Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/DlOw57lnt6kWJj1G5OVjPNP-dmI.roa
File: DlOw57lnt6kWJj1G5OVjPNP-dmI.roa (raw, json)
Hash identifier: n63XiTXntkzxg0b8N428Z98KUY0F6V6L2hdrtAyl7Zo=
Subject key identifier: 0E:53:B0:E7:B9:67:B7:A9:16:26:3D:46:E4:E5:63:3C:D3:FE:76:62
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 018CC3B6A7EE0B0B559F51124084D72B1699
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/DlOw57lnt6kWJj1G5OVjPNP-dmI.roa
Signing time: Mon 01 Jan 2024 06:29:36 +0000
ROA not before: Mon 01 Jan 2024 06:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213039
IP address blocks: 81.163.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a7:ee:0b:0b:55:9f:51:12:40:84:d7:2b:16:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Jan 1 06:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e53b0e7b967b7a916263d46e4e5633cd3fe7662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:36:e4:7f:53:74:62:15:c9:9e:0b:d3:19:
8a:52:af:04:b5:45:69:05:06:7a:d7:d9:95:9e:cc:
d3:94:cb:12:c7:14:a6:e1:d4:67:ce:37:5c:60:10:
3e:1e:69:98:8e:04:bf:4b:d3:22:9f:01:d9:f1:34:
a3:97:39:a6:69:09:43:02:83:a6:8a:94:1b:ff:61:
b3:dc:80:aa:68:e8:45:9a:f2:bf:c4:4b:21:9f:17:
9a:45:b0:b6:23:90:d2:ce:f8:e9:c5:08:82:da:c3:
69:a1:a4:09:08:a1:db:e3:c3:33:db:ed:54:b5:e8:
11:ef:01:02:bd:f8:90:49:63:9f:ba:c4:02:8d:24:
80:83:d5:50:db:44:47:1e:b9:18:96:b2:45:bb:99:
8d:1e:f2:5a:ce:70:bf:04:37:f6:0b:1e:82:3b:e5:
6f:3a:b0:06:fb:2e:e7:2c:a3:54:37:ec:d4:04:55:
ed:a8:4d:bc:21:05:aa:bb:28:93:eb:a0:10:02:f8:
1b:e7:6e:a5:16:b0:a8:4a:97:1d:8b:c6:13:62:43:
a4:5c:18:58:be:f4:a0:32:83:8c:91:e8:bd:38:a7:
35:a0:a1:e1:c0:b5:4c:6d:18:e8:3f:64:41:76:05:
24:3e:17:66:5b:76:13:2d:10:e9:31:7d:f9:31:45:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:53:B0:E7:B9:67:B7:A9:16:26:3D:46:E4:E5:63:3C:D3:FE:76:62
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/DlOw57lnt6kWJj1G5OVjPNP-dmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e9:a1:b9:a6:da:33:29:d7:8b:b5:43:6d:29:87:fa:8e:64:
31:c8:9f:2a:2e:01:d2:8c:e7:d0:bf:5a:bb:be:b5:99:84:98:
fb:0e:b0:f4:3e:f4:4e:cb:cc:20:d2:7d:7f:76:10:86:f8:fa:
ba:47:dc:1e:07:70:24:92:8e:40:b2:6c:5c:22:9e:5e:bf:d5:
53:f9:d8:c8:fa:b9:35:2f:c7:a5:36:c8:70:ec:12:a2:29:6d:
21:c8:fe:d9:8f:4b:ab:c4:09:f7:bf:3f:ee:25:06:a1:70:a8:
67:03:1c:b0:54:93:d9:03:5a:89:70:85:f6:f3:93:30:cc:a8:
80:81:5d:b9:3d:8d:12:fa:34:5d:b8:7e:8d:41:1a:d1:e9:ca:
f3:58:6e:7a:3d:52:a9:6f:d8:45:8f:22:b6:e0:4f:ae:65:fb:
49:36:ac:d4:1c:f3:e9:57:0e:c7:23:45:01:6e:67:fc:0d:83:
6c:30:4e:a2:a5:89:26:c4:39:c2:cf:b2:f4:34:79:ca:cb:ca:
b7:73:08:74:51:fb:7a:54:85:ba:df:79:11:9f:41:81:4c:06:
94:f8:e3:c6:a6:9b:2b:e8:2c:35:cf:b7:5e:c5:5a:cb:e9:e4:
8c:ac:16:4e:ec:72:73:35:ef:8e:93:6d:83:d4:63:71:e3:28:
64:94:86:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:08:30 2024 by rpki-client on console-ams.rpki-client.org