Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/8aeSVpJcfSJW1iwHzpRPoAA-tHE.roa
File: 8aeSVpJcfSJW1iwHzpRPoAA-tHE.roa (raw, json)
Hash identifier: Bsh4miGhcJxpY4NMOANMMKb7Z2277tqDJiujXgXQ+6c=
Subject key identifier: F1:A7:92:56:92:5C:7D:22:56:D6:2C:07:CE:94:4F:A0:00:3E:B4:71
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 018D83BE7C8D50ADB182BB2E16AD36C38256
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/8aeSVpJcfSJW1iwHzpRPoAA-tHE.roa
Signing time: Wed 07 Feb 2024 13:25:15 +0000
ROA not before: Wed 07 Feb 2024 13:25:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60139
IP address blocks: 212.113.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:83:be:7c:8d:50:ad:b1:82:bb:2e:16:ad:36:c3:82:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Feb 7 13:25:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1a79256925c7d2256d62c07ce944fa0003eb471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:ad:b0:a7:96:d4:f2:d2:f9:9e:df:4b:46:
16:ab:0c:d8:29:ba:b1:a5:13:37:a7:e3:64:ec:94:
ff:f0:85:95:93:a4:68:c1:94:5c:8a:94:ca:e8:03:
8d:c2:2e:58:b7:0f:2f:94:21:ce:d2:08:bd:87:c9:
3f:6a:05:bf:ce:1c:95:69:be:1f:48:a8:bf:ab:9a:
f7:be:b0:11:67:44:ad:2b:e6:34:6e:52:e2:b7:4a:
eb:a9:6c:51:b0:dc:c2:59:12:cd:d5:bf:af:ce:55:
a9:42:75:b5:70:32:ab:ee:e1:27:2b:71:c9:f6:53:
0a:39:06:e6:96:1d:63:f3:f4:d5:c9:e6:be:a7:0a:
1c:52:c8:b7:63:8c:3c:a5:06:88:85:94:19:45:93:
d2:ea:52:f7:31:dc:bf:f7:bc:2d:18:0f:6b:cf:46:
42:2b:90:2e:9e:6a:ae:5c:b5:5d:8f:11:7d:53:82:
d5:71:3a:19:87:d8:4a:3d:d0:0f:de:57:67:5d:d6:
ed:e3:ec:5f:e1:df:34:c2:da:78:28:86:65:0b:96:
8f:81:a0:5a:a9:fb:ba:4f:a0:9c:fe:5a:b3:3f:bc:
6c:08:b5:73:68:53:ef:13:98:b4:24:56:f1:a3:41:
c4:2a:8e:16:c6:a0:1b:80:75:27:58:4b:51:03:25:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A7:92:56:92:5C:7D:22:56:D6:2C:07:CE:94:4F:A0:00:3E:B4:71
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/8aeSVpJcfSJW1iwHzpRPoAA-tHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.113.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f0:7f:1b:2b:d4:26:08:49:7a:1c:fb:39:e1:f6:aa:63:57:
2e:1b:a2:3f:4d:8e:6d:86:1e:86:89:e6:43:d9:8a:15:20:cf:
1b:33:32:ff:30:80:2e:52:d0:85:ab:c3:5e:61:4a:43:c5:a5:
57:57:27:04:53:62:a8:0b:2b:eb:f4:f5:9d:bf:8a:19:91:03:
f5:50:cd:94:70:5d:31:23:9c:6b:a9:f9:6d:0a:bd:20:d5:8a:
61:2e:59:ec:0b:01:29:30:54:30:a9:1f:7d:92:4f:48:79:f8:
4f:e8:1c:d3:bc:91:4c:54:5a:6c:bd:44:c6:5c:ed:65:ee:a9:
70:c1:c5:f3:9a:ae:c1:98:64:f4:18:27:a0:2e:2b:63:e7:9c:
6a:17:0b:b6:6d:52:a0:d1:82:5c:6c:95:c5:37:23:86:46:14:
48:50:5f:a9:f4:48:53:b4:71:dd:c5:27:87:32:b9:ec:dd:02:
be:67:b7:c2:5d:c3:d5:fc:f9:13:e6:e5:62:a5:c9:a2:27:16:
12:4c:ef:8b:d0:7c:4b:18:b6:fd:65:21:c7:e3:0a:72:9b:e3:
9d:91:2f:76:7d:69:aa:36:5b:9c:e8:a0:e2:64:ef:c1:39:e7:
02:a8:f4:41:96:d0:1d:d9:fc:f5:dd:df:12:8a:67:6f:0b:75:
38:6b:19:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:34:50 2024 by rpki-client on console-fra.rpki-client.org