Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/kUqRhFulHWnq0ytO0YHWuNRpIlM.roa
File: kUqRhFulHWnq0ytO0YHWuNRpIlM.roa (raw, json)
Hash identifier: 26YhykUBcHVyl3uXFjeUa22XDpedsi02Erocqf87o70=
Subject key identifier: 91:4A:91:84:5B:A5:1D:69:EA:D3:2B:4E:D1:81:D6:B8:D4:69:22:53
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC72751C29898043619AF2F6AEF7469B3
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/kUqRhFulHWnq0ytO0YHWuNRpIlM.roa
Signing time: Mon 01 Jan 2024 22:31:32 +0000
ROA not before: Mon 01 Jan 2024 22:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51559
IP address blocks: 213.238.179.0/24 maxlen: 24
213.238.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:51:c2:98:98:04:36:19:af:2f:6a:ef:74:69:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=914a91845ba51d69ead32b4ed181d6b8d4692253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:9a:08:4c:35:be:c4:2a:40:66:80:6e:db:
91:79:18:83:f3:d2:99:18:68:71:6e:d6:be:87:95:
3c:30:09:df:de:97:41:e1:e1:6f:73:1e:88:9f:53:
59:59:37:9b:cd:61:0f:da:f8:6b:8c:25:6a:59:1f:
a6:1b:f2:a1:4e:92:64:70:44:2d:55:a8:49:f5:18:
be:c9:5a:3d:8b:1e:b7:25:48:34:e5:91:cb:0f:ce:
f4:eb:92:f6:1b:df:98:10:0c:91:33:4c:f0:90:35:
f0:db:db:77:7d:16:8c:6d:69:3b:3d:9e:94:a2:7b:
b8:4b:0b:d5:5b:83:34:89:14:6d:ec:1e:41:7b:45:
f8:64:9b:fc:ac:60:5a:49:2f:fc:05:bb:74:f7:d8:
20:c7:f5:ad:4b:74:84:7e:bd:d6:08:09:ac:44:ac:
c8:83:25:cd:1d:22:38:5d:17:0c:5e:30:10:75:b3:
3d:3a:e5:79:44:73:c7:08:56:41:50:42:41:45:44:
5f:35:c2:61:bc:71:b7:ee:b6:18:3e:87:b7:4b:5b:
eb:8f:9d:82:75:32:00:05:58:81:87:eb:40:0b:81:
52:5e:9f:e5:fb:c2:c2:25:40:9a:3d:cf:43:a0:a8:
fa:b0:a7:a4:31:4d:b9:72:82:98:0d:58:c9:07:00:
7e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4A:91:84:5B:A5:1D:69:EA:D3:2B:4E:D1:81:D6:B8:D4:69:22:53
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/kUqRhFulHWnq0ytO0YHWuNRpIlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.179.0/24
213.238.181.0/24
Signature Algorithm: sha256WithRSAEncryption
01:11:31:b4:6a:1b:42:2e:7b:67:39:d8:7a:4e:64:57:f0:80:
f4:e5:4f:39:94:6a:0e:dc:14:63:7a:b1:cb:80:ab:ee:fd:91:
ac:7c:70:31:be:6a:0b:3c:aa:2c:c9:e2:47:aa:56:35:19:81:
29:8b:bf:d7:9c:a0:cd:a8:df:28:87:d6:23:d7:34:28:dc:0b:
ee:27:3c:1f:53:33:5c:d5:aa:f8:52:18:38:e1:8a:42:1b:f9:
76:7b:9a:a1:d7:81:4e:d9:e3:c7:c0:c4:93:c3:c6:a9:b8:df:
3f:0f:bc:71:b0:f9:7b:1f:bc:43:1b:45:45:c8:03:a2:f7:49:
ba:ff:34:94:8c:47:2e:38:c9:9c:c5:5c:5c:50:7d:60:f5:d1:
d3:01:7b:e5:25:24:a0:68:e9:6f:04:5c:93:9c:ea:3d:85:80:
2a:01:4a:4e:3a:db:3c:cb:39:8b:e2:f0:1d:23:79:bf:4d:3c:
5b:40:29:2a:5c:ec:25:97:79:38:49:71:31:bc:09:ad:1d:72:
62:32:00:47:66:89:60:55:4e:45:43:3e:bc:14:88:4f:a7:63:
15:39:2a:65:62:32:db:ad:52:f9:c8:a1:4b:02:ce:72:f9:59:
51:75:44:40:fe:38:de:c5:69:63:be:b0:1a:92:89:16:87:07:
2d:f2:38:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:29:18 2024 by rpki-client on console-fra.rpki-client.org