:7f:0f:ef:03:36:df:f1:a9:8b:6f:2c:
8a:cc:74:31:1e:ca:d6:45:d2:9f:ee:1a:e8:7c:d1:
5a:2d:35:8f:12:8a:48:e0:c7:4b:23:2c:df:39:a4:
f8:77:19:31:84:66:3a:9f:08:51:6f:3d:37:ca:ee:
73:7e:c0:41:3d:46:66:d7:82:e3:99:2a:3c:c2:5d:
09:f7:ce:71:b0:79:6c:0b:c4:b1:e7:cf:b1:31:b5:
0b:0a:f1:13:56:c8:6c:27:b3:7e:e3:77:d5:82:fc:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B8:DE:F8:78:41:45:75:88:F8:4D:09:3B:C8:5A:C6:17:4D:F1:46
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/Irje-HhBRXWI-E0JO8haxhdN8UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.137.0/24
81.17.143.0/24
Signature Algorithm: sha256WithRSAEncryption
14:bd:f5:10:6b:44:61:70:4d:79:29:05:31:bb:5f:83:fd:49:
ee:49:86:8f:bd:35:2b:52:b6:75:c2:16:f2:66:4c:b1:14:7b:
b9:f7:5e:8d:a5:1d:29:b4:51:6d:89:72:67:16:56:9e:15:52:
55:80:b1:6e:f6:5b:81:f4:c6:75:e8:8a:9b:cd:52:cf:6c:72:
43:33:c7:5a:97:1d:ae:b3:dc:7f:ac:23:d2:70:b9:05:ba:ac:
b7:c0:23:a4:f4:fd:c0:4b:5e:d0:34:80:0e:1d:f6:64:0d:af:
86:f7:d8:83:e9:22:5e:33:c7:49:20:28:87:a6:33:6d:dc:08:
28:5e:b2:93:bb:1a:4a:56:06:a2:ab:99:7f:97:61:05:69:a7:
9c:ee:0c:59:ec:54:e5:e3:14:7d:08:4d:b5:d3:8c:d4:30:a3:
51:1a:9f:44:87:33:94:f8:f7:3f:89:02:c1:9d:68:ae:04:e7:
c7:ef:c1:b1:bb:6a:a2:c8:d8:8e:24:58:19:4c:44:4b:26:d8:
a6:71:05:6c:3a:f5:6a:0a:6d:74:79:a1:4a:61:ea:40:7d:fa:
85:51:d9:ac:da:1c:ec:6b:13:6f:fa:d2:53:fa:eb:ec:ce:21:
ff:85:69:75:4c:ac:34:33:7b:77:74:a9:d6:35:81:e8:d7:45:
a9:b1:05:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:40 2024 by rpki-client on console-ams.rpki-client.org