Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/ltEEK_pKHMIS_Hp6Q-bev676iaM.roa
File: ltEEK_pKHMIS_Hp6Q-bev676iaM.roa (raw, json)
Hash identifier: y9+XFSywAmEz4+m857zLoDtp/AUDir6gmxA6h1BGTq0=
Subject key identifier: 96:D1:04:2B:FA:4A:1C:C2:12:FC:7A:7A:43:E6:DE:BF:AE:FA:89:A3
Certificate issuer: /CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Certificate serial: 019132EA5AE81DA35F943E3A8DC30D18458A
Authority key identifier: AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/ltEEK_pKHMIS_Hp6Q-bev676iaM.roa
Signing time: Thu 08 Aug 2024 16:55:05 +0000
ROA not before: Thu 08 Aug 2024 16:55:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51273
IP address blocks: 81.163.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:ea:5a:e8:1d:a3:5f:94:3e:3a:8d:c3:0d:18:45:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb4e04a0ed344112c1853cab09f52e1cd9abaf2
Validity
Not Before: Aug 8 16:55:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96d1042bfa4a1cc212fc7a7a43e6debfaefa89a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:1e:83:73:a4:9d:c6:ff:07:f4:18:ef:2e:
b4:5d:4e:a6:cd:57:1b:d5:68:d1:64:2d:f7:02:a2:
3a:94:3d:22:32:86:2e:be:70:09:db:76:52:d0:04:
55:94:e8:dc:20:53:b4:e1:38:16:85:3a:29:ae:27:
7b:16:f3:0b:0c:4e:60:e3:90:d6:e2:cf:69:fe:f0:
ef:35:e5:a3:f8:d4:d9:be:bd:da:ab:1b:cc:25:7f:
be:2a:2b:b7:90:de:3e:32:ba:e4:d3:d3:7b:98:f8:
1b:b0:65:12:a8:32:7c:23:7e:f4:35:22:3a:65:16:
dd:fd:f9:6d:ca:52:19:90:35:71:71:1c:f7:96:82:
dd:3e:69:d1:64:58:95:64:21:5d:0d:62:c5:17:ca:
64:94:eb:47:5f:6c:3c:cf:ec:c3:8d:e8:d8:9a:a1:
eb:58:0a:4f:8e:cf:2e:4d:e3:bb:59:e8:dd:13:c6:
29:b8:de:8b:e4:4f:a7:11:79:a0:c5:be:0e:8b:8a:
6b:2d:74:d0:b5:9c:a7:eb:99:2d:b3:d0:8b:db:0c:
9e:ea:e8:22:1c:62:3e:2e:66:d4:89:66:50:cd:2c:
6c:bb:8c:dd:0b:c9:9b:87:6e:12:e2:5b:f7:87:38:
df:67:46:1c:74:c6:f4:3b:8e:eb:95:b1:de:83:b4:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D1:04:2B:FA:4A:1C:C2:12:FC:7A:7A:43:E6:DE:BF:AE:FA:89:A3
X509v3 Authority Key Identifier:
keyid:AF:B4:E0:4A:0E:D3:44:11:2C:18:53:CA:B0:9F:52:E1:CD:9A:BA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7TgSg7TRBEsGFPKsJ9S4c2auvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/ltEEK_pKHMIS_Hp6Q-bev676iaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/19f2e6-1bf3-4f7a-8817-8095f3297179/1/r7TgSg7TRBEsGFPKsJ9S4c2auvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.212.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:1c:9f:de:d3:8c:06:bb:33:90:9d:01:78:76:7b:4b:bc:34:
71:a2:11:2f:ab:a6:51:ef:83:2d:bd:c6:d1:d2:d7:99:8a:0d:
fd:ea:ca:19:49:37:71:62:3a:85:7c:72:df:15:f9:c1:e2:d4:
42:d9:14:e1:a0:37:65:10:f2:c9:f0:29:f6:8a:ca:00:3f:0b:
45:08:dc:cb:49:cb:95:46:ff:a1:36:e0:d6:13:d5:69:77:fb:
a1:45:97:75:86:62:ac:9b:a4:03:2d:3e:df:f9:a5:5e:00:ac:
b1:8f:5d:30:18:99:c6:4b:fb:34:b9:de:5a:7b:c7:f4:da:3f:
f9:58:b2:a2:48:c1:99:3c:21:53:f6:01:5c:13:d1:29:32:73:
86:ed:4f:02:81:ac:25:e7:80:c0:0f:54:1e:63:29:9f:fd:fb:
14:1c:b6:62:23:05:6d:62:68:f9:cb:25:47:99:be:01:e4:16:
d2:3b:7e:92:fc:26:d4:ec:f8:cd:e4:90:ec:8e:23:d6:51:a9:
ec:15:66:a7:00:99:21:11:76:e1:b9:36:2a:2d:ef:54:bb:90:
bc:1a:2f:8d:0d:5f:e0:dc:e3:5e:6a:6b:44:e5:17:56:3d:56:
c4:83:f4:69:f4:ad:e7:35:9e:a0:88:57:08:28:bd:ed:d9:e8:
9f:bf:aa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:18 2024 by rpki-client on console-fra.rpki-client.org