Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/tRXog1vi9wXlUkyoOSBMs2iHWmc.roa
File: tRXog1vi9wXlUkyoOSBMs2iHWmc.roa (raw, json)
Hash identifier: l8KYXlw3zQxh4OGF3/VoRk0CmnafB5DDH1c+W942D5g=
Subject key identifier: B5:15:E8:83:5B:E2:F7:05:E5:52:4C:A8:39:20:4C:B3:68:87:5A:67
Certificate issuer: /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial: 018CC50005CF831D601C1F431ACCE2A66A18
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/tRXog1vi9wXlUkyoOSBMs2iHWmc.roa
Signing time: Mon 01 Jan 2024 12:29:21 +0000
ROA not before: Mon 01 Jan 2024 12:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207187
IP address blocks: 213.194.212.0/22 maxlen: 22
213.194.216.0/21 maxlen: 21
213.194.224.0/19 maxlen: 19
185.163.180.0/22 maxlen: 24
45.130.248.0/22 maxlen: 22
2a0e:59c0::/29 maxlen: 29
2a0a:1c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:05:cf:83:1d:60:1c:1f:43:1a:cc:e2:a6:6a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
Validity
Not Before: Jan 1 12:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b515e8835be2f705e5524ca839204cb368875a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:64:b8:7a:a4:95:64:9c:95:2c:c5:67:b1:
a9:b6:71:ce:c9:91:60:4d:8e:ab:17:56:d4:d5:8e:
65:ce:36:3d:06:c7:0d:42:11:0c:7f:f3:56:16:b2:
0d:cf:67:89:cd:39:70:cb:54:6f:72:8c:2b:52:06:
cb:72:e5:c9:8b:60:09:3e:7e:1d:a4:7f:2d:06:6e:
30:93:c8:42:31:9b:04:a3:8b:3a:57:e5:57:21:ec:
8d:ad:cb:08:91:06:48:cc:e5:4e:38:59:5a:7c:d8:
cb:a2:af:2c:16:b2:86:09:d6:e9:40:20:c1:3c:17:
0a:f1:80:e2:ad:77:89:07:e2:53:0f:03:39:c2:46:
5e:72:a2:a6:10:81:3f:8f:cb:87:9b:94:56:0d:4c:
e1:4f:20:84:56:6f:78:f3:6a:be:86:a0:bd:69:36:
5b:58:31:61:a5:bc:a6:cb:8b:22:84:db:2d:04:97:
f4:41:4c:a5:a2:14:8b:c2:1c:00:5d:fe:f5:e8:f1:
c9:31:41:97:84:32:74:17:d3:59:19:cd:c8:9e:24:
38:79:e9:41:e3:be:3e:7e:49:d2:bc:04:d3:4a:d3:
51:6d:50:6d:af:ad:7a:cd:a8:61:12:a1:a8:7f:e5:
1a:15:00:9d:0b:29:35:36:62:c2:4e:03:b1:31:82:
b9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:15:E8:83:5B:E2:F7:05:E5:52:4C:A8:39:20:4C:B3:68:87:5A:67
X509v3 Authority Key Identifier:
keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/tRXog1vi9wXlUkyoOSBMs2iHWmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.248.0/22
185.163.180.0/22
213.194.212.0-213.194.255.255
IPv6:
2a0a:1c00::/29
2a0e:59c0::/29
Signature Algorithm: sha256WithRSAEncryption
2f:f1:94:65:c0:63:db:20:ae:2e:cc:fe:88:2e:9a:c9:93:58:
00:ca:c4:84:72:2d:c2:75:56:c5:85:e7:d4:0c:46:5b:1b:b3:
e5:7a:ff:a0:a6:fb:f7:5a:9b:34:d2:65:a6:91:88:7a:87:37:
f0:97:06:1d:1c:07:d1:91:28:94:29:70:b7:0d:62:d9:bc:de:
7a:e4:49:e1:89:94:4f:19:6d:36:51:d7:2e:4c:d8:35:7c:bd:
3e:08:37:b2:8c:9d:1c:19:56:f0:27:eb:75:3c:31:7c:bd:6f:
d0:0c:03:83:6b:c5:39:3f:dc:74:79:7d:f1:02:0e:85:62:c3:
a1:0d:e7:1d:70:56:3d:9c:2e:38:6a:69:27:4d:64:cb:ce:bc:
f4:45:2e:b0:a7:78:81:89:62:81:11:b9:db:80:76:7f:3a:bb:
fa:ae:a0:6c:25:e1:5f:54:2c:3d:bc:52:8e:06:1c:0f:ca:63:
29:d3:1e:6a:53:93:a7:52:f4:77:62:4d:8c:b3:20:f7:43:61:
2f:27:72:07:68:0e:99:44:2d:35:32:1f:51:79:4d:b2:c5:b6:
ca:9a:44:be:2e:96:b3:2f:42:3d:a2:66:2c:92:c8:3f:bf:bc:
52:8d:63:40:18:dc:7c:83:d4:26:da:8a:1f:58:76:6e:94:65:
95:eb:c6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:33:50 2024 by rpki-client on console-ams.rpki-client.org