Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/K_tZh5hwaL_P9EXtRbfXDYPxqlM.roa
File: K_tZh5hwaL_P9EXtRbfXDYPxqlM.roa (raw, json)
Hash identifier: 3yTv+IdZIBisdHU1pRHHfhUUYdkASqWorON+ZRsi/M4=
Subject key identifier: 2B:FB:59:87:98:70:68:BF:CF:F4:45:ED:45:B7:D7:0D:83:F1:AA:53
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018CC9BCB832C8529A0B0D44012BEA6C53AD
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/K_tZh5hwaL_P9EXtRbfXDYPxqlM.roa
Signing time: Tue 02 Jan 2024 10:33:57 +0000
ROA not before: Tue 02 Jan 2024 10:33:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25261
IP address blocks: 195.53.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b8:32:c8:52:9a:0b:0d:44:01:2b:ea:6c:53:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 2 10:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bfb5987987068bfcff445ed45b7d70d83f1aa53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c2:69:52:be:37:f0:b7:65:8c:92:f5:a2:6e:
e8:9a:92:0a:a3:4d:14:0e:a1:0e:b2:ca:6d:b0:8f:
39:0d:9e:c9:5c:bd:56:69:1a:e1:87:b0:2a:30:03:
f1:bc:79:27:95:82:fc:1b:61:c4:33:8f:67:a6:16:
b1:56:af:a7:e5:76:a6:c3:06:19:51:8e:fe:b0:87:
51:bb:51:7f:b3:e5:18:35:7f:24:a5:a2:f5:d2:89:
d0:93:40:38:07:cb:c3:a2:e3:80:83:ce:91:f3:a0:
e8:01:66:f5:14:72:8e:b9:90:e1:8e:b2:97:58:c7:
84:b7:81:55:85:2a:49:93:54:4f:01:0d:12:65:ae:
e6:13:9c:9e:87:7d:86:00:62:5b:5b:a4:39:73:c6:
d0:e4:5c:73:ff:22:11:d7:70:3f:7a:0e:58:b9:ed:
f6:1e:53:52:0c:2f:4f:f9:c7:41:b9:db:2c:71:f4:
99:b5:6b:d3:45:3f:a6:7d:48:8b:4b:72:d2:15:b3:
45:64:26:41:00:1e:ee:b1:81:82:62:87:e8:8b:62:
d6:38:fd:7b:d3:3b:de:fe:7a:1b:99:50:44:0e:51:
48:20:75:a2:8d:26:d5:cf:62:33:67:38:bc:da:87:
52:6b:43:ec:c0:ff:90:b4:73:8c:1b:0c:6c:c5:b5:
d3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FB:59:87:98:70:68:BF:CF:F4:45:ED:45:B7:D7:0D:83:F1:AA:53
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/K_tZh5hwaL_P9EXtRbfXDYPxqlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.53.213.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ed:3e:0a:68:ec:ce:2f:d0:f3:32:8e:35:61:a2:c3:0a:7d:
2a:49:c9:a9:58:92:4b:36:6a:02:e7:49:57:df:e0:e3:a2:fd:
d8:c6:02:03:ed:04:19:3a:54:99:62:02:8e:af:69:7c:79:85:
da:a0:85:6f:85:70:32:7c:c6:67:5c:a3:04:bc:da:bd:2a:7f:
85:66:84:9f:d6:f5:db:47:0f:19:54:21:0f:8f:16:7a:ce:d6:
10:df:27:77:41:a5:72:03:36:91:ad:d1:44:5f:5c:52:29:f8:
15:4d:37:38:ff:ba:26:bc:94:00:74:dd:24:6d:3f:74:06:ef:
a4:df:59:85:53:04:57:80:f7:5a:46:7f:63:4e:40:96:f3:ef:
ef:50:e7:9b:7a:6d:86:37:22:5d:b6:4f:28:9b:1b:d8:9c:3f:
91:2f:e6:0d:51:9b:f4:06:37:44:f0:b3:80:fe:fd:33:32:a8:
71:01:a4:bb:e8:11:9a:f4:5c:00:83:da:ea:eb:61:db:b2:ea:
ac:4a:66:76:c4:35:dc:6f:7c:ca:dc:1e:fb:b6:3d:b8:3e:a9:
0d:b0:a8:f8:b9:50:24:5f:9c:9b:f2:44:7b:2f:7d:8e:33:05:
d5:10:ff:06:95:fe:b0:38:8e:7f:b0:4f:0a:8d:13:55:f1:bf:
4a:99:13:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:43:59 2024 by rpki-client on console-ams.rpki-client.org