Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/aTyGHkd8L6xF1SuLySccXunrA14.roa
File: aTyGHkd8L6xF1SuLySccXunrA14.roa (raw, json)
Hash identifier: 8AYIzW3md+dTPySlsQWwzNX5dISOdYU4A3Ie+qx0kR4=
Subject key identifier: 69:3C:86:1E:47:7C:2F:AC:45:D5:2B:8B:C9:27:1C:5E:E9:EB:03:5E
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D7129D207054AE85B90C851BC7B792
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/aTyGHkd8L6xF1SuLySccXunrA14.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213107
IP address blocks: 213.238.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:12:9d:20:70:54:ae:85:b9:0c:85:1b:c7:b7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=693c861e477c2fac45d52b8bc9271c5ee9eb035e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:61:72:80:24:6d:63:35:bd:94:d4:06:31:
b2:2b:db:40:eb:a7:71:32:6a:17:cf:3b:cc:a4:5a:
c1:38:ed:e6:cf:de:ac:bc:c5:c8:61:f3:0b:cf:35:
11:3d:17:5a:a0:e5:fa:71:7e:b2:76:83:ae:14:e9:
12:74:67:48:84:32:6c:08:19:10:25:87:f0:82:0f:
e2:d1:7a:7a:2f:c5:c2:55:e3:75:14:3e:af:62:3f:
91:c1:49:b5:6a:6b:91:e8:a4:d3:b9:05:87:d1:57:
8b:8a:6e:e2:d4:6b:60:1d:46:39:17:89:08:7a:b4:
0a:a9:a3:12:52:f2:af:4a:db:79:62:b2:a2:34:f3:
56:43:ce:da:7e:ee:47:bb:82:b7:8a:3a:37:45:19:
92:aa:54:0b:a4:a3:2c:ee:23:35:8a:43:10:da:d7:
79:49:14:b9:da:6b:6a:fc:82:c7:73:56:ca:8f:bc:
a5:13:4b:ef:cb:65:87:2d:fa:66:e8:50:ef:d9:3f:
e8:ae:12:4c:b6:a1:ab:8b:a1:93:f7:4c:13:74:40:
40:ab:63:29:e1:8e:ce:b1:89:06:ff:9e:9a:44:27:
24:1c:df:a1:ca:4d:c8:c4:b0:d2:8f:c6:b1:9e:4b:
1c:0f:34:56:35:d9:30:af:19:b9:45:25:de:0c:a4:
d9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3C:86:1E:47:7C:2F:AC:45:D5:2B:8B:C9:27:1C:5E:E9:EB:03:5E
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/aTyGHkd8L6xF1SuLySccXunrA14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:11:4e:b2:79:17:56:67:e8:fb:ed:18:d5:f8:fa:a9:be:ef:
48:46:46:53:67:ca:63:51:b5:e7:f1:7e:22:63:5c:18:f3:36:
f3:4b:9b:d8:85:d3:b0:b9:76:5c:e6:bc:c4:a4:d6:c7:31:9b:
0d:f4:4b:3c:c8:0a:90:55:f2:99:35:68:8e:7a:80:56:2b:02:
24:70:ee:aa:69:e6:33:d3:a7:c9:4a:07:4b:24:bc:7a:5a:d6:
64:84:ff:7b:74:60:ca:d2:c7:b9:5d:5b:43:eb:50:fa:2b:2a:
79:2c:c0:9d:c1:5d:92:64:d9:e3:03:b2:87:c7:27:91:5a:1b:
9b:e4:ba:06:26:a0:84:82:de:44:19:c6:85:4e:e8:0f:03:1a:
bb:2f:ec:7e:60:50:24:f6:c3:b4:7a:c3:d0:b2:6a:d8:96:93:
25:00:4f:07:fa:07:9e:08:11:6c:d7:eb:d3:73:ab:06:25:39:
85:15:4e:8a:6a:b1:7a:47:15:9a:f0:74:92:22:52:30:fa:e2:
05:e1:5b:1c:86:eb:aa:2c:fa:5a:76:a5:f5:75:bf:b7:d7:a9:
0b:53:d8:0a:f7:f7:fd:03:57:1b:93:45:c9:b6:83:d4:9b:18:
ee:d5:c1:1f:2f:ff:af:1e:2e:3a:8a:a8:ac:52:79:44:a7:d2:
b6:01:b6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:19:54 2025 by rpki-client