Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/6rLECGeYxQzQUfs0wxE27Ycfm0M.roa
File: 6rLECGeYxQzQUfs0wxE27Ycfm0M.roa (raw, json)
Hash identifier: KBavSnq4CFXbU988b0qNqbsUBKnIMA2ZEbo6t3K/Ubs=
Subject key identifier: EA:B2:C4:08:67:98:C5:0C:D0:51:FB:34:C3:11:36:ED:87:1F:9B:43
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC72756358F276BB4D39B854DD3D4DC6F
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/6rLECGeYxQzQUfs0wxE27Ycfm0M.roa
Signing time: Mon 01 Jan 2024 22:31:33 +0000
ROA not before: Mon 01 Jan 2024 22:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210388
IP address blocks: 213.238.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:56:35:8f:27:6b:b4:d3:9b:85:4d:d3:d4:dc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eab2c4086798c50cd051fb34c31136ed871f9b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:ee:d4:33:ea:cc:7b:a6:f9:ce:e5:b4:f6:
74:1d:25:16:b9:83:29:27:66:e5:d2:b5:96:68:8b:
5c:f6:2c:d5:77:71:67:84:51:99:c1:de:ac:63:8a:
04:7c:4a:f2:87:19:f1:2a:41:20:91:ca:41:f1:6f:
79:41:28:5a:c3:c9:29:95:df:09:6d:dc:8d:92:31:
c4:cc:09:10:3c:ce:2f:1f:9f:52:44:93:df:87:dd:
bd:16:ba:27:f5:c5:32:65:48:1d:19:bf:98:67:6f:
f5:b0:43:33:14:9c:13:56:86:3d:1e:bd:86:86:a4:
83:7e:2f:38:0a:20:5b:61:3a:65:e7:fb:53:39:b9:
b8:40:09:0c:60:44:92:39:32:f6:1e:15:6a:20:62:
35:5e:29:e9:82:0f:a5:f3:ef:db:bc:e0:37:1f:4a:
b1:5e:91:86:fe:bc:a0:30:22:ea:12:d6:38:46:ed:
43:06:90:94:04:6a:e6:7a:70:32:ec:ea:2a:e0:7f:
b7:c1:cd:23:eb:76:eb:27:0c:94:29:38:e7:93:56:
fa:0f:45:fe:b9:f7:34:5a:ae:e7:b0:a9:e7:26:62:
6f:cd:13:4f:25:4c:96:35:83:c6:7a:41:9a:57:12:
bb:c5:41:bc:de:39:60:1c:68:a2:e0:b7:8a:65:b9:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B2:C4:08:67:98:C5:0C:D0:51:FB:34:C3:11:36:ED:87:1F:9B:43
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/6rLECGeYxQzQUfs0wxE27Ycfm0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.191.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ec:8b:b4:b1:cd:71:d2:e5:b9:62:e1:7e:f5:76:9f:28:1b:
ca:3b:67:28:96:a1:fd:a8:bb:54:5b:66:cb:b5:6b:de:51:fd:
16:62:87:9f:1f:71:83:20:43:1e:a2:ab:98:c4:6f:4a:9a:26:
30:a3:ed:80:1b:02:6c:23:7b:e3:9d:18:1a:98:a9:a6:0c:d4:
15:97:4f:64:64:a2:f8:84:d7:f9:1d:46:68:e4:c5:7c:63:43:
d0:62:01:bd:23:e7:72:c9:9c:fa:c4:a1:05:67:0e:37:ad:90:
25:e1:27:46:26:9e:da:1d:90:b7:3f:89:b6:4e:09:43:54:22:
64:24:55:5b:7b:c5:85:bd:a8:da:d3:98:49:56:e4:48:6a:45:
52:0c:f1:c2:7f:fe:75:2b:ea:33:f6:c6:51:89:c0:aa:0f:d0:
7e:6e:83:73:69:0c:1e:56:cf:f8:2b:9e:0a:3e:74:19:c3:7b:
f9:f5:c1:ea:70:77:47:81:0d:1b:25:19:b2:4b:77:b7:d8:be:
ac:df:97:3b:15:e1:1b:4a:aa:1e:38:ae:7f:90:7b:5f:33:db:
d8:17:90:87:1f:df:a1:20:1b:53:ee:13:58:6c:9a:a2:87:a6:
de:20:15:21:1b:4b:bf:ef:3e:e5:72:32:3d:63:a7:18:bf:c6:
77:51:5d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:17:22 2024 by rpki-client on console-ams.rpki-client.org