Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/nmymFry2zev6lQmSg01rutgO15E.roa
File: nmymFry2zev6lQmSg01rutgO15E.roa (raw, json)
Hash identifier: 5N7XiunMSxzm83nIrC4a4pYMbyqkY3khciPZYoCEw7w=
Subject key identifier: 9E:6C:A6:16:BC:B6:CD:EB:FA:95:09:92:83:4D:6B:BA:D8:0E:D7:91
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 018EC857477C84121442D2530A69BB7861B1
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/nmymFry2zev6lQmSg01rutgO15E.roa
Signing time: Wed 10 Apr 2024 14:09:06 +0000
ROA not before: Wed 10 Apr 2024 14:09:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215128
IP address blocks: 213.198.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:57:47:7c:84:12:14:42:d2:53:0a:69:bb:78:61:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Apr 10 14:09:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e6ca616bcb6cdebfa950992834d6bbad80ed791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:f3:ba:c9:51:9e:6c:d4:da:3f:3d:c9:3d:
d6:ef:08:db:20:36:2e:23:b8:8b:de:40:d5:b5:54:
46:b6:f8:83:2e:9c:44:ea:e7:78:d5:d1:a5:15:91:
22:28:ac:62:db:a9:04:68:4a:dc:e0:5d:12:7d:84:
a1:1c:30:e9:ea:a0:89:72:43:bf:78:37:99:bd:99:
ee:6e:0d:53:48:2d:14:bc:cf:9c:95:d3:c7:ee:bd:
ad:34:7a:fc:87:0f:02:02:76:49:b4:93:db:8e:e0:
f6:52:e9:e2:34:e5:64:16:3b:4b:65:19:4c:4a:5e:
c7:79:d4:7d:31:bc:76:31:fd:87:11:93:3f:96:63:
a3:69:f6:1b:e3:30:48:41:7e:7e:bf:23:26:f1:80:
df:c1:50:62:20:21:03:9e:95:c3:63:94:58:ec:1d:
5d:76:5a:89:09:12:f7:6b:50:ff:e5:a0:da:ba:cb:
24:57:6a:32:5a:5f:70:d9:b1:91:1e:a3:51:df:be:
1d:85:41:2a:50:40:64:fc:42:e7:ff:a9:c0:63:61:
62:19:b3:1b:d5:e2:2f:f4:6e:92:88:4f:42:e1:78:
8c:68:29:37:cd:b8:ef:89:ec:ea:74:09:bb:8d:b8:
fc:fa:23:e5:28:2f:61:ba:8a:6b:29:39:7e:08:c9:
07:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6C:A6:16:BC:B6:CD:EB:FA:95:09:92:83:4D:6B:BA:D8:0E:D7:91
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/nmymFry2zev6lQmSg01rutgO15E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.6.0/23
Signature Algorithm: sha256WithRSAEncryption
54:f6:f0:2f:e5:14:b8:9e:7f:d4:ff:28:c4:54:d1:7c:05:08:
35:dc:05:95:88:bd:b6:b9:66:bb:ef:a7:3d:fb:c7:a8:36:8b:
14:d5:ed:cc:b1:b9:1b:86:6a:2a:f3:07:bd:c7:ae:cc:c4:7c:
d5:e5:29:5b:72:80:a3:ac:51:36:70:fb:9b:0e:cf:c7:32:65:
37:aa:0d:c8:ba:07:ca:b2:56:fe:95:61:e7:9c:5a:3f:5c:85:
ca:b7:2c:5d:f4:e0:e2:31:b3:9d:d2:d3:4f:c0:ea:48:7d:0b:
26:80:27:ff:e3:36:5c:cd:fd:f7:a5:76:53:c4:6e:6c:26:99:
af:97:21:68:58:e1:8e:bc:b6:14:60:cd:20:fe:15:db:73:8d:
c1:99:b8:03:98:bc:3e:ca:23:32:6c:d7:64:29:9c:b1:64:7a:
5d:d1:93:6a:03:9f:41:a2:a8:3a:a8:3d:a4:6a:71:d4:15:b6:
cd:2d:ed:0c:d3:71:84:b5:a6:2b:16:8b:10:10:bc:6e:40:b1:
8b:5b:a4:78:42:35:c0:20:02:2e:f4:7a:0d:ab:91:f7:f1:0f:
d8:f9:f7:e1:2b:8e:74:0a:88:4e:d1:0c:d5:55:7d:82:50:73:
9b:17:be:51:d9:26:81:f0:4f:64:eb:87:fd:6c:12:62:48:9c:
b1:0b:7d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:00 2024 by rpki-client on console-ams.rpki-client.org