Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/4cLoPeIC7qYP6D5SaImgONntnVs.roa
File: 4cLoPeIC7qYP6D5SaImgONntnVs.roa (raw, json)
Hash identifier: /HwSUuGTp+a8ltbJafvprDBepjBpYrha9KwwB0vhFLc=
Subject key identifier: E1:C2:E8:3D:E2:02:EE:A6:0F:E8:3E:52:68:89:A0:38:D9:ED:9D:5B
Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial: 018CC2DABD77C7798518ECB328275965E2FC
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/4cLoPeIC7qYP6D5SaImgONntnVs.roa
Signing time: Mon 01 Jan 2024 02:29:24 +0000
ROA not before: Mon 01 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21478
IP address blocks: 213.129.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:bd:77:c7:79:85:18:ec:b3:28:27:59:65:e2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1c2e83de202eea60fe83e526889a038d9ed9d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:53:dd:33:ba:7b:ce:9c:7d:9d:2d:6d:48:
65:82:ee:fc:4b:52:12:5b:0c:66:7b:bb:82:17:42:
c8:89:0c:0f:2a:38:12:fa:19:0c:8e:19:d7:ff:0e:
39:54:d9:5e:e0:cf:cd:dc:ed:71:c3:d0:6c:a3:a8:
42:cc:a3:a5:5a:65:44:e2:02:b7:9c:c6:c7:3c:0a:
65:60:2d:f2:10:da:ef:63:bd:f0:56:68:fa:99:55:
e5:48:af:28:39:93:df:76:4a:2b:43:6a:41:3c:ce:
07:00:2f:6e:47:5c:aa:29:73:f3:04:e4:cc:3d:76:
6b:14:c1:03:2f:af:6e:c0:41:cf:23:66:6d:ac:ed:
b1:0a:26:c1:dc:31:31:1f:58:2c:91:29:b8:90:bc:
e9:92:0f:08:5f:1a:19:9f:32:48:63:c7:68:32:41:
20:93:d4:42:6f:6a:d1:27:71:f3:fb:5e:5f:eb:15:
95:ac:61:43:85:6d:f9:60:f3:97:c1:a0:8d:6a:4d:
d5:e5:8f:0a:33:17:85:fe:c0:2a:35:27:87:02:0a:
17:db:ef:85:52:0f:99:c9:0f:1d:14:55:90:c3:a9:
d7:ed:9e:fd:8e:4d:53:f3:96:52:cb:8a:ec:d4:10:
c5:de:df:9f:50:65:db:9e:1d:97:76:12:f9:12:dc:
a5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C2:E8:3D:E2:02:EE:A6:0F:E8:3E:52:68:89:A0:38:D9:ED:9D:5B
X509v3 Authority Key Identifier:
keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/4cLoPeIC7qYP6D5SaImgONntnVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.129.192.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:82:f5:7d:f1:39:f6:70:1e:6a:35:c8:2b:43:36:ae:35:14:
a2:6b:4e:f5:29:46:e0:2d:ca:7a:28:71:e3:41:39:dc:93:1b:
5f:ae:32:82:ae:e2:12:69:92:0d:9d:1f:d2:9f:eb:9f:e8:78:
f4:5f:35:19:4d:d6:9c:63:55:6d:db:f8:c6:39:48:ce:48:13:
43:40:43:c1:dd:cd:90:37:66:01:7b:20:0c:78:22:4d:95:31:
37:3d:71:ef:7c:f0:41:8c:c4:c9:7c:7f:45:5a:1b:12:00:c2:
5d:5a:e1:37:88:de:d2:81:b2:1a:5d:17:34:c2:41:17:33:86:
c2:3c:3b:22:78:ea:54:18:c0:5e:16:40:af:4f:af:66:b5:b4:
ee:96:38:a1:97:4d:7d:83:f8:7a:ea:6f:23:02:bd:0d:1f:c1:
54:4b:0e:fe:b7:4a:62:0e:dd:b6:ea:86:84:d1:19:7f:a7:cd:
6e:43:92:7a:c3:65:8f:f3:23:79:da:8b:06:e3:59:cc:b0:98:
08:eb:11:c4:7e:89:09:63:a4:89:db:37:28:f9:12:2c:16:8d:
42:08:e4:15:7a:d5:57:a6:f2:45:16:a1:17:4f:fe:cd:96:03:
e7:cb:15:23:0a:ee:4f:d6:9d:6a:73:73:86:9f:08:43:9e:c5:
06:f5:dd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:38:45 2024 by rpki-client on console-ams.rpki-client.org