Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/3pUr-m6O-dz0knuXlouQmp3HbMc.roa
File: 3pUr-m6O-dz0knuXlouQmp3HbMc.roa (raw, json)
Hash identifier: onZlUbV2KwuwGsyzLLT52sJoVQiM3CqFwTeeNp4DBro=
Subject key identifier: DE:95:2B:FA:6E:8E:F9:DC:F4:92:7B:97:96:8B:90:9A:9D:C7:6C:C7
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC72755D38C677B4B7030158AE2154497
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/3pUr-m6O-dz0knuXlouQmp3HbMc.roa
Signing time: Mon 01 Jan 2024 22:31:33 +0000
ROA not before: Mon 01 Jan 2024 22:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209956
IP address blocks: 213.238.166.0/24 maxlen: 24
213.238.184.0/24 maxlen: 24
213.238.189.0/24 maxlen: 24
213.238.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:55:d3:8c:67:7b:4b:70:30:15:8a:e2:15:44:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de952bfa6e8ef9dcf4927b97968b909a9dc76cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d1:ac:38:0d:06:a1:b3:ab:f3:06:9d:0f:a4:
fb:f1:03:77:a7:e2:09:ea:56:b0:b7:03:b4:c4:ab:
52:7d:22:82:ad:ac:d9:68:27:8a:38:2c:9b:b4:a0:
19:e5:82:90:8e:d6:d4:ae:6a:7f:6c:2f:54:23:08:
95:dd:2a:e2:b0:02:5a:cc:f6:2c:53:90:fb:6a:24:
0a:ee:16:c2:8f:a4:3a:f7:45:ed:99:27:8b:66:c6:
9e:a9:63:2e:d8:e5:71:14:a5:d2:52:78:04:e6:9f:
51:dc:38:b4:b7:3c:29:8f:0c:e9:1d:23:31:fa:b1:
3f:33:51:89:96:0f:79:83:4a:d0:0c:57:1c:a9:7e:
73:01:4b:58:8b:92:2e:73:26:d5:0a:73:96:f0:c4:
96:1a:77:90:5f:75:e8:64:47:08:9f:03:88:ea:9a:
02:c9:59:e8:89:6a:5d:34:b0:0d:d5:3a:2b:8e:7e:
2b:3f:f0:4d:f8:01:d4:59:8f:66:e7:14:1a:d7:4f:
c0:4e:f2:78:8d:1d:a0:fb:c8:88:f1:81:54:50:5a:
50:9e:04:4f:f4:6c:fb:09:56:2c:89:59:f7:1e:54:
0b:71:eb:f7:8e:f3:63:7d:82:6b:ae:b1:4d:8f:de:
3e:ce:fb:b2:6b:da:65:08:67:d2:23:7d:07:35:13:
10:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:95:2B:FA:6E:8E:F9:DC:F4:92:7B:97:96:8B:90:9A:9D:C7:6C:C7
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/3pUr-m6O-dz0knuXlouQmp3HbMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.166.0/24
213.238.184.0/24
213.238.187.0/24
213.238.189.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ba:05:ab:42:df:fd:a7:4f:42:2e:8e:35:40:c6:db:a8:a5:
ff:bf:43:1d:a6:5f:02:f9:ab:8d:02:4f:be:ff:70:65:b5:0f:
1e:e6:c7:ec:5e:4f:76:e5:e2:cb:05:ed:c8:ec:83:a5:3c:b9:
ae:43:a0:42:ff:51:dd:a6:95:52:4d:13:69:0c:7c:44:b2:34:
17:12:17:4f:2a:60:a4:89:5f:bc:88:74:f6:8e:ba:5d:0f:21:
55:9d:d5:70:d0:30:d9:eb:ab:18:d7:48:9d:a4:70:2e:bf:3b:
26:f3:d3:89:97:ef:73:07:d0:67:46:84:a3:a8:02:3a:09:4f:
a5:fe:35:0e:d9:b1:76:9a:db:27:8d:c6:b1:56:66:78:39:33:
a5:fd:a3:cd:78:1b:0f:2e:cb:4a:d6:0c:97:d6:0f:cd:d7:dc:
28:5b:45:79:d1:46:59:4b:d2:86:4a:51:0a:25:ef:36:1a:86:
99:b9:a8:9b:b0:6d:a3:ea:85:d8:5a:52:1e:4e:5f:0a:b2:24:
c5:a9:50:33:e4:a0:3d:6b:e1:51:c4:db:39:0f:43:4e:2a:b4:
1d:a2:8a:1f:fd:53:c8:e0:e7:46:fb:c5:51:1f:67:e2:34:ac:
b6:18:e0:30:2e:dd:a7:21:53:a9:2d:ad:80:76:d8:b5:5a:2d:
a4:2d:7a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:08:11 2024 by rpki-client on console-ams.rpki-client.org