Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/eziTKu29DD_s1frX6yc1aUQkp34.roa
File: eziTKu29DD_s1frX6yc1aUQkp34.roa (raw, json)
Hash identifier: szVkrB3AzTGo90Vn8IzPJZSzVHuKK2Rv3ZgE8CV3Rkk=
Subject key identifier: 7B:38:93:2A:ED:BD:0C:3F:EC:D5:FA:D7:EB:27:35:69:44:24:A7:7E
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DF956CCE46BFB066B3C18A5424A9DA
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/eziTKu29DD_s1frX6yc1aUQkp34.roa
Signing time: Tue 02 Jan 2024 06:32:25 +0000
ROA not before: Tue 02 Jan 2024 06:32:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 213.108.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:95:6c:ce:46:bf:b0:66:b3:c1:8a:54:24:a9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b38932aedbd0c3fecd5fad7eb2735694424a77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:68:9d:03:24:2a:f8:f5:bb:7d:7c:18:74:
67:e7:45:9a:40:83:95:cf:5b:5d:fa:0a:1a:9f:ae:
60:fd:84:d2:4b:6f:18:9b:81:f4:80:18:84:83:4a:
21:fd:07:ea:d6:ba:bb:d9:1a:81:4c:ef:1f:45:25:
b8:8a:f8:c7:d8:93:34:f9:10:a4:45:23:40:b2:e8:
e9:5e:d8:91:df:e7:f4:f4:32:51:c6:04:b6:53:50:
ab:ff:c9:05:22:85:87:d3:f2:02:0a:52:a6:e1:24:
66:d5:8b:15:bc:6f:46:23:e0:bc:d7:a4:cd:67:21:
c2:80:ea:03:d0:bb:d2:e0:16:08:8a:b9:be:6c:c2:
67:9e:90:50:d1:e2:f7:db:7e:9b:e7:ea:7d:5b:1f:
02:b3:d7:5f:61:36:92:17:9a:6c:2b:24:7d:10:42:
d9:10:25:d7:89:f0:af:be:2e:c1:2c:e4:55:0f:ca:
d7:d1:5e:5f:f9:48:31:57:fb:be:d7:d3:c4:f3:01:
27:9b:77:f5:93:06:e0:67:c6:33:19:f8:3b:9c:a5:
ef:94:2b:44:af:53:b5:c4:2f:86:5c:a6:dd:73:5e:
3a:9a:fc:50:d2:af:82:ad:22:42:6f:46:e2:23:63:
f7:ec:46:4b:a3:e7:95:a7:c8:23:60:14:8b:a2:1f:
4f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:38:93:2A:ED:BD:0C:3F:EC:D5:FA:D7:EB:27:35:69:44:24:A7:7E
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/eziTKu29DD_s1frX6yc1aUQkp34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.198.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d9:0a:a3:91:e0:2f:f3:7c:fd:bd:e3:ab:62:1a:78:c2:2f:
dc:e6:fb:2c:56:d4:f5:fd:03:36:0b:25:64:e2:e7:76:03:0e:
47:1a:db:bb:7d:f6:6b:6e:0d:38:bb:13:a5:a6:ce:67:2b:d2:
a5:2d:45:a3:24:47:43:3b:58:2a:2e:b0:0d:51:65:d4:61:4d:
81:12:f6:f9:52:9c:2c:87:27:f8:d2:08:10:7d:b2:20:7a:72:
40:d7:13:0f:81:cf:f3:5f:85:00:64:fd:6f:59:c4:c4:a0:da:
32:8b:3e:db:8b:a9:c6:e2:ec:e8:74:1c:b1:32:35:1b:6e:a1:
a2:01:a3:92:35:f9:03:e4:60:2f:fe:2c:3d:5b:c4:62:e2:d9:
7c:73:d9:15:0b:84:18:39:24:a5:dd:a8:a2:e4:ff:7d:66:a0:
26:e8:86:04:3c:74:16:b8:10:9c:79:ac:c4:7a:47:b9:22:d0:
83:d7:52:0a:a1:1b:9e:0e:2a:58:8e:94:53:4c:54:cb:0f:72:
81:8c:5b:ef:fd:ab:5f:d7:eb:57:90:d7:2f:ad:5a:a5:31:e8:
f2:7b:77:85:cb:eb:5f:f7:b7:83:39:65:b5:a4:ef:bb:bd:7f:
e7:1b:c5:99:75:eb:06:48:d0:8d:1b:83:18:cd:5a:f8:c3:b5:
90:ac:19:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 09:00:43 2024 by rpki-client on console-fra.rpki-client.org