Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/7y6h15TQCVxlEH4JV1IOzUbhvb0.roa
File: 7y6h15TQCVxlEH4JV1IOzUbhvb0.roa (raw, json)
Hash identifier: 4vvm8JztqyzEz9c+pSRbcBTELxC78B+kH/Hb5jrYMjM=
Subject key identifier: EF:2E:A1:D7:94:D0:09:5C:65:10:7E:09:57:52:0E:CD:46:E1:BD:BD
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 018CC801A60426BD7BC2BE34F28D55F57260
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/7y6h15TQCVxlEH4JV1IOzUbhvb0.roa
Signing time: Tue 02 Jan 2024 02:30:00 +0000
ROA not before: Tue 02 Jan 2024 02:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50832
IP address blocks: 213.135.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:a6:04:26:bd:7b:c2:be:34:f2:8d:55:f5:72:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 2 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef2ea1d794d0095c65107e0957520ecd46e1bdbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:81:b7:fb:38:f0:3c:de:97:be:67:ab:0e:
10:c0:98:c8:a3:46:2e:ec:5e:b8:bb:74:8a:dc:c5:
ca:90:6f:80:e7:01:e1:9c:0a:82:c8:b2:71:e5:a8:
58:e6:0e:38:fe:7d:b9:b6:1c:02:4b:43:78:92:1f:
01:ba:77:f3:e6:63:2c:d2:20:5a:cf:28:fd:98:8e:
7c:f5:b2:7f:d8:23:bb:ad:b1:09:db:05:d7:c2:14:
4f:cd:06:45:49:6e:2b:1b:92:07:a3:39:70:16:ea:
74:f2:5d:0f:2d:7c:1d:ae:2a:0d:8a:7e:31:b1:9f:
67:a9:3e:1d:c5:e7:fd:61:61:0b:ed:7d:f7:b6:26:
7d:c6:ca:f6:cf:b9:50:e5:18:6f:f6:da:57:d2:0a:
b6:a9:a7:4d:38:11:c8:5a:31:7f:d6:dd:e7:03:b0:
2d:8c:c4:27:c6:6f:06:e6:01:02:10:95:d2:2c:2d:
37:1c:60:2f:ee:f4:75:ab:8c:88:62:0c:d2:70:5a:
b8:d5:26:63:09:c0:44:00:e3:db:2b:a0:77:e1:65:
b1:78:cd:5a:43:30:ca:38:ab:7f:e1:4d:47:9b:e3:
2a:44:59:c0:f1:17:05:43:12:fb:2c:d4:a2:a6:b5:
b8:c8:39:11:63:25:cc:f6:ab:96:21:00:ef:32:e9:
2a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2E:A1:D7:94:D0:09:5C:65:10:7E:09:57:52:0E:CD:46:E1:BD:BD
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/7y6h15TQCVxlEH4JV1IOzUbhvb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.81.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a9:e7:ca:ba:3c:1d:69:d5:bc:c0:68:91:cb:d1:a2:e7:d2:
a0:2d:a9:1b:a2:8b:18:d4:09:4e:60:3c:75:79:f2:ef:3b:3b:
cc:79:7d:a2:26:37:dc:d7:4a:ee:63:7e:9c:8e:26:01:11:31:
1f:4a:8f:8f:4f:d1:ec:78:d6:f1:78:96:ed:7f:f1:a9:a1:cd:
1a:58:38:9f:22:70:a1:15:bf:0a:97:e7:4d:4c:d6:7d:be:33:
17:fb:fd:46:69:1c:9a:45:e2:cc:b3:1f:99:11:e8:ad:1c:1f:
11:6b:5b:56:32:6e:94:a7:0e:30:aa:ee:e7:e4:5f:05:d3:64:
e8:ef:a2:04:99:50:ec:5a:ad:dd:e1:65:b6:58:3f:da:91:d5:
c1:f7:19:a6:d6:7c:4e:1b:4d:17:9c:5c:04:c6:54:e1:1e:c6:
08:5e:c1:90:c4:49:8e:c3:df:81:7b:f2:23:aa:fe:46:6d:8e:
ac:b7:aa:db:f7:b2:c7:55:04:cb:40:26:35:ea:1b:b0:3c:c7:
76:9a:2a:9f:fe:3f:e7:8d:9b:c5:b7:ca:6e:52:01:f9:33:d0:
0e:e2:71:70:e9:bd:d3:8c:91:5a:2c:2c:c8:9c:35:96:5c:f9:
2b:ed:9a:0b:7c:38:c7:ba:5f:6b:19:00:89:9d:bf:d5:8a:00:
36:19:27:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:14:13 2024 by rpki-client on console-fra.rpki-client.org