Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/RKa--eZy19HSrkrC05R1g8DOZVM.roa
File: RKa--eZy19HSrkrC05R1g8DOZVM.roa (raw, json)
Hash identifier: YFXiGbrLMd5bndumvcrP9gXzPaxNmg6IMovI631LLa0=
Subject key identifier: 44:A6:BE:F9:E6:72:D7:D1:D2:AE:4A:C2:D3:94:75:83:C0:CE:65:53
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 018CC56E29B232D2E4AB1F442240427D41B2
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/RKa--eZy19HSrkrC05R1g8DOZVM.roa
Signing time: Mon 01 Jan 2024 14:29:40 +0000
ROA not before: Mon 01 Jan 2024 14:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 217.119.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:29:b2:32:d2:e4:ab:1f:44:22:40:42:7d:41:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Jan 1 14:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44a6bef9e672d7d1d2ae4ac2d3947583c0ce6553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:11:52:2d:ce:a4:63:08:ff:4b:ee:c8:1f:61:
b9:f2:a7:71:ea:0c:d8:d8:78:0a:b8:38:9c:bc:d8:
35:09:5c:cd:59:c6:b7:36:0a:28:6c:7d:04:2e:e8:
69:eb:48:a1:ab:1b:3a:8d:12:16:d9:49:68:66:87:
7e:c3:d6:67:8a:36:cf:31:0a:fb:46:0c:a5:7f:9c:
aa:16:68:19:4f:30:35:1a:0c:71:10:40:25:91:4d:
5a:ff:35:65:77:3c:fd:f5:66:db:51:f4:96:d2:13:
84:53:b8:8c:c1:92:5f:d6:e5:3f:5f:79:10:bc:32:
fb:fc:54:79:80:ec:a4:ce:76:1c:3c:34:cb:40:e1:
f2:eb:eb:2f:93:ca:6c:86:83:2c:d7:59:1e:a3:9e:
d9:aa:4a:61:81:1c:06:00:91:7d:95:48:67:b2:d0:
b3:15:4e:26:0b:01:3e:74:64:c4:18:18:01:ba:cb:
fe:36:10:aa:5f:96:94:28:da:5e:d2:f3:81:59:27:
90:f7:52:7f:1e:e0:72:61:a0:b5:22:6b:38:83:5b:
db:b1:3f:75:64:d3:5a:4f:ee:5a:9d:18:49:80:80:
eb:14:ac:f8:42:b9:ec:a9:09:9e:c6:54:2d:be:c2:
df:0b:9e:a9:6f:f2:ff:89:3c:8d:a7:ce:d6:5c:28:
b3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A6:BE:F9:E6:72:D7:D1:D2:AE:4A:C2:D3:94:75:83:C0:CE:65:53
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/RKa--eZy19HSrkrC05R1g8DOZVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.132.0/24
Signature Algorithm: sha256WithRSAEncryption
13:41:cd:c3:f7:a8:bc:0c:91:4a:d4:c4:2d:ae:eb:d3:24:02:
db:2a:9c:93:10:47:68:9c:c6:51:48:47:48:c8:fe:79:4b:72:
8a:27:fe:ba:de:ed:d3:e9:0e:82:a6:ef:34:04:9f:d7:ef:3d:
d8:5e:18:26:1b:72:e7:b6:e0:86:1d:cf:02:bc:0d:87:58:88:
f5:14:f5:0b:1d:7a:f6:2c:66:d7:77:14:e8:95:c7:aa:56:aa:
ee:45:22:e9:be:80:ae:11:1f:6d:dc:e3:8c:89:5f:14:97:ed:
36:6f:be:a1:d7:45:49:c4:f3:51:ea:59:4e:71:f9:a3:c9:47:
44:f1:fd:dd:9c:c1:21:07:94:4f:ac:13:97:b7:8f:09:bb:7b:
f5:33:55:56:b1:4e:11:f0:6c:f0:f2:1e:0c:fe:6c:7c:e8:ae:
f3:d4:77:c2:f3:31:23:dc:2b:78:0d:98:92:44:ae:1a:80:9c:
62:03:5f:b0:8e:0c:2e:e7:ba:2e:fa:29:3e:74:87:57:f0:7a:
e0:40:5c:04:e1:bc:e9:d6:96:e6:9a:d6:03:5f:58:27:a9:b4:
7f:79:a8:66:51:ad:ea:a0:d5:5a:76:53:4e:84:3f:59:18:87:
df:5f:e3:97:0b:b7:a2:be:e8:4d:17:34:1c:9d:d2:c9:03:17:
d5:f5:6d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:07:42 2024 by rpki-client on console-ams.rpki-client.org