Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/rtXAMTgik_ASmRe39WXxTK8uwKQ.roa
File: rtXAMTgik_ASmRe39WXxTK8uwKQ.roa (raw, json)
Hash identifier: YMTRzMrF5/6cKTN4xP78l47jGvV6Qopndk/DYGi2aG0=
Subject key identifier: AE:D5:C0:31:38:22:93:F0:12:99:17:B7:F5:65:F1:4C:AF:2E:C0:A4
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01934E13565E2CECE7EF45D4B596331F2814
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/rtXAMTgik_ASmRe39WXxTK8uwKQ.roa
Signing time: Thu 21 Nov 2024 09:35:10 +0000
ROA not before: Thu 21 Nov 2024 09:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214209
IP address blocks: 213.176.64.0/22 maxlen: 24
213.176.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:13:56:5e:2c:ec:e7:ef:45:d4:b5:96:33:1f:28:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Nov 21 09:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aed5c031382293f0129917b7f565f14caf2ec0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1b:aa:ad:10:d5:9c:c4:01:29:a6:fc:c2:16:
a8:0f:fe:c7:fd:12:f1:54:f2:a7:b5:85:c7:da:1b:
f6:b3:7d:87:25:06:ae:c0:0a:f2:b4:fc:18:75:6e:
f5:95:32:7b:27:55:57:d1:45:e8:96:12:af:c8:63:
7d:ed:f0:a0:18:51:3d:31:d9:04:d0:a7:bf:b6:8d:
7b:a5:1e:28:3e:af:33:25:47:e7:4a:e8:40:2b:42:
1e:ad:98:1d:e1:02:f9:2b:10:7e:38:50:5a:38:92:
72:86:a6:9e:40:75:83:68:e5:4d:24:71:ab:cc:61:
ac:a8:bf:12:01:f9:bd:c8:d8:f0:98:b1:7b:f9:d4:
2a:72:f3:07:91:9d:5a:b3:bc:24:b8:e8:1c:e9:bf:
94:03:e8:14:6b:a1:91:c6:61:6f:c6:ed:22:01:37:
a7:c9:b4:94:26:f0:21:38:7f:25:78:1a:b3:c4:fe:
65:2a:02:d2:24:92:2c:68:5f:d0:72:00:97:f6:c0:
e6:9c:8b:13:cd:d6:89:15:0c:18:65:44:6f:b7:14:
64:0a:b2:29:4b:ed:21:d3:71:cd:07:be:af:53:e1:
06:17:d7:1e:13:21:26:9d:a6:45:f3:24:65:95:53:
79:d3:63:28:07:79:45:5b:3f:32:3d:a6:25:78:10:
de:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D5:C0:31:38:22:93:F0:12:99:17:B7:F5:65:F1:4C:AF:2E:C0:A4
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/rtXAMTgik_ASmRe39WXxTK8uwKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.64.0/22
Signature Algorithm: sha256WithRSAEncryption
67:be:16:22:51:68:3c:c7:cc:5e:62:89:e7:f1:de:81:26:fe:
2f:05:1b:8f:6d:5f:58:b0:a0:1e:8c:ec:9e:f6:ff:22:9b:fa:
1f:04:ab:48:be:80:b0:55:34:3a:b6:a3:d3:0d:6e:05:65:32:
fc:46:8c:53:66:86:19:da:70:b2:da:b6:80:0c:4c:65:1b:93:
c5:78:8e:eb:a4:5e:c6:da:4d:94:32:40:d5:2e:cb:28:e2:58:
ee:58:72:c6:13:29:18:88:bf:4d:d5:59:1e:50:11:2d:41:91:
54:3d:11:bb:81:b5:55:16:39:ed:13:51:bd:e8:1d:ad:a5:e5:
35:5c:98:6d:08:4d:a2:2f:bd:ce:84:a1:e5:24:53:63:d5:f4:
a7:cd:da:d4:38:7b:d5:2d:a8:7e:e6:9b:38:6c:fd:a3:82:93:
2c:c6:00:05:74:da:8e:02:45:54:ba:e5:cf:a2:e0:f0:78:95:
25:5f:86:ad:13:c6:15:64:0e:55:03:d5:cb:cb:b1:56:f3:e2:
35:3b:d9:4d:a6:1e:7c:2c:dd:e3:c9:51:20:3a:b1:93:cd:91:
25:3b:8b:e1:1b:73:26:13:39:81:94:d4:08:3c:83:2c:22:50:
1e:ae:0a:07:af:84:a5:ce:b5:8d:bd:4f:d2:1c:d3:53:9a:f9:
2e:63:33:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:19:27 2024 by rpki-client on console-fra.rpki-client.org