Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/Tg6lG47NR2Yrql3_tT_qrE-EzvQ.roa
File: Tg6lG47NR2Yrql3_tT_qrE-EzvQ.roa (raw, json)
Hash identifier: BzTY1HGFdq6/1OuudHn2dPpgYPVi9k1ezkXuUXqK9Us=
Subject key identifier: 4E:0E:A5:1B:8E:CD:47:66:2B:AA:5D:FF:B5:3F:EA:AC:4F:84:CE:F4
Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Certificate serial: 018CC86EFA950983A96A3AA7D2A28E3BC9E0
Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/Tg6lG47NR2Yrql3_tT_qrE-EzvQ.roa
Signing time: Tue 02 Jan 2024 04:29:25 +0000
ROA not before: Tue 02 Jan 2024 04:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41256
IP address blocks: 213.92.216.0/21 maxlen: 21
213.92.128.0/18 maxlen: 18
213.92.128.0/17 maxlen: 17
213.92.240.0/21 maxlen: 21
213.92.248.0/22 maxlen: 22
213.92.252.0/23 maxlen: 23
213.92.192.0/22 maxlen: 22
213.92.190.0/23 maxlen: 23
213.92.192.0/18 maxlen: 18
213.92.196.0/22 maxlen: 22
213.92.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:fa:95:09:83:a9:6a:3a:a7:d2:a2:8e:3b:c9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Validity
Not Before: Jan 2 04:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e0ea51b8ecd47662baa5dffb53feaac4f84cef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:b5:52:64:84:84:36:b8:c6:83:10:fb:4a:
3f:55:06:b2:42:53:45:76:44:7f:6a:0a:47:31:25:
b9:2e:f8:b2:ec:0d:27:fa:f7:e6:03:fb:01:49:32:
a1:3f:16:22:48:cc:56:63:e2:db:55:b0:68:0d:3d:
32:5b:8a:98:61:7f:8d:05:e3:2b:cc:e8:14:6b:14:
e6:a0:84:37:65:26:69:fe:27:5c:20:3f:f6:c5:49:
e4:30:61:27:dc:d5:e9:2f:4a:0d:3d:a0:c9:85:43:
87:d2:64:ad:1d:9b:73:6e:18:9b:02:72:34:c1:5e:
8f:c3:41:77:9c:dd:97:e3:f9:d5:67:6d:52:b7:27:
6b:e1:fe:38:b6:a9:cd:b5:8c:67:34:9b:da:e3:88:
a5:f3:12:b8:e3:6c:ce:03:b1:99:0d:5f:6f:89:3b:
5e:37:0a:0c:ce:71:2f:b0:ab:2e:62:f7:13:fe:13:
8c:e1:e1:6e:04:cd:1b:83:87:af:f7:a1:0e:ce:80:
4a:78:df:7e:33:0e:a3:27:b4:f0:3d:aa:44:66:18:
89:1f:4d:03:4a:02:c5:aa:50:7b:7d:17:26:02:67:
0f:a0:ff:1d:69:b7:c3:ac:59:c5:ef:49:f5:a3:a3:
86:aa:7b:db:96:74:1b:30:1c:46:20:e4:71:52:9b:
56:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0E:A5:1B:8E:CD:47:66:2B:AA:5D:FF:B5:3F:EA:AC:4F:84:CE:F4
X509v3 Authority Key Identifier:
keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/Tg6lG47NR2Yrql3_tT_qrE-EzvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.92.128.0/17
Signature Algorithm: sha256WithRSAEncryption
67:d2:fc:5e:fe:56:d6:f3:e1:3d:4c:df:6e:76:45:35:28:0c:
e3:5d:59:c3:4f:64:8d:85:c4:94:b6:d7:ab:41:00:4d:6b:1f:
2e:61:c5:04:4c:24:8b:96:f8:98:87:7e:a7:ca:ba:af:ee:86:
6e:8e:e1:6c:c6:00:48:3b:5f:8f:d3:bf:46:70:4e:08:bf:08:
ae:fb:9b:0e:58:b4:45:06:1a:94:a1:6f:c0:05:89:c5:64:ee:
5e:18:73:c2:f1:54:93:cd:96:c2:48:9f:3a:94:dc:98:95:7d:
5b:4c:6a:37:0c:f7:da:14:f3:57:87:9e:0e:6c:c1:be:a8:18:
a0:47:1e:07:86:f3:0f:64:a0:15:2d:94:b3:dd:6e:79:9e:eb:
2b:92:40:fe:b0:86:26:d6:58:ba:16:3f:f4:74:58:fc:7a:01:
93:1a:9b:d4:52:3a:10:2d:1a:30:4c:6a:e3:87:2e:52:93:33:
88:b5:10:cd:0d:76:5a:45:74:44:df:08:2e:bd:07:b0:59:22:
5b:22:e1:ee:df:b0:98:60:59:c6:28:61:f2:d5:8c:7a:1a:f9:
21:6b:cc:27:2b:a3:08:21:2b:1c:7c:ef:3d:38:23:5d:c6:40:
9c:6e:fd:0a:6b:10:26:78:c4:05:c1:ea:94:f0:8d:f1:d2:bb:
46:95:80:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:27 2024 by rpki-client on console-fra.rpki-client.org