Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/K1hUaZ9t94wCaJ85ou86e9OCJ8w.roa
File: K1hUaZ9t94wCaJ85ou86e9OCJ8w.roa (raw, json)
Hash identifier: mHu+sbh3Z1C+7N/sOdEV0yoi+8bQ7UDNy+L/vRTNjG8=
Subject key identifier: 2B:58:54:69:9F:6D:F7:8C:02:68:9F:39:A2:EF:3A:7B:D3:82:27:CC
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EEFB787AE53404B4475D93D0E0C2C495B
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/K1hUaZ9t94wCaJ85ou86e9OCJ8w.roa
Signing time: Thu 18 Apr 2024 05:39:26 +0000
ROA not before: Thu 18 Apr 2024 05:39:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24789
IP address blocks: 81.16.80.0/20 maxlen: 20
81.25.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ef:b7:87:ae:53:40:4b:44:75:d9:3d:0e:0c:2c:49:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 18 05:39:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b5854699f6df78c02689f39a2ef3a7bd38227cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:45:ec:bd:f2:3f:c8:48:84:60:84:92:dd:5d:
9f:95:6d:ce:eb:63:1a:3b:b2:24:fa:e4:62:a6:78:
54:16:66:42:64:75:0d:35:a2:af:11:52:d7:9a:c3:
8a:d6:39:da:03:fa:06:ec:04:cd:88:1b:f5:fd:b8:
be:9f:42:01:fe:19:2c:09:9a:ff:f3:c7:04:68:99:
ad:2c:8c:1f:06:24:1e:56:25:55:3b:e2:1b:78:d3:
2c:60:47:8c:04:09:8c:a3:f0:31:c9:ce:9b:24:6c:
99:27:0c:2c:b2:69:1f:d1:15:dd:04:3f:af:b8:c0:
9b:0b:63:23:de:0d:ac:14:77:15:0a:15:df:bd:8d:
e6:6c:a2:44:57:5d:c0:97:74:2c:ce:66:ca:57:d4:
1b:47:1d:8b:11:02:89:4d:2b:52:f9:c5:d6:44:e0:
81:3c:26:18:36:8b:07:ac:74:e7:07:00:91:18:5d:
ff:26:50:17:f2:2e:a3:cc:9e:95:63:f2:db:1a:44:
b0:48:ab:08:b8:9a:29:74:75:00:1c:d8:a7:21:43:
eb:c0:d6:ef:af:f7:c5:75:2a:a3:42:2d:94:0e:6c:
90:5a:c0:89:ed:c9:cb:af:ce:39:bf:cd:a5:68:8d:
06:d6:0f:5d:6c:02:f1:43:45:14:d9:0e:aa:5c:2d:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:58:54:69:9F:6D:F7:8C:02:68:9F:39:A2:EF:3A:7B:D3:82:27:CC
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/K1hUaZ9t94wCaJ85ou86e9OCJ8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.80.0/20
81.25.0.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:d0:9b:30:96:b3:e7:c4:50:d0:aa:cc:d0:bc:1d:06:fb:18:
0b:ad:30:31:de:25:68:57:bb:8b:14:8b:98:e8:13:db:c6:40:
40:1b:43:e5:79:3b:6b:9c:b8:74:dc:79:8b:11:13:40:51:f4:
7d:de:91:d9:7b:9c:0e:d4:e1:0e:70:da:af:d7:ba:3e:42:4c:
ae:ee:71:8a:d9:21:b7:17:e6:c6:63:04:6e:33:58:a1:17:b4:
74:00:34:19:62:34:99:45:6a:90:e0:0f:f1:87:72:e9:8c:b2:
7f:8d:ff:c5:6c:70:05:66:8e:9a:aa:d7:5f:31:11:f4:40:81:
ca:f0:97:93:8c:cd:a0:a1:1e:6e:47:e1:48:45:fc:bf:21:b9:
71:a6:cf:36:3e:d9:75:5b:54:7c:bf:6f:c5:0f:64:ab:56:41:
12:81:f0:45:3b:17:12:fd:89:10:5f:cc:3f:87:bf:d8:42:3a:
8e:85:a1:92:5a:07:ae:c2:ce:3d:c3:94:49:e4:3f:58:77:7c:
29:6d:96:22:2a:31:1b:bc:9d:23:c9:8b:f0:4c:68:9e:f4:71:
8b:49:b3:86:77:3f:d3:da:62:b0:34:d3:c3:7a:ff:f1:5e:09:
2d:e4:e1:53:6d:2e:fd:b4:e3:dc:23:86:fc:c8:db:15:b5:89:
a8:a4:b7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:49:03 2024 by rpki-client on console-fra.rpki-client.org