Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/Gx5MrDTFQnFJCEodloN8XhqEmCs.roa
File: Gx5MrDTFQnFJCEodloN8XhqEmCs.roa (raw, json)
Hash identifier: 4qtH+Wm1kxIi57fxB/08xFabLrSHLISL33Yz6Ie9MDI=
Subject key identifier: 1B:1E:4C:AC:34:C5:42:71:49:08:4A:1D:96:83:7C:5E:1A:84:98:2B
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 018CC56E96093D837E17E441B548EE12DEC7
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/Gx5MrDTFQnFJCEodloN8XhqEmCs.roa
Signing time: Mon 01 Jan 2024 14:30:08 +0000
ROA not before: Mon 01 Jan 2024 14:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199515
IP address blocks: 213.153.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:96:09:3d:83:7e:17:e4:41:b5:48:ee:12:de:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 14:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b1e4cac34c5427149084a1d96837c5e1a84982b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:09:40:58:d8:f4:b7:bf:f0:80:a2:2c:97:16:
67:0b:ee:41:b2:84:e7:ab:ff:85:52:2a:84:eb:4e:
09:c1:11:6d:b5:ab:b2:0f:b3:be:d4:95:22:c8:ad:
cc:94:b9:48:04:7e:5a:b9:84:21:ce:ef:18:cb:78:
04:8b:37:aa:79:8b:e6:e0:26:96:7f:d8:c5:20:96:
17:e7:ec:8d:a0:b4:7c:0f:74:f1:fd:48:c4:a0:12:
64:a5:59:1e:4f:cf:8a:94:b7:3d:18:c3:a7:11:c7:
38:f9:89:e2:7b:4b:ac:be:3f:27:ed:20:2f:3b:0f:
3e:e3:72:af:73:d5:50:03:47:e4:91:5e:82:0b:96:
70:ae:d6:22:7f:45:82:0d:e4:4b:fe:25:21:b5:eb:
af:fe:8b:3a:cc:33:05:f8:04:25:04:97:41:42:a0:
a1:74:e8:44:86:fa:f7:3e:4f:b0:bb:7a:db:6b:bc:
f8:09:6d:04:4f:91:1e:e9:f9:46:22:8a:79:fd:4b:
98:4e:72:b4:89:54:22:67:a2:dc:bf:27:82:9d:fb:
4f:32:0e:92:7c:a3:dc:c5:9a:64:e8:f6:4f:c7:fe:
04:53:a1:9b:92:f5:b9:fa:31:99:53:97:03:f1:4d:
e2:d9:64:81:26:78:5f:82:a3:38:17:93:eb:a3:52:
12:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1E:4C:AC:34:C5:42:71:49:08:4A:1D:96:83:7C:5E:1A:84:98:2B
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/Gx5MrDTFQnFJCEodloN8XhqEmCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.153.232.0/24
Signature Algorithm: sha256WithRSAEncryption
67:4d:c7:6a:55:33:db:d1:73:a8:a6:8e:cf:0e:45:37:a2:73:
76:2a:92:0b:7f:83:7f:c4:05:b6:b8:c4:d3:28:e8:2f:8a:2c:
b6:fd:45:0b:95:8e:cc:ed:7d:1c:ee:4c:bb:94:27:f8:80:c1:
9c:bd:28:a2:d2:4b:6f:10:ff:88:d3:56:86:de:2e:14:6e:c3:
e0:32:1a:87:f6:44:d9:d0:c6:a6:f2:bb:74:b8:6e:b3:58:60:
00:fd:eb:46:2a:d7:ae:6a:cd:b5:86:62:d8:3d:71:b7:35:60:
7c:0b:2d:2c:b3:d0:b5:d6:bc:7c:3f:aa:ca:ac:ff:29:ec:ea:
1b:97:e7:43:69:37:5d:ad:ae:a1:d8:7d:83:a9:8e:42:51:a8:
cf:a0:16:d7:9b:6f:19:8b:8c:d2:cd:7e:91:4c:e1:38:76:28:
81:88:7f:8d:a0:19:2e:8f:26:df:00:0d:29:9d:3e:05:f0:a1:
2b:a8:df:bd:6f:27:8b:4d:7f:14:13:a4:44:a1:ec:c3:a1:30:
1a:c5:c5:0d:ee:cb:6a:7a:b9:f1:a4:a1:74:26:bf:06:51:cf:
cc:fc:d5:e7:bc:e5:05:1b:ea:e0:8f:77:47:4d:c1:76:3f:75:
98:0f:a2:4f:43:d1:6a:7a:96:44:67:57:8f:50:fe:69:7b:11:
4d:35:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:17:43 2024 by rpki-client on console-ams.rpki-client.org