Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/UNlEBfw4q0YKLAYn4Xau-hcOM38.roa
File: UNlEBfw4q0YKLAYn4Xau-hcOM38.roa (raw, json)
Hash identifier: UFrY5a3UZEHVqB/56k6JcfGTiK0RgYNfsuOweJ8n6z0=
Subject key identifier: 50:D9:44:05:FC:38:AB:46:0A:2C:06:27:E1:76:AE:FA:17:0E:33:7F
Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial: 018D36A0E92D82D6C49E620756C11548DA02
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/UNlEBfw4q0YKLAYn4Xau-hcOM38.roa
Signing time: Tue 23 Jan 2024 14:02:11 +0000
ROA not before: Tue 23 Jan 2024 14:02:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41616
IP address blocks: 81.163.80.0/24 maxlen: 24
81.163.81.0/24 maxlen: 24
81.163.82.0/24 maxlen: 24
81.163.83.0/24 maxlen: 24
81.163.84.0/24 maxlen: 24
81.163.85.0/24 maxlen: 24
81.163.86.0/24 maxlen: 24
81.163.87.0/24 maxlen: 24
91.247.152.0/24 maxlen: 24
91.247.153.0/24 maxlen: 24
91.247.154.0/24 maxlen: 24
91.247.155.0/24 maxlen: 24
91.247.156.0/24 maxlen: 24
91.247.157.0/24 maxlen: 24
91.247.158.0/24 maxlen: 24
91.247.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:a0:e9:2d:82:d6:c4:9e:62:07:56:c1:15:48:da:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Validity
Not Before: Jan 23 14:02:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50d94405fc38ab460a2c0627e176aefa170e337f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:4c:69:68:a3:00:65:bd:ce:f3:af:4f:72:
dd:0b:63:ea:ca:b7:b1:28:f7:88:d2:77:96:21:da:
d2:3f:f0:75:7c:1b:53:ae:5d:88:dc:4e:fb:84:c3:
58:44:2f:af:85:35:c8:6e:3c:b2:98:7d:11:04:30:
d7:8a:ef:fc:da:b2:86:c5:cf:38:ec:55:61:ba:49:
09:1f:88:b7:8b:1a:64:13:52:59:e5:60:5f:2e:52:
b0:2e:8e:e1:a2:5a:81:b1:6d:34:79:42:eb:32:65:
f0:61:52:2c:40:33:86:a7:ae:72:61:d7:a9:48:20:
03:cf:d5:14:96:31:c3:ee:80:ad:81:46:c4:b1:e3:
26:59:ee:34:43:8c:98:bc:b7:7f:0e:6f:eb:10:8f:
48:32:1b:8d:2f:6c:d2:a1:54:cc:94:32:2b:a1:75:
7e:c1:53:7b:67:bb:47:e3:6e:d8:90:1b:eb:e2:78:
14:27:35:23:9a:8c:a2:18:3f:75:3a:27:22:aa:36:
eb:c5:6f:67:57:57:aa:c9:74:d4:31:28:8e:0c:51:
cf:16:9d:9f:35:5a:4c:2c:a3:84:34:74:41:1f:77:
cb:76:89:83:f7:56:37:f2:b3:7b:87:f8:57:b9:0b:
c6:78:76:19:6a:29:26:97:d6:77:74:0c:ca:b6:c2:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D9:44:05:FC:38:AB:46:0A:2C:06:27:E1:76:AE:FA:17:0E:33:7F
X509v3 Authority Key Identifier:
keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/UNlEBfw4q0YKLAYn4Xau-hcOM38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.80.0/21
91.247.152.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:29:9e:dc:89:f4:31:a1:85:d2:9a:e7:67:fe:f4:77:1b:d1:
0e:3a:2b:5b:f8:d8:bc:33:32:bd:7b:13:6d:a5:2f:d6:31:23:
10:73:9f:c6:86:f1:d3:3b:b5:2f:62:8f:d3:89:f0:4e:25:00:
12:ae:b8:6a:dd:54:43:f4:66:43:ce:b1:32:5d:b9:b3:ae:41:
34:36:d6:92:ea:57:52:7f:cb:80:11:b0:96:66:91:ef:73:49:
10:48:6a:0c:ae:6e:c9:28:33:29:a4:3f:4c:07:3d:2d:a1:aa:
3c:44:fb:7d:13:35:ed:58:43:ef:8b:b6:cd:a0:0c:42:fd:31:
04:b5:f2:dc:0a:cc:e9:e8:46:81:87:3f:c0:c7:88:13:01:51:
58:9a:22:b0:8a:7b:e3:31:bb:4e:b2:ea:ff:c5:3e:4f:19:29:
73:d6:46:24:24:97:a8:e4:39:79:6f:a3:90:f7:04:bf:e8:8f:
20:dc:1c:15:78:fd:95:6f:a2:28:68:0b:ec:10:7c:59:88:63:
7e:b0:6a:4b:f1:bd:9d:be:2e:81:3e:11:6b:79:a8:34:65:fc:
0f:33:03:66:c0:b8:ad:93:06:bd:99:29:63:a6:77:0c:68:9f:
7a:87:2c:c7:9c:b5:d0:11:be:ed:b5:28:aa:41:22:e4:12:3f:
f6:2f:83:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:50 2024 by rpki-client on console-fra.rpki-client.org