Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/_N5Bn21c5bspO4eYf7sZI6oJgdE.roa
File: _N5Bn21c5bspO4eYf7sZI6oJgdE.roa (raw, json)
Hash identifier: z8oqzHE7V5p8PQgEZrV6AfcP/Ip2PNMDuth1KDz5q5I=
Subject key identifier: FC:DE:41:9F:6D:5C:E5:BB:29:3B:87:98:7F:BB:19:23:AA:09:81:D1
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018D9CE9F8579BB6C51DDD6AEE72BA5B1C87
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/_N5Bn21c5bspO4eYf7sZI6oJgdE.roa
Signing time: Mon 12 Feb 2024 10:43:15 +0000
ROA not before: Mon 12 Feb 2024 10:43:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51540
IP address blocks: 213.238.173.0/24 maxlen: 24
213.238.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:e9:f8:57:9b:b6:c5:1d:dd:6a:ee:72:ba:5b:1c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Feb 12 10:43:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcde419f6d5ce5bb293b87987fbb1923aa0981d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:82:07:30:4c:1e:0e:0f:43:99:ac:13:65:
65:db:fa:3f:b2:36:a0:a6:a5:c8:24:e0:ff:75:15:
db:9c:d6:7a:03:6a:30:95:c1:ad:c2:fc:68:fc:60:
78:26:f9:64:cd:5f:fa:28:ef:de:a2:85:e0:a8:b8:
90:20:ee:03:12:23:60:ea:a5:43:46:91:82:fc:79:
4a:29:b0:4f:fd:7f:64:1e:6b:d2:b9:41:f4:7e:28:
bf:0f:1d:a4:e1:4b:88:ff:bb:5a:6b:17:a1:28:e4:
4f:d2:02:01:2b:86:bb:0f:ea:04:c7:1b:77:94:99:
a3:1d:6c:17:46:6e:11:dd:96:0e:2b:5a:f7:6f:0e:
69:5f:02:c4:84:91:af:38:6c:c5:fd:6b:77:24:bc:
57:a9:c3:ff:4a:2d:c8:8b:17:84:21:61:ea:14:60:
44:1c:51:e4:50:ef:92:2c:91:c0:a6:53:63:3a:35:
e1:49:3d:5e:b9:a0:de:c1:06:49:1e:17:07:26:01:
9e:5b:ce:59:84:f7:75:3f:75:5f:ff:24:0a:1b:53:
d5:60:fa:26:b2:62:b9:b9:2a:f5:2c:e8:30:b4:68:
e9:d5:6e:fc:a8:4f:f1:53:d9:df:e7:67:69:5f:2f:
3b:7e:fa:1f:da:76:dd:29:f5:c0:96:70:be:9d:eb:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DE:41:9F:6D:5C:E5:BB:29:3B:87:98:7F:BB:19:23:AA:09:81:D1
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/_N5Bn21c5bspO4eYf7sZI6oJgdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.173.0/24
213.238.176.0/24
Signature Algorithm: sha256WithRSAEncryption
60:67:30:e8:e6:bc:3d:85:27:c5:ec:4b:10:59:95:5e:47:7d:
20:88:74:aa:fd:1f:eb:fd:08:89:76:6d:0d:2b:b6:d5:64:60:
58:59:9d:3c:5a:42:eb:93:54:bb:7c:c6:ba:cd:0f:f1:eb:55:
44:ca:3f:25:1d:4c:87:14:4f:2e:06:06:32:ce:89:17:89:3f:
fa:52:cc:6c:2b:01:eb:d2:a4:e1:43:aa:58:97:b8:10:55:75:
31:3c:68:18:ee:51:63:89:a3:4b:2b:ad:e3:4e:36:4a:dd:f7:
6d:df:5f:96:93:d5:69:4b:62:3d:4d:a4:99:ce:59:da:a6:cc:
4b:63:d2:8c:a2:63:1a:60:8b:7b:b8:75:0e:d9:55:ec:3b:49:
1f:c1:b7:78:8d:5d:b3:ce:2e:9f:09:64:e8:6a:b7:7d:73:52:
ca:de:32:9f:ef:de:54:b4:01:93:9c:74:53:5b:d4:28:a1:bf:
3c:2a:6e:9e:d5:e5:eb:8b:51:fe:eb:2e:77:81:0c:8a:96:35:
ea:a3:95:97:17:2c:f1:5f:ac:5b:fe:cf:13:9c:f2:82:34:80:
35:bb:aa:ce:9c:72:b6:4c:5b:00:0a:a9:db:6d:e0:ac:49:5a:
3a:61:a6:ee:f3:f0:88:97:ec:b0:e7:73:d3:d4:28:49:45:ad:
3f:27:a1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:11:26 2024 by rpki-client on console-fra.rpki-client.org