Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/L36F68d_mEdrP3QCNTiKZix_qxI.roa
File: L36F68d_mEdrP3QCNTiKZix_qxI.roa (raw, json)
Hash identifier: lHHbEyiO28dAKuXq2R7PDSeCjIwIUKoNzxg5QCPrFk4=
Subject key identifier: 2F:7E:85:EB:C7:7F:98:47:6B:3F:74:02:35:38:8A:66:2C:7F:AB:12
Certificate issuer: /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial: 018CC86FE33A8FE4765C3D5406C3F85EDAEB
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/L36F68d_mEdrP3QCNTiKZix_qxI.roa
Signing time: Tue 02 Jan 2024 04:30:25 +0000
ROA not before: Tue 02 Jan 2024 04:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200868
IP address blocks: 213.181.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jul 2024 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:e3:3a:8f:e4:76:5c:3d:54:06:c3:f8:5e:da:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Validity
Not Before: Jan 2 04:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f7e85ebc77f98476b3f740235388a662c7fab12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:56:4e:b9:70:87:cc:b0:c8:69:67:22:78:
b1:4a:50:f3:7d:a4:61:7e:53:f5:04:06:66:f3:ea:
6a:13:3d:59:46:4e:f6:4e:2c:2a:00:3f:51:5a:b4:
c6:90:e5:be:aa:92:63:2d:3c:43:90:91:a3:3b:0d:
81:8b:90:79:63:3f:e5:1d:05:2e:7f:04:17:23:28:
e7:34:9e:11:43:1b:ea:31:ed:bb:94:9d:ea:21:57:
50:31:e1:85:62:26:ed:f2:f9:8b:9d:75:e8:f7:99:
4e:c1:91:57:01:08:81:3f:06:6e:1c:22:2f:3c:3e:
c4:73:5c:f2:9b:ae:c9:55:3e:92:7c:73:17:a0:8c:
2e:60:16:4d:7f:3d:e1:e2:86:9d:9a:ca:84:21:0a:
ba:63:25:80:a3:f8:af:54:e9:ec:b4:be:f2:2d:22:
78:f3:25:40:ec:15:59:e6:c4:91:c3:05:b9:9d:df:
57:3e:05:8c:eb:6b:6b:97:2d:ff:5d:12:6b:18:93:
ce:5c:7c:ca:9e:c8:78:9f:05:45:50:8c:6e:2c:b4:
c7:55:50:e6:c2:07:75:c2:58:33:0d:f0:fc:68:65:
fa:81:ef:fb:72:32:e9:fb:c7:f7:e5:64:68:73:87:
96:6e:53:99:6f:3c:66:db:99:db:da:a4:59:18:94:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7E:85:EB:C7:7F:98:47:6B:3F:74:02:35:38:8A:66:2C:7F:AB:12
X509v3 Authority Key Identifier:
keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/L36F68d_mEdrP3QCNTiKZix_qxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.181.126.0/23
Signature Algorithm: sha256WithRSAEncryption
28:ba:5e:87:b6:3f:e6:ed:b1:62:b1:b5:c4:9c:16:13:1a:ee:
72:76:9e:b6:3e:05:bf:d8:f9:79:c8:ce:d1:23:97:01:c3:59:
7c:8e:aa:19:d6:94:79:fa:c7:c9:28:e3:7b:88:55:ac:9a:6c:
67:c1:ae:b4:4e:35:a2:9a:ba:fa:00:56:ed:8a:41:25:8f:d0:
ce:cd:4b:0a:b0:d7:ff:da:05:b7:87:d3:3f:3e:db:25:b6:3f:
bd:7b:9b:02:76:78:b0:da:21:77:52:f6:df:58:7e:81:0b:99:
e2:2e:4a:9a:52:dd:b5:a6:e5:98:31:ec:00:3d:b5:c0:c5:78:
3c:da:28:ab:8b:84:83:22:49:38:49:e7:f0:31:a5:84:ce:a8:
3b:05:d0:3f:76:9b:da:2c:46:3d:28:6f:7a:9b:0e:d4:fa:ed:
3c:14:56:98:81:b3:59:98:52:2c:7b:59:3e:67:a4:6d:37:70:
ee:32:50:cb:58:1f:43:9c:a9:ea:14:05:23:61:9e:47:dc:e3:
05:4b:b9:49:61:9a:14:c7:76:44:65:89:a2:ad:19:1c:22:bc:
cf:28:2f:d9:b2:08:91:a6:7d:e7:f4:ea:c8:af:51:9e:5c:18:
e6:64:29:d7:39:a4:7b:b8:01:a5:d9:e8:fc:28:9d:12:9b:a7:
d0:8b:e9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 15:50:47 2024 by rpki-client on console-ams.rpki-client.org