Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/d2716dpM4Asln48sYe-HdRwFjQE.roa
File: d2716dpM4Asln48sYe-HdRwFjQE.roa (raw, json)
Hash identifier: F6ccaKc5htoxX/+mnberHWEaQshbOjduXz3NqED3Eng=
Subject key identifier: 77:6E:F5:E9:DA:4C:E0:0B:25:9F:8F:2C:61:EF:87:75:1C:05:8D:01
Certificate issuer: /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial: 018CC7956960FCB5CDC5228AD48ABAF6F1CB
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/d2716dpM4Asln48sYe-HdRwFjQE.roa
Signing time: Tue 02 Jan 2024 00:31:46 +0000
ROA not before: Tue 02 Jan 2024 00:31:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49715
IP address blocks: 213.108.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:69:60:fc:b5:cd:c5:22:8a:d4:8a:ba:f6:f1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Validity
Not Before: Jan 2 00:31:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=776ef5e9da4ce00b259f8f2c61ef87751c058d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:c7:8f:a8:82:bc:28:a6:0a:05:63:96:53:
dd:04:9f:a4:22:bd:10:23:4d:f0:3b:aa:01:75:8b:
92:c1:05:4f:90:c0:bc:7b:6c:a6:77:4f:f5:33:27:
98:40:71:b6:df:f1:85:fd:a5:cc:a6:d7:f0:f2:25:
85:0a:77:40:22:d4:a6:7f:b6:cd:4b:04:29:29:ca:
85:a0:3e:34:e3:d1:3f:e7:42:80:37:69:36:cf:26:
0f:65:1f:bf:29:74:75:ec:38:fe:2a:c5:73:58:9e:
9c:2c:87:73:2d:d6:bf:f5:ea:f8:c1:f3:0b:ae:8b:
5f:ad:ed:c4:81:aa:7c:85:12:7a:d4:72:9f:8f:cb:
c5:07:f0:e9:15:30:d1:5e:d4:4b:82:b3:55:8e:e2:
f9:f9:28:d5:9c:61:0e:9d:44:6d:51:18:ae:66:6e:
f0:a0:ee:72:60:fe:b0:f1:02:2c:b8:19:81:89:d3:
10:f3:ca:2b:d5:a1:ec:a9:2f:16:a2:5f:e5:39:57:
11:4f:14:f6:71:1f:3e:68:ec:87:bb:5b:55:36:85:
e5:ee:9f:9a:46:c5:fa:6f:4e:80:db:0a:76:2d:86:
04:57:02:69:d6:7d:76:c5:6b:a3:d1:6b:51:12:86:
78:43:ec:5e:ab:76:54:3f:c0:b9:bd:3a:36:1a:87:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6E:F5:E9:DA:4C:E0:0B:25:9F:8F:2C:61:EF:87:75:1C:05:8D:01
X509v3 Authority Key Identifier:
keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/d2716dpM4Asln48sYe-HdRwFjQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.152.0/21
Signature Algorithm: sha256WithRSAEncryption
85:28:aa:0d:57:59:cf:52:b9:cb:37:fb:04:b8:b9:aa:f1:f2:
16:3d:43:d1:9e:15:7e:20:d6:78:5d:9b:3a:35:93:ac:0a:2b:
d4:1f:34:5e:6e:29:3a:9b:b8:27:1b:05:5d:fc:e0:1b:a9:2a:
86:b9:42:a6:a1:ab:bf:62:b0:fe:f3:97:9e:20:4a:58:9f:3a:
28:58:9d:a0:ff:33:3d:45:6b:72:2b:1c:89:10:db:f9:f6:11:
5a:33:23:22:7b:ff:52:eb:7f:b5:19:05:eb:1f:78:ac:af:9e:
a6:37:2f:f2:00:5f:38:9e:cc:79:cb:82:f4:03:aa:0b:6b:5c:
0d:da:d2:f8:fd:64:07:29:67:bc:28:c8:e5:b2:78:e7:bc:e4:
f6:6d:e7:a7:a0:38:b7:89:0e:a4:b0:f5:e0:91:d8:4c:d7:3a:
fc:b5:c8:9b:02:e4:24:c6:b0:25:30:ae:64:72:d6:fa:46:87:
e4:0a:58:be:e2:17:f0:1a:32:7e:9e:90:8f:75:b4:46:5a:af:
19:ac:c5:e8:96:52:cf:4b:ed:a1:99:8b:e6:d9:0f:d3:e0:f8:
e8:6a:c4:a0:1d:74:80:70:8d:53:37:da:f5:7c:3a:66:61:38:
84:bf:a0:f2:d9:92:1e:85:f9:89:f9:4b:36:bc:a1:e4:9e:0f:
78:55:63:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:51:50 2024 by rpki-client on console-fra.rpki-client.org