Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/8Yd--WpfID7EQ8p4LxecT27UZhI.roa
File: 8Yd--WpfID7EQ8p4LxecT27UZhI.roa (raw, json)
Hash identifier: MCof10uKAbmp5kLXB/2cXAd1APCKZE/TLIX7E5Y0oDg=
Subject key identifier: F1:87:7E:F9:6A:5F:20:3E:C4:43:CA:78:2F:17:9C:4F:6E:D4:66:12
Certificate issuer: /CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Certificate serial: 018CC3492ADB589E5B093D7106E1CFC58665
Authority key identifier: 5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/8Yd--WpfID7EQ8p4LxecT27UZhI.roa
Signing time: Mon 01 Jan 2024 04:30:01 +0000
ROA not before: Mon 01 Jan 2024 04:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49736
IP address blocks: 213.108.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:2a:db:58:9e:5b:09:3d:71:06:e1:cf:c5:86:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Validity
Not Before: Jan 1 04:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1877ef96a5f203ec443ca782f179c4f6ed46612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:42:3b:e1:ba:2d:05:9e:16:2f:4f:a6:9a:1a:
fa:ce:a7:0b:14:74:7c:f8:47:ac:b3:c1:c4:a0:b0:
80:a4:3d:db:02:1f:b4:59:fc:1d:96:65:90:99:f7:
6f:80:a8:6d:63:f5:00:c7:f8:99:ba:de:99:29:87:
cd:eb:78:16:6a:20:7b:86:bb:af:17:3c:05:bb:29:
4d:88:6d:49:86:f5:5c:8d:fd:59:f1:72:93:ba:17:
7d:45:df:b5:07:d1:2c:db:03:aa:4b:f8:fb:f8:40:
01:6a:8a:7c:d8:1b:f8:67:85:a8:1e:a6:6e:5f:8d:
8e:11:78:e5:1a:69:26:a3:42:31:d2:2b:ee:20:9b:
b6:bb:3f:c4:f2:ba:26:29:67:6a:fb:ca:bf:05:1d:
92:22:cc:bc:c0:f6:74:f1:55:8f:29:e0:6f:7d:56:
e1:50:47:ae:53:1b:bf:22:97:2f:7f:0e:ed:93:fe:
50:80:81:18:56:73:8e:c4:5b:4e:c3:d3:06:19:68:
28:21:33:39:96:09:fe:61:05:d9:bf:58:eb:f7:18:
b2:d9:5e:f3:e0:b6:fd:48:b0:39:4d:6a:07:af:8b:
74:59:69:36:f6:71:ad:51:f4:bc:bb:cc:18:2a:df:
e8:ac:ee:00:c9:2e:fb:bb:df:05:04:d5:a1:c5:42:
b7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:87:7E:F9:6A:5F:20:3E:C4:43:CA:78:2F:17:9C:4F:6E:D4:66:12
X509v3 Authority Key Identifier:
keyid:5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/8Yd--WpfID7EQ8p4LxecT27UZhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.184.0/21
Signature Algorithm: sha256WithRSAEncryption
60:57:8f:65:77:70:89:2f:bd:f9:4c:d8:e5:d9:d8:aa:1b:c8:
8a:cb:42:89:31:e1:6a:4f:3f:11:98:7c:46:18:83:0c:60:83:
f0:eb:e7:c3:34:52:8a:d5:ec:88:0c:3a:1d:21:5e:e1:53:47:
bc:98:33:af:dd:a7:5f:09:32:59:35:38:1a:4d:3a:b0:96:3a:
8d:0d:b1:4d:21:16:75:a0:53:a2:d7:fb:7a:4c:71:b6:db:32:
b8:2b:dc:b2:32:9c:f4:27:42:7b:99:89:1b:e0:28:f8:e4:fd:
83:f1:d5:ab:90:d6:e2:7a:ff:49:68:c8:d0:43:aa:81:1b:13:
90:bf:8b:24:20:8d:2b:13:17:c6:8f:91:65:09:b6:ae:da:42:
15:3d:d2:72:c2:2e:f5:18:08:3e:49:e7:e3:95:e5:a6:61:1a:
2a:c9:0d:15:a3:ab:d2:7a:dc:25:5f:b0:d5:e1:9d:82:50:f9:
c0:52:ca:01:14:b7:86:c0:38:f4:4b:68:b2:cc:0a:86:26:c5:
08:48:2a:ae:90:eb:f0:39:15:39:f0:d9:5e:52:1c:7c:3f:fc:
38:b1:fd:ab:fa:97:5f:93:96:62:7e:55:62:f1:52:78:11:ef:
a2:32:11:a9:11:36:67:f0:65:a4:42:aa:23:0f:e6:d2:a7:75:
b2:c8:30:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 09:23:44 2024 by rpki-client on console-fra.rpki-client.org