Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/loZ_tXwo1cmcwviVrJpRxPacLks.roa
File: loZ_tXwo1cmcwviVrJpRxPacLks.roa (raw, json)
Hash identifier: +nCx5sRsuq+WHVfr/Ocgb3UQ4Hmyxq6YJg3wrXouTYo=
Subject key identifier: 96:86:7F:B5:7C:28:D5:C9:9C:C2:F8:95:AC:9A:51:C4:F6:9C:2E:4B
Certificate issuer: /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial: 018CC8011AF0BE841567BF3A85E1E97BC748
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/loZ_tXwo1cmcwviVrJpRxPacLks.roa
Signing time: Tue 02 Jan 2024 02:29:24 +0000
ROA not before: Tue 02 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5432
IP address blocks: 213.137.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:1a:f0:be:84:15:67:bf:3a:85:e1:e9:7b:c7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Validity
Not Before: Jan 2 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96867fb57c28d5c99cc2f895ac9a51c4f69c2e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:58:42:03:42:e7:bc:32:7f:37:e7:83:58:d3:
1b:4b:f6:b7:ce:12:36:47:39:e6:c7:41:f8:41:d6:
39:6e:31:0a:33:bb:a2:1a:cb:a2:04:28:29:99:d8:
16:96:66:87:c4:59:20:06:25:69:b6:40:68:54:4e:
d3:46:42:bf:d0:73:77:fb:5a:09:c2:17:ea:76:05:
fe:32:e8:41:dd:47:52:45:30:dd:1e:bc:05:8a:54:
b2:98:d0:db:8d:e5:be:0b:c2:4d:bf:be:9e:6c:9b:
47:0a:80:22:ca:40:a8:44:59:3f:48:b0:e9:15:4a:
08:83:55:14:6c:61:2a:04:f3:cc:a7:79:e0:19:93:
74:b4:b3:46:79:7f:9f:84:37:79:d8:c4:fa:0a:b4:
97:76:47:fe:1c:22:58:4b:10:cb:d8:4f:03:91:45:
dd:bb:e8:f7:1e:1d:bc:d4:0d:91:99:c6:db:e1:c3:
78:dc:6e:33:f3:6b:b7:a1:a6:62:7e:01:0b:1d:a9:
ee:bf:1d:02:dd:80:cd:8b:b9:b7:1c:74:85:1c:56:
c5:31:6e:93:5d:6d:16:3c:92:ee:be:db:0a:14:6b:
98:b1:3e:70:b8:33:86:a1:86:6f:1f:8d:51:89:49:
32:68:a4:7e:7d:e2:ee:f2:91:dc:84:73:c4:e6:ee:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:86:7F:B5:7C:28:D5:C9:9C:C2:F8:95:AC:9A:51:C4:F6:9C:2E:4B
X509v3 Authority Key Identifier:
keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/loZ_tXwo1cmcwviVrJpRxPacLks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.157.0/24
Signature Algorithm: sha256WithRSAEncryption
10:dc:b9:9e:6c:ce:3e:39:4d:b0:9d:d3:64:25:5e:a8:0d:8c:
82:65:e7:a2:d5:b4:ef:71:47:a4:f5:4c:c0:88:27:0c:3c:96:
75:ca:9b:df:80:87:0e:67:5c:30:71:14:be:0d:fa:17:7e:9b:
03:55:0e:2e:5e:50:35:b2:68:10:d9:a3:23:f6:8f:ae:53:b3:
a3:31:71:23:8c:45:ad:7e:3c:91:f7:45:e2:1e:5a:f1:57:cd:
33:cb:2b:1a:b7:6d:1d:b0:c8:85:9d:81:b1:b8:73:8a:a0:71:
15:39:9d:24:9f:ed:f1:44:8f:8a:1b:1b:35:6f:9c:fe:ac:ec:
0c:5b:e9:2f:44:60:55:2d:d9:07:77:17:ff:a1:70:bf:53:b9:
74:e1:7a:93:5c:3c:5a:47:48:f2:45:97:6b:99:f7:1b:b9:f0:
01:4c:d4:54:15:62:54:78:7e:5c:08:d0:d6:f6:9c:a1:bd:34:
09:33:e8:db:33:d4:04:2b:3b:11:8d:05:64:7b:fe:ae:23:3d:
89:43:d9:9d:ff:87:68:61:e0:49:8c:51:a5:82:06:f9:67:ac:
e7:01:9e:ba:1c:ad:b5:bb:d2:aa:65:02:61:d4:f9:69:67:bc:
8a:bb:a7:b3:c9:53:74:7e:fd:d1:a2:d5:2b:48:07:db:99:eb:
d9:a7:06:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:18:31 2024 by rpki-client on console-fra.rpki-client.org