Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/bckeQ65YnH7eB9UothkE8-iXZVE.roa
File: bckeQ65YnH7eB9UothkE8-iXZVE.roa (raw, json)
Hash identifier: g91AniCxdIS3a+6EUBoellX/q60ImnpDwN/PJNOUsUM=
Subject key identifier: 6D:C9:1E:43:AE:58:9C:7E:DE:07:D5:28:B6:19:04:F3:E8:97:65:51
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC72752FC1CC648160566854387140485
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/bckeQ65YnH7eB9UothkE8-iXZVE.roa
Signing time: Mon 01 Jan 2024 22:31:32 +0000
ROA not before: Mon 01 Jan 2024 22:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198520
IP address blocks: 213.238.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:52:fc:1c:c6:48:16:05:66:85:43:87:14:04:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6dc91e43ae589c7ede07d528b61904f3e8976551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0a:1d:0e:9a:7d:06:5e:42:a9:71:06:02:19:
25:c4:31:e4:5a:54:f8:eb:44:f6:36:07:af:16:20:
f0:5c:7c:cb:5e:db:ea:d9:94:f3:63:e6:20:12:4d:
1b:1e:bb:64:89:41:22:56:91:94:97:00:ae:95:e0:
39:19:d5:f7:a4:1f:ee:c7:06:7d:40:cf:ee:e8:f5:
9a:fe:1d:45:37:46:6a:b2:11:d1:87:9c:7b:99:16:
1d:1c:00:96:69:84:34:b2:e3:ce:86:54:20:3a:c3:
1d:25:0c:bd:3c:88:05:c7:84:f9:d1:87:aa:2c:9d:
e7:30:ca:6f:99:c5:d0:f2:00:57:2a:e3:a1:10:f2:
92:25:a3:6c:a1:69:3a:c8:1f:e0:59:fa:4d:38:2d:
74:30:4b:23:4b:8f:13:71:2d:64:c9:35:59:1d:00:
e5:64:2d:a3:ea:57:26:9a:e3:c4:ac:f7:e3:d8:07:
96:34:95:de:7a:90:08:80:ee:ea:75:5c:38:e3:e8:
41:94:d5:d6:36:2d:c6:1a:01:3e:a7:2d:4b:94:a1:
9a:72:df:82:72:98:7f:31:7b:06:36:f1:78:47:79:
d8:e7:69:44:92:11:5a:5e:a3:4b:42:86:a6:3e:e0:
43:1d:0b:80:23:4d:4b:c3:db:25:4e:01:4d:59:79:
6b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C9:1E:43:AE:58:9C:7E:DE:07:D5:28:B6:19:04:F3:E8:97:65:51
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/bckeQ65YnH7eB9UothkE8-iXZVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.186.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:68:fd:a6:14:f5:05:9f:dd:3b:56:75:f0:ea:69:29:ac:34:
1d:a6:7d:53:6b:f3:26:4a:61:0c:eb:66:3a:0e:1a:ad:36:41:
c3:2a:f8:9d:b5:c6:8d:e6:9d:d9:b6:8e:34:63:74:be:ac:00:
8c:ab:1e:99:43:98:77:6a:01:0a:64:68:e3:05:dd:3e:95:4d:
d9:53:57:b0:63:19:2b:b4:d8:40:42:c0:e0:3a:ec:70:d3:aa:
20:9c:20:8d:d4:14:c7:54:cc:b0:bd:a0:aa:25:06:b4:dd:d2:
d7:18:44:7e:44:f0:b5:45:ac:1e:89:e6:df:90:18:3a:9d:8e:
cc:bc:64:d6:6b:8e:2e:41:3a:2c:00:c0:bb:7f:69:78:85:57:
6d:e9:2b:17:a9:d0:f4:e3:38:cb:7f:af:10:d9:1a:b1:66:d4:
6d:0e:9d:77:8e:e6:9c:c2:38:83:ee:33:6d:ed:f0:1c:ef:46:
73:d7:b2:1a:1b:f9:eb:a4:6b:9d:d8:74:47:7c:1d:23:83:df:
c6:5a:b8:9f:01:e9:40:d4:1b:cd:b4:84:26:4b:56:ae:74:f1:
20:6f:6c:ea:b1:99:8e:79:68:e8:17:5e:bc:6c:ca:d1:2f:61:
dc:10:f8:59:b4:7b:32:a6:29:99:e7:ba:00:a5:a7:75:ff:18:
98:2e:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:45:52 2024 by rpki-client on console-fra.rpki-client.org