Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/fogrrBmxofebjfTvt5_iRp4MisU.roa
File: fogrrBmxofebjfTvt5_iRp4MisU.roa (raw, json)
Hash identifier: qredAaWoFlncWfTwzImUYNmyuB5Ke+1HOS1O8tcz8GA=
Subject key identifier: 7E:88:2B:AC:19:B1:A1:F7:9B:8D:F4:EF:B7:9F:E2:46:9E:0C:8A:C5
Certificate issuer: /CN=4a4713cc31b7ea3891be1455de11dcc2f329d515
Certificate serial: 018CC794A4E395F13186984FF0446C98E86E
Authority key identifier: 4A:47:13:CC:31:B7:EA:38:91:BE:14:55:DE:11:DC:C2:F3:29:D5:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkcTzDG36jiRvhRV3hHcwvMp1RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/fogrrBmxofebjfTvt5_iRp4MisU.roa
Signing time: Tue 02 Jan 2024 00:30:56 +0000
ROA not before: Tue 02 Jan 2024 00:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399686
IP address blocks: 213.232.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkcTzDG36jiRvhRV3hHcwvMp1RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:a4:e3:95:f1:31:86:98:4f:f0:44:6c:98:e8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4713cc31b7ea3891be1455de11dcc2f329d515
Validity
Not Before: Jan 2 00:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e882bac19b1a1f79b8df4efb79fe2469e0c8ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:5c:af:86:a8:df:b7:89:9b:ad:96:0d:ef:
0e:cd:e2:34:02:0f:c4:db:c5:b4:8f:83:f7:a8:b6:
2a:11:ba:fb:5c:75:e2:d6:d8:ca:6e:7b:a8:5c:b0:
ab:55:d3:b1:e4:69:ae:61:66:87:a4:bc:a4:08:38:
0d:d2:9d:79:60:88:7c:bd:40:36:35:3f:a3:64:c7:
ed:73:8a:02:dc:d9:73:ac:de:e5:b0:92:61:9c:d9:
18:18:76:0e:57:cb:e5:a2:34:65:d9:27:f6:f1:61:
30:c0:a5:dc:b6:84:da:f5:97:bb:d1:6a:44:f0:ed:
62:19:94:93:94:b1:a1:e4:55:3d:c7:a2:5e:fd:ff:
d1:c5:38:7f:81:3f:e5:89:65:8b:c0:7f:ab:ad:00:
91:a8:00:82:db:33:56:ec:8d:e6:0a:a0:43:2c:0a:
32:df:aa:5f:55:e1:0f:c0:17:3f:73:a7:63:05:32:
40:b7:85:39:6c:a7:d8:ff:ce:a9:c3:96:66:cd:72:
5c:4f:74:35:58:24:bc:e8:e9:43:dc:9a:8c:ae:7c:
fe:46:cb:23:11:0e:a0:40:c4:67:b6:3d:b6:8c:e2:
c8:b4:12:4c:88:c8:1b:5f:64:44:83:18:b2:c2:96:
4f:c4:2e:4f:86:94:b5:8d:a9:53:cb:da:32:d9:de:
e1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:88:2B:AC:19:B1:A1:F7:9B:8D:F4:EF:B7:9F:E2:46:9E:0C:8A:C5
X509v3 Authority Key Identifier:
keyid:4A:47:13:CC:31:B7:EA:38:91:BE:14:55:DE:11:DC:C2:F3:29:D5:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkcTzDG36jiRvhRV3hHcwvMp1RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/fogrrBmxofebjfTvt5_iRp4MisU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/397f55-2b76-41de-86aa-a4202a40ce18/1/SkcTzDG36jiRvhRV3hHcwvMp1RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.255.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f5:a0:39:bb:55:bf:ed:db:95:96:c6:4f:30:f5:77:43:23:
93:fb:1b:e3:d7:af:f8:03:cd:c1:eb:0f:0c:0b:e1:b1:d3:bf:
01:99:3b:1c:62:14:a7:a2:50:87:fe:e3:85:e6:0c:1b:56:05:
bb:1a:90:9e:23:94:ad:6d:6c:e1:ba:6b:77:2f:cc:02:64:61:
c8:38:05:b3:4a:89:f1:0c:c5:00:d5:8f:07:97:5e:1c:7c:60:
f9:ee:ad:18:7a:00:65:eb:32:75:f2:1a:b4:c4:a5:0c:d6:31:
58:44:3b:c8:51:e7:00:31:9b:47:2c:67:9d:91:69:3e:28:00:
e1:12:75:45:2b:39:cd:0f:03:05:9a:0c:e5:39:a0:06:a2:ae:
87:b3:5c:82:75:db:82:35:a0:a8:78:c4:e1:57:7b:61:c1:0c:
a8:ee:a4:96:97:7e:9e:fc:e5:ec:84:5c:67:8c:b5:51:8a:f2:
a0:2a:40:f9:59:3c:ac:d3:54:4b:7d:1c:58:63:86:df:88:6b:
38:a7:7c:6e:ca:5c:8f:1b:45:ab:ce:88:ad:d0:7d:55:6e:9f:
b0:c2:c9:dd:aa:b4:25:90:ce:e3:f5:6f:c8:7a:47:d2:f1:50:
d6:cd:1d:e9:60:f7:1f:e5:02:cf:bf:7f:26:d5:8f:f8:eb:0d:
78:c1:ae:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:56:03 2024 by rpki-client on console-fra.rpki-client.org