Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/AdmM0H_ucz2GFbG4RWUZDqCMNNw.roa
File: AdmM0H_ucz2GFbG4RWUZDqCMNNw.roa (raw, json)
Hash identifier: eUM3yGYH590NsHCLDLaIYq5tCXV1150M2ebK5rOWOns=
Subject key identifier: 01:D9:8C:D0:7F:EE:73:3D:86:15:B1:B8:45:65:19:0E:A0:8C:34:DC
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018DCBC5B76A8C6FF2BAA741908A47E76D86
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/AdmM0H_ucz2GFbG4RWUZDqCMNNw.roa
Signing time: Wed 21 Feb 2024 13:05:48 +0000
ROA not before: Wed 21 Feb 2024 13:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47216
IP address blocks: 213.176.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cb:c5:b7:6a:8c:6f:f2:ba:a7:41:90:8a:47:e7:6d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 21 13:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01d98cd07fee733d8615b1b84565190ea08c34dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:c7:7c:70:0b:b8:c6:2a:54:77:48:5c:84:
5e:ea:f8:98:2c:43:4b:71:8a:d8:22:34:f6:96:39:
0d:0e:58:c1:48:4d:36:8d:c6:01:44:e9:20:9f:6d:
80:7e:87:ad:b5:b5:77:80:a8:12:42:58:54:ef:28:
c2:b1:13:6b:29:5e:1f:a6:dc:a0:88:a5:df:9c:0c:
9f:99:d9:85:20:5a:58:b7:1a:f0:33:54:b9:58:89:
4c:b9:c9:28:fd:e0:ac:39:5b:17:15:0a:f2:1d:83:
c1:ff:8a:8a:ef:7a:cd:01:61:73:92:a1:3a:34:3f:
cd:79:ab:41:1a:9b:71:de:1c:6a:9d:0b:5a:0b:5d:
42:20:52:13:9d:65:c4:50:64:c0:2b:f0:ae:e8:3c:
34:f1:43:e7:ca:93:59:7c:1b:12:31:fd:89:df:a8:
0c:fb:12:19:6c:4a:3d:5e:41:8d:b1:1e:a7:94:f7:
fe:ed:77:be:a2:3e:94:b7:ec:eb:d6:07:7e:4e:7e:
63:56:6e:29:d0:29:5b:84:8e:b8:69:5d:80:e9:2d:
ed:31:8c:d2:9b:f5:7e:b5:e4:29:03:f2:62:bd:ce:
52:1e:d3:df:fc:ba:11:e5:1e:5e:9d:dc:a5:a6:be:
e8:ef:bc:d5:02:1a:48:ac:bb:93:42:74:95:17:26:
e8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D9:8C:D0:7F:EE:73:3D:86:15:B1:B8:45:65:19:0E:A0:8C:34:DC
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/AdmM0H_ucz2GFbG4RWUZDqCMNNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.6.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:b6:30:11:27:2b:8b:6e:96:b4:3a:53:c8:ee:ec:52:de:28:
a9:37:ee:4e:65:5f:e8:01:44:9f:59:21:07:50:f0:8e:f9:79:
cc:cc:0f:bf:12:ba:6c:8e:d1:1b:ad:20:89:f2:3d:39:ae:11:
84:e6:46:c8:65:fb:6a:ec:4d:8e:3c:1a:18:d0:bd:e9:4e:a4:
90:ae:9e:00:31:ea:e0:3d:b0:af:d7:fc:0e:29:0c:0b:25:b1:
02:bf:be:35:1b:1e:5e:1e:be:e5:8d:b1:5c:cd:40:35:21:09:
98:ef:7f:d1:69:1d:b9:08:a3:bb:0a:d1:8e:93:b1:11:02:8d:
73:37:d2:2c:46:bd:44:ce:e9:0a:d6:fd:1a:c3:5d:4c:9e:fb:
f1:e4:08:85:1b:ee:f9:31:c6:cf:45:25:67:d5:73:83:65:55:
e6:2a:93:b1:02:68:fe:7e:84:79:03:1d:6d:64:66:2e:db:8a:
85:78:a1:1a:2c:ae:52:14:90:4a:18:cd:8e:56:36:27:a0:0e:
b5:f6:2b:12:2c:65:45:f5:f6:c4:07:d3:9c:00:cc:15:94:ae:
f3:b9:0d:9b:c5:b5:fc:8a:3b:64:07:d6:3f:de:42:26:cd:0a:
03:37:7d:05:76:57:5d:1c:72:ad:15:ab:dd:9b:62:3d:de:82:
b3:b7:c7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:27:13 2024 by rpki-client on console-ams.rpki-client.org