Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/DmIk6NOP_VhFDm5KLI23TayWrmc.roa
File: DmIk6NOP_VhFDm5KLI23TayWrmc.roa (raw, json)
Hash identifier: FvXhM3hjyhSj253gCSZESiCcwmjqz1L+RF8NyLgiTIw=
Subject key identifier: 0E:62:24:E8:D3:8F:FD:58:45:0E:6E:4A:2C:8D:B7:4D:AC:96:AE:67
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC7274CF139BF21E6BD36B348091A04FC
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/DmIk6NOP_VhFDm5KLI23TayWrmc.roa
Signing time: Mon 01 Jan 2024 22:31:30 +0000
ROA not before: Mon 01 Jan 2024 22:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15464
IP address blocks: 213.238.144.0/21 maxlen: 21
213.238.158.0/23 maxlen: 23
213.238.155.0/24 maxlen: 24
213.238.157.0/24 maxlen: 24
213.238.156.0/24 maxlen: 24
213.238.128.0/20 maxlen: 20
2a02:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4c:f1:39:bf:21:e6:bd:36:b3:48:09:1a:04:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e6224e8d38ffd58450e6e4a2c8db74dac96ae67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:89:5a:0f:4d:2d:d5:df:12:17:9d:f7:d3:
c0:d8:3c:3e:c5:f0:58:70:11:ad:9a:f9:32:c9:c6:
e7:28:fb:b4:1a:14:ac:b2:7a:da:db:ca:26:77:1f:
67:38:53:2e:23:18:7d:64:37:c1:54:b0:3d:36:11:
74:4d:a4:a1:c8:3b:96:52:72:75:f2:48:65:6a:6a:
1b:29:5e:0d:c4:a5:19:91:1b:7a:6b:85:24:74:8e:
36:38:30:13:ad:46:ce:ee:0c:07:2c:5b:91:c7:b6:
ea:9d:19:9a:1c:56:9d:ec:bc:98:74:55:97:9c:b8:
24:66:42:29:04:84:08:d9:bd:7c:51:f7:15:f6:9b:
cf:d0:33:5e:97:61:d1:4d:2c:76:c8:48:43:80:19:
55:d5:c2:e7:72:70:1e:df:c8:8c:23:bd:c5:58:cd:
32:49:6b:d8:e6:3f:ea:65:4e:77:81:f3:b8:85:ee:
df:04:dd:2a:c4:14:18:b5:04:e2:41:f6:1d:9b:c9:
d8:94:85:65:04:3f:eb:2b:0e:a0:27:f6:73:e4:c7:
42:ab:3e:28:8c:c2:be:09:1a:6d:25:6f:68:a5:7a:
6d:08:f0:03:b7:17:b9:f4:0a:51:6d:d2:dc:dc:20:
ca:ec:df:9b:68:bc:37:05:24:35:cc:f4:71:f0:53:
48:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:62:24:E8:D3:8F:FD:58:45:0E:6E:4A:2C:8D:B7:4D:AC:96:AE:67
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/DmIk6NOP_VhFDm5KLI23TayWrmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.128.0-213.238.151.255
213.238.155.0-213.238.159.255
IPv6:
2a02:50::/48
Signature Algorithm: sha256WithRSAEncryption
a7:e3:09:e6:e4:65:a8:90:6f:77:cc:81:da:c9:8b:25:d7:f7:
b9:73:e7:cf:ba:0b:71:dc:bf:e8:38:52:63:34:6b:3f:68:3a:
29:c5:da:ed:e2:34:30:69:3d:85:58:c6:78:c0:9f:99:84:0b:
64:24:66:2b:1a:05:1c:9e:7f:9e:3d:7d:24:30:98:c0:bd:b9:
63:20:54:19:0f:65:5e:90:23:c6:0d:b4:8a:60:15:cd:4c:06:
e6:0f:30:d3:ed:bf:b3:d9:25:03:a7:80:2c:b9:cd:3d:c8:88:
02:06:b3:ff:fc:3b:be:86:99:70:24:62:e7:d8:10:66:b2:46:
01:b5:93:09:98:a0:44:00:f3:81:e4:53:17:2d:fd:98:13:60:
61:fc:c8:d2:1c:ba:ee:83:62:c2:1c:43:1b:bb:e0:b0:79:cf:
4a:0d:70:d3:18:cd:d6:89:e7:cf:1b:52:39:3e:43:55:ee:2b:
8b:bd:4a:56:46:5d:67:b9:f7:42:0c:09:90:f6:cb:b6:a8:54:
e4:54:89:0a:e3:1e:2b:e5:3f:54:88:e2:db:6c:e6:aa:c4:db:
e2:de:0f:2a:26:bb:84:d6:3a:95:97:59:54:b0:28:a3:8f:5c:
4d:f9:32:2a:bc:c3:bf:ae:a6:88:2c:ac:c0:29:c6:c8:e2:be:
b7:72:09:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:42:16 2024 by rpki-client on console-ams.rpki-client.org