Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/v1JR24REyoXMEpWDpfYEsZeEb7I.roa
File: v1JR24REyoXMEpWDpfYEsZeEb7I.roa (raw, json)
Hash identifier: bvGXvmZCdEGBFpkKif0ZpDrndrP77tfZdLY05+V+dbg=
Subject key identifier: BF:52:51:DB:84:44:CA:85:CC:12:95:83:A5:F6:04:B1:97:84:6F:B2
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC727528A73AEFA79E8220F10B37F96DA
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/v1JR24REyoXMEpWDpfYEsZeEb7I.roa
Signing time: Mon 01 Jan 2024 22:31:32 +0000
ROA not before: Mon 01 Jan 2024 22:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 213.238.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:52:8a:73:ae:fa:79:e8:22:0f:10:b3:7f:96:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf5251db8444ca85cc129583a5f604b197846fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:18:fe:0a:5e:f5:63:f1:16:d8:60:b2:44:
51:9d:c7:81:e9:da:3f:83:5f:24:1c:59:a0:0d:4b:
34:7e:da:5a:3a:ce:ba:7b:01:a1:ce:1c:7d:18:d2:
0a:df:d4:b0:5e:76:4c:37:91:27:89:f3:15:83:a5:
c4:85:36:e2:1d:e0:27:c1:db:63:e6:b2:78:39:79:
9b:cc:4c:97:dd:ae:3b:56:31:8c:b1:65:7c:a1:fe:
d5:24:8b:d7:64:43:a6:11:8d:d9:2b:37:22:d0:22:
92:8a:94:8a:0c:b0:d0:5d:f1:5a:fb:ea:11:77:a5:
9a:a7:29:8a:15:fc:09:2a:e6:91:ad:4b:13:49:a7:
68:f7:30:6f:cb:b7:37:4c:4b:a6:6e:2c:bb:88:03:
21:5b:a2:2d:4f:05:43:e2:99:24:a2:59:12:52:a8:
26:ca:44:cf:fb:62:b6:d7:d6:d0:7c:65:23:12:f9:
45:8e:b1:ed:7d:46:34:7c:96:32:99:93:d2:29:89:
c3:c1:0c:5c:bb:39:89:8b:75:bb:b9:58:4b:55:b2:
7f:79:9e:9e:ef:bf:43:c6:21:69:cd:7f:75:28:4e:
85:65:da:9a:26:ef:e9:f7:67:e4:dd:06:b0:2e:0f:
47:0a:62:82:90:b6:a5:39:13:4d:89:50:8e:2a:b0:
1c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:52:51:DB:84:44:CA:85:CC:12:95:83:A5:F6:04:B1:97:84:6F:B2
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/v1JR24REyoXMEpWDpfYEsZeEb7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.167.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:fd:98:db:23:93:3e:07:a2:e0:02:a2:77:95:11:42:7a:66:
5d:93:0f:a5:25:7f:e2:66:53:9b:89:a3:23:22:d6:f7:62:56:
aa:94:a8:61:c5:2d:89:b7:93:fa:5d:83:71:ee:f5:08:d0:f9:
63:f9:13:64:60:35:0b:02:0f:d4:66:43:b2:b2:20:e6:a2:c2:
c3:16:e2:df:ee:28:c6:e3:97:be:9f:04:c6:f1:a9:65:11:8c:
b8:e2:da:b9:a3:24:97:e9:09:b2:3b:8b:b3:84:5a:b6:e2:c3:
df:ad:5d:1d:7d:7d:df:4a:2c:bd:d2:92:b5:56:ea:90:65:1b:
74:80:95:a7:d7:ad:61:c7:ca:4e:a6:36:ae:e5:8a:36:da:45:
c4:a1:5d:7c:60:a0:48:63:ed:32:dd:ae:97:a1:df:a7:17:a0:
d0:50:67:ff:eb:c7:3b:05:04:6c:b1:64:03:44:03:9f:5c:2c:
46:4d:bd:41:0b:ec:a0:c3:82:c9:44:eb:e0:45:92:d6:a7:cc:
a9:cf:c3:f2:8c:d1:d2:8f:76:3f:39:52:9c:11:2f:7a:b6:6c:
d7:43:71:c5:66:52:b8:73:fe:06:4d:4b:f6:48:dc:09:ea:15:
50:56:71:fa:95:cb:0d:66:a8:fc:75:f7:e1:f3:8a:1f:78:16:
6c:10:4d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:29:54 2024 by rpki-client on console-ams.rpki-client.org