Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/tXm4TbqwcbqMHG2aGveFrlYlI4I.roa
File: tXm4TbqwcbqMHG2aGveFrlYlI4I.roa (raw, json)
Hash identifier: QKsjzMpmRtpIJGAijR2rZ7PNocc6700MsQ/Kkmji0Qk=
Subject key identifier: B5:79:B8:4D:BA:B0:71:BA:8C:1C:6D:9A:1A:F7:85:AE:56:25:23:82
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC7274D40992C35B0B3236F12D55066A6
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/tXm4TbqwcbqMHG2aGveFrlYlI4I.roa
Signing time: Mon 01 Jan 2024 22:31:30 +0000
ROA not before: Mon 01 Jan 2024 22:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20649
IP address blocks: 213.238.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4d:40:99:2c:35:b0:b3:23:6f:12:d5:50:66:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b579b84dbab071ba8c1c6d9a1af785ae56252382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c6:97:f6:d2:b9:cb:88:95:c4:0a:b4:03:4a:
16:8d:bf:d3:40:e1:94:17:9c:61:68:c9:a1:f7:52:
eb:12:d3:46:5e:c1:9f:63:65:03:1f:86:08:8f:75:
17:cc:c4:ad:cd:59:f3:2a:dc:bc:df:73:29:28:e6:
84:9e:4e:53:d3:82:db:67:4d:89:57:d3:1f:c6:88:
2f:d4:06:a5:e5:2d:47:cf:52:6f:dd:00:94:26:58:
dc:f9:e3:bd:bd:d7:6b:61:ed:e6:d4:18:7e:b4:ca:
09:26:75:21:05:4e:a9:25:31:ea:1e:ad:1c:9a:e4:
90:2f:d4:ec:20:9f:b9:8b:d6:c6:2f:0b:2f:e8:3c:
83:36:9b:94:84:d6:be:69:44:33:a9:d3:a8:58:0f:
fe:5c:56:23:f7:88:b1:2f:08:bf:f5:90:4a:a8:81:
eb:64:ea:32:a0:58:7a:a2:e4:85:79:32:0f:d4:ee:
73:94:32:6c:6f:31:38:8f:e2:83:7d:e6:11:ae:b9:
75:c3:f3:56:2f:22:01:b7:9b:a6:26:5f:85:62:ca:
00:70:75:77:55:14:12:59:a4:24:35:d6:1c:9b:05:
f0:54:c2:cf:d8:0a:6a:b2:b2:64:b1:96:f0:f6:8a:
f5:ba:91:d0:b1:eb:f7:a2:83:d9:ca:3b:03:5e:33:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:79:B8:4D:BA:B0:71:BA:8C:1C:6D:9A:1A:F7:85:AE:56:25:23:82
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/tXm4TbqwcbqMHG2aGveFrlYlI4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.177.0/24
Signature Algorithm: sha256WithRSAEncryption
36:bd:02:df:93:c7:42:3b:96:f8:a7:cc:07:72:52:fc:71:3a:
c2:5c:1e:ef:0a:e6:ca:b5:65:5a:c3:15:2d:5a:e0:bd:bd:2a:
8e:75:14:86:32:96:0f:2d:fc:a2:4a:7e:d2:2e:f3:91:de:87:
80:fe:c8:52:88:48:ed:3b:19:d0:77:09:d1:9f:ac:d5:11:8f:
89:05:cf:a9:85:ce:55:25:5e:e7:96:26:06:41:b0:c8:fd:53:
27:e5:bb:b3:48:6a:31:3c:87:65:28:f2:a8:37:31:22:92:63:
a9:a5:b7:99:b6:b3:0d:e7:cf:75:1a:6a:a0:cd:92:f7:7c:78:
32:61:0e:eb:6b:81:6a:24:30:ea:8b:ef:8e:f2:5a:e4:69:d4:
c1:6b:1d:1a:e2:e7:4d:ce:66:ce:f0:90:04:c5:11:e8:64:ea:
b4:75:82:e0:ef:c8:5f:01:25:9d:8a:e5:92:a7:84:b7:f4:27:
e1:e2:9b:ed:14:d2:f6:2b:27:f9:bb:27:ba:d4:bd:65:12:ff:
0f:1f:fd:10:56:aa:4c:4b:51:ff:db:47:fd:5b:7f:6f:1f:6c:
a2:0d:f4:15:ae:35:35:b5:81:ac:54:22:4e:87:02:ee:85:90:
d5:76:69:73:c6:51:18:37:6d:77:fd:02:b6:2a:3d:43:e4:03:
c9:0b:3b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:29:54 2024 by rpki-client on console-ams.rpki-client.org