Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/P-Y6lmlkq2OqEmtWfHWP7CRwauM.roa
File: P-Y6lmlkq2OqEmtWfHWP7CRwauM.roa (raw, json)
Hash identifier: TnG608N+rLbHwmXS5yE7i7OKRTb4Il+4UvDNZkXO97k=
Subject key identifier: 3F:E6:3A:96:69:64:AB:63:AA:12:6B:56:7C:75:8F:EC:24:70:6A:E3
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 018CC9BC8F9E96CBF6AB3056E83E8A73D5DF
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/P-Y6lmlkq2OqEmtWfHWP7CRwauM.roa
Signing time: Tue 02 Jan 2024 10:33:47 +0000
ROA not before: Tue 02 Jan 2024 10:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 213.198.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:8f:9e:96:cb:f6:ab:30:56:e8:3e:8a:73:d5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 10:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fe63a966964ab63aa126b567c758fec24706ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:29:dc:e5:5c:b3:70:58:e9:7d:57:86:8d:
2b:27:52:0e:4b:2e:5f:d4:40:fa:7a:05:28:e2:ba:
6d:87:7e:3f:49:2f:e3:48:32:05:34:16:1e:08:15:
51:63:8f:c9:28:5d:2c:ea:61:57:e0:3e:7c:64:c6:
56:06:8d:8d:5f:5f:42:59:57:fb:7b:b2:56:af:23:
ba:a1:c2:06:88:c7:8b:8e:8f:18:10:25:ec:d8:39:
0e:a8:9a:10:48:28:59:75:d9:b8:6b:f0:bb:a0:34:
ee:f3:82:04:dc:b4:64:35:42:f7:40:78:cf:59:52:
08:f9:bc:9f:be:5e:66:c4:8d:96:54:f8:ed:4d:1b:
e9:ce:b2:48:f7:ce:ef:b3:17:69:1e:36:6f:f7:40:
80:3a:68:ac:34:27:00:45:1b:79:3b:da:d5:ed:8d:
3d:29:0d:2e:0b:8f:dc:8c:7b:b8:ef:0c:b6:cd:52:
4c:7a:3c:cd:0b:99:28:71:7b:99:9d:32:bd:c5:64:
20:4d:ab:68:a8:7a:d0:92:dd:6c:85:bd:c9:33:8e:
80:fe:95:88:6e:75:79:8e:90:ac:96:33:38:47:65:
95:4f:bf:87:18:2e:d8:28:84:24:68:8b:91:c0:98:
bf:73:c4:4f:19:d5:87:a0:25:c2:a9:c4:4f:a1:8a:
b8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E6:3A:96:69:64:AB:63:AA:12:6B:56:7C:75:8F:EC:24:70:6A:E3
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/P-Y6lmlkq2OqEmtWfHWP7CRwauM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.67.0/24
Signature Algorithm: sha256WithRSAEncryption
76:fb:d1:8f:8b:10:d4:ba:fc:4a:5e:67:dc:df:15:fa:75:bc:
fe:0c:e1:dd:8f:98:4e:b0:6b:ee:72:79:c2:ed:22:0d:f6:3d:
91:5c:75:11:fe:06:52:d0:5f:e6:ce:37:8f:37:96:60:aa:e5:
d4:90:f5:bf:49:09:e2:79:a7:25:91:95:eb:0f:87:42:ee:81:
55:9d:4a:be:33:62:ba:d6:d5:52:b5:84:a7:82:0d:52:c3:63:
76:f3:c7:6b:42:fa:87:bb:9e:e8:a5:b0:a4:6c:d7:e4:1f:6f:
24:04:d9:c6:c8:49:22:9a:74:5a:37:a5:86:8d:e0:94:4e:d9:
f6:f0:ad:8f:90:d9:09:dc:1c:fe:be:65:c4:4f:f7:53:ee:85:
63:a8:16:70:9a:22:25:18:75:8d:9a:01:18:b3:ff:69:4a:e5:
9d:a2:15:54:21:38:4e:71:d2:29:ba:bf:eb:0f:fe:c5:99:2f:
92:f5:a1:23:d2:8e:2e:9f:2b:5e:f0:ee:1b:fd:44:66:3f:de:
5e:73:c6:1c:5f:6b:31:bb:e6:2f:0b:5a:95:46:00:15:ae:11:
b0:c0:b3:e1:ee:6a:e1:cb:77:51:4e:92:b9:21:d1:3d:23:af:
80:7d:d5:9b:47:68:36:95:df:d9:3d:d2:cd:d3:dc:0b:da:9c:
f0:b9:12:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:50:30 2024 by rpki-client on console-fra.rpki-client.org