Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/7phXRzNK-CnEfZtAgyHTuGw7wXs.roa
File: 7phXRzNK-CnEfZtAgyHTuGw7wXs.roa (raw, json)
Hash identifier: yu/lsG04KpffzCJaxP72LJx68ZW823698QuM5Shzbk8=
Subject key identifier: EE:98:57:47:33:4A:F8:29:C4:7D:9B:40:83:21:D3:B8:6C:3B:C1:7B
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018D9CEAE2370DEFBA6824758FE6671CB31A
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/7phXRzNK-CnEfZtAgyHTuGw7wXs.roa
Signing time: Mon 12 Feb 2024 10:44:15 +0000
ROA not before: Mon 12 Feb 2024 10:44:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201364
IP address blocks: 213.238.173.0/24 maxlen: 24
213.238.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:ea:e2:37:0d:ef:ba:68:24:75:8f:e6:67:1c:b3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Feb 12 10:44:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee985747334af829c47d9b408321d3b86c3bc17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:a3:51:ea:a5:70:58:03:2c:0a:df:b1:8f:
5b:a9:90:fe:93:4e:37:a5:f6:9a:a0:e7:af:15:99:
32:71:14:5e:4e:82:53:00:c8:28:c5:b3:93:12:c4:
d2:8d:c9:59:be:dd:c6:8c:cd:6c:f3:da:78:39:d8:
2b:df:32:67:95:28:29:71:b3:d3:bb:cc:47:3d:71:
f0:00:a9:54:3f:b9:d6:3e:fd:a8:e6:8e:36:10:04:
c0:19:d4:26:d5:5a:51:56:e0:0e:ee:43:4a:f1:b7:
e4:75:fb:b2:b1:71:00:19:a5:40:d3:b1:41:3f:c6:
4a:32:f7:cc:87:e1:16:6f:fb:fc:d3:a1:e2:95:95:
b9:0d:a4:89:92:ba:36:0d:0a:39:69:03:88:c1:82:
a2:7b:11:9d:6d:59:31:7b:9c:94:93:40:09:5f:0c:
79:b2:cf:35:c5:fa:0b:1d:52:7e:5d:30:c0:51:44:
5a:e1:da:16:d9:89:db:33:95:2a:51:d8:6e:d2:6b:
96:6c:85:09:1b:3f:d8:ba:9b:99:0a:3c:6f:e4:c9:
f9:56:bc:a2:6d:16:9e:e9:dd:41:b1:4b:aa:74:b5:
24:b2:c0:7b:bc:b4:35:85:c6:10:04:6c:29:0a:8d:
57:53:5f:3d:01:51:fe:b9:a8:3f:fd:65:19:e7:6c:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:98:57:47:33:4A:F8:29:C4:7D:9B:40:83:21:D3:B8:6C:3B:C1:7B
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/7phXRzNK-CnEfZtAgyHTuGw7wXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.173.0/24
213.238.177.0/24
Signature Algorithm: sha256WithRSAEncryption
60:24:e1:72:c5:17:28:a2:c7:0e:0a:55:da:a0:ad:b8:1a:62:
d3:b6:bd:78:c3:1b:11:c3:77:1a:9a:74:18:2b:66:60:9d:7d:
a8:5c:f5:d3:65:ef:11:53:48:b7:e5:e4:d3:49:56:5a:38:7e:
29:d7:c0:0a:15:12:d0:41:3e:3a:ac:41:61:01:33:77:fe:bb:
bf:b2:07:fa:ea:10:0d:6c:31:cd:90:91:85:b7:41:a7:37:57:
81:d7:ee:26:c1:4e:9e:2a:38:30:8e:4c:3d:29:28:41:11:f9:
6b:09:a7:eb:a6:08:79:1b:9e:e9:98:5a:49:a4:bd:85:ed:04:
98:97:3d:a2:4c:33:62:90:ae:b2:68:e7:95:dd:ea:3a:56:2c:
96:46:c8:bf:15:8f:a1:98:c5:ce:df:ca:21:3d:66:36:2b:3b:
f9:78:8a:c1:3d:6a:3d:cf:3b:82:a1:0b:68:1c:95:c0:65:64:
23:d7:11:08:24:71:76:a4:1d:a2:ab:ad:b2:6b:3b:07:93:dd:
b4:7b:f5:1e:8d:0f:da:63:09:1e:09:5c:ee:88:2b:ea:da:01:
7f:95:96:c2:bd:1e:7a:23:49:15:a7:46:92:65:b8:aa:58:cc:
b8:2e:f7:d6:94:6d:ee:35:95:19:b6:85:60:9b:34:09:39:8c:
b6:93:e0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:17:22 2024 by rpki-client on console-fra.rpki-client.org