Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/DcJ7YTFaCkfyk5IVHXQmbZ6g8Ck.roa
File: DcJ7YTFaCkfyk5IVHXQmbZ6g8Ck.roa (raw, json)
Hash identifier: MUqohQHc4SDXsbTIz2Ao9A6SAhrPCR/WOw8FmgoOVe8=
Subject key identifier: 0D:C2:7B:61:31:5A:0A:47:F2:93:92:15:1D:74:26:6D:9E:A0:F0:29
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 018E9EF9F54375F1E558E9D32E4E0C699A19
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/DcJ7YTFaCkfyk5IVHXQmbZ6g8Ck.roa
Signing time: Tue 02 Apr 2024 13:22:45 +0000
ROA not before: Tue 02 Apr 2024 13:22:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198602
IP address blocks: 213.135.92.0/24 maxlen: 24
213.135.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:f9:f5:43:75:f1:e5:58:e9:d3:2e:4e:0c:69:9a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Apr 2 13:22:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dc27b61315a0a47f29392151d74266d9ea0f029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3d:28:cd:5f:5a:9f:7c:23:45:11:0c:04:3f:
7a:22:b2:d0:7f:e3:c1:38:3f:36:a5:c5:8c:2b:99:
c8:67:39:d5:86:93:27:9c:c6:15:05:42:7a:c9:26:
51:9b:cf:48:2f:ec:c3:3c:b0:3a:79:63:55:4c:dc:
2b:02:56:a8:c7:6c:0b:65:35:2b:d8:74:3f:75:5e:
33:ba:d6:38:4b:10:9c:77:fe:19:a5:5e:ba:6d:de:
66:cc:42:99:0b:b1:4c:75:8b:82:61:60:8a:63:28:
e9:a4:37:3b:30:33:74:f7:d4:c3:ee:34:2e:e8:4b:
2e:dc:aa:49:47:e6:ef:c7:55:f0:06:c0:16:ac:88:
58:d6:41:0f:ad:af:b4:c8:87:0d:96:0c:bf:f5:2b:
4d:16:f1:2d:08:f6:93:f6:7b:03:7b:d8:53:70:41:
43:1d:66:20:a3:0d:a1:d8:d3:cb:4d:a8:13:50:cd:
6e:57:c2:6c:e2:d0:46:1b:ba:ef:f4:56:ed:92:37:
8e:c8:89:48:24:db:ae:15:26:5a:02:e4:ec:72:99:
34:76:03:7b:71:5d:ba:a5:d7:7c:da:94:29:9c:a8:
49:10:f5:96:76:4a:96:d9:19:31:a5:e8:71:a1:f8:
80:32:33:68:fb:98:a1:87:94:5f:d9:d6:64:0b:e6:
51:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C2:7B:61:31:5A:0A:47:F2:93:92:15:1D:74:26:6D:9E:A0:F0:29
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/DcJ7YTFaCkfyk5IVHXQmbZ6g8Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.92.0/24
213.135.94.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:ab:ea:18:7e:e0:ed:60:25:b7:9f:56:52:cf:3b:f9:94:28:
73:83:fb:7d:55:32:37:79:75:c0:24:65:5a:49:53:de:93:b3:
69:62:e4:71:cf:84:98:f1:2b:ab:38:a6:ac:4e:c5:00:91:43:
aa:6e:e4:73:5d:ca:08:fb:4c:dd:b4:6b:f2:50:40:b1:e8:b2:
31:d6:bf:78:df:1c:a0:89:99:70:1f:a6:39:44:36:16:c4:be:
94:ff:81:98:59:a1:a4:8c:71:4c:a9:6b:28:60:4c:62:46:bc:
c8:8a:47:b6:f1:c0:cc:c3:e9:ad:61:ac:22:d0:e5:bd:49:43:
21:e6:d3:b6:80:40:ca:eb:52:4d:ce:35:24:d7:08:66:da:36:
fa:2d:7f:ad:5c:16:cd:05:d6:e9:25:d3:c1:55:11:6b:2e:41:
fa:9a:fd:a4:f3:c9:45:70:b8:65:05:78:9f:44:7f:f5:a2:b2:
0f:a3:de:cf:19:f2:58:4d:1c:73:01:3c:31:94:79:82:de:c1:
d3:cd:05:cd:b7:e5:77:58:fd:4f:d9:1d:00:99:3d:e9:39:d8:
db:88:0a:43:2f:4f:f7:ff:83:11:ca:d0:8c:3c:6c:1c:51:39:
49:68:15:c0:42:82:2a:d7:eb:9f:a2:19:4c:bd:74:96:18:6d:
8c:1d:5a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:53 2024 by rpki-client on console-fra.rpki-client.org