Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/13z3-NoCE2VUoBiwzXAuTYcoito.roa
File: 13z3-NoCE2VUoBiwzXAuTYcoito.roa (raw, json)
Hash identifier: ioQNFsV5SxUvSjbDRu9MtlSSIt+4pN86Z/Nf6QEWg4E=
Subject key identifier: D7:7C:F7:F8:DA:02:13:65:54:A0:18:B0:CD:70:2E:4D:87:28:8A:DA
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 018CC5005E897D4E2E23EBBF9BEC5477A534
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/13z3-NoCE2VUoBiwzXAuTYcoito.roa
Signing time: Mon 01 Jan 2024 12:29:44 +0000
ROA not before: Mon 01 Jan 2024 12:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15681
IP address blocks: 83.137.240.0/24 maxlen: 24
194.29.97.0/24 maxlen: 24
194.29.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:5e:89:7d:4e:2e:23:eb:bf:9b:ec:54:77:a5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Jan 1 12:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d77cf7f8da02136554a018b0cd702e4d87288ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:51:3f:c5:25:90:b2:e0:3c:13:2d:cf:09:
b4:8d:0d:91:46:71:f1:86:55:ff:ad:59:2a:45:a6:
b1:68:dc:15:4e:b3:31:4f:bd:ba:2a:7d:9a:02:75:
90:ca:72:75:20:4b:14:64:ff:10:f8:42:e0:53:b9:
0a:d7:b6:1e:d3:07:f0:48:ee:ef:d9:af:51:40:9e:
75:35:f7:dd:9c:29:df:35:d5:d5:dd:24:d4:b3:46:
10:1a:4f:d8:0b:fc:78:6d:35:68:dc:42:1a:85:3b:
b8:79:57:6f:50:14:a3:2a:53:88:9b:64:73:46:f5:
3a:b4:0b:d5:98:d0:54:4a:3c:48:c7:16:df:df:0b:
1b:d6:20:98:ff:49:ec:05:4a:f1:54:10:eb:fa:99:
3a:18:a9:20:46:43:af:62:e0:7b:e2:05:07:3c:92:
e2:69:7f:e8:58:6e:33:23:ad:ec:47:3b:33:c3:54:
42:65:07:85:fe:2b:3c:54:f3:50:1a:7a:71:12:8b:
29:60:39:ec:2d:4c:4e:0e:58:94:48:49:0c:f6:91:
d0:9c:c6:73:4d:5e:6c:ae:83:b0:e2:a1:29:09:85:
5c:f1:56:57:a8:06:0d:39:56:e5:f3:83:d4:7b:69:
15:dc:d7:ca:6d:cb:2e:85:67:d0:87:02:fb:6e:c1:
56:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7C:F7:F8:DA:02:13:65:54:A0:18:B0:CD:70:2E:4D:87:28:8A:DA
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/13z3-NoCE2VUoBiwzXAuTYcoito.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.240.0/24
194.29.97.0-194.29.98.255
Signature Algorithm: sha256WithRSAEncryption
64:f2:51:f1:db:2a:ba:63:3b:14:e0:02:d0:34:1d:50:b6:ae:
63:e4:40:e3:12:29:4a:33:be:cb:52:5b:78:b6:c5:81:eb:13:
34:a9:d5:b3:19:b4:ea:05:cf:23:23:a7:8f:4a:0a:92:55:fb:
f3:5b:b6:a7:08:62:43:57:12:22:7e:e2:a5:e4:6f:d6:53:4f:
76:b5:0c:48:2b:d1:e2:23:b3:69:77:73:32:23:76:b5:6a:0b:
28:c0:3b:e2:85:1a:6d:56:d1:d8:dc:c5:ff:12:fb:bf:bb:ac:
32:21:63:0e:da:f0:cb:0b:5a:e5:3a:fe:98:8d:ef:86:94:4d:
92:ce:56:4e:c6:d3:46:17:e3:96:76:2b:c2:9b:f5:07:57:38:
fb:9f:51:cf:d4:78:70:01:ee:c2:a2:a9:97:f9:28:5f:01:72:
4d:42:da:08:31:94:98:f4:f2:4a:2f:31:f6:12:ed:34:ac:52:
c0:44:67:d1:7f:7f:af:49:4f:be:a4:ad:72:39:f6:a3:3e:dd:
8e:23:12:76:91:13:d2:44:8d:fa:ca:a6:62:0e:42:06:48:41:
a7:5f:5c:74:3f:94:28:20:e9:ee:8b:f2:53:58:8f:d4:e0:be:
fb:f5:86:ee:48:e0:9d:a7:10:07:0a:2e:38:08:ff:04:0a:b2:
45:f2:ae:3f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:15:53 2024 by rpki-client on console-ams.rpki-client.org