Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/AmW2NySToODC32aJkhGvG2CTVlU.roa
File: AmW2NySToODC32aJkhGvG2CTVlU.roa (raw, json)
Hash identifier: 7B8fWaEDmdkK0OUuAVvFl3RhusNQicihxefNE3Hnyhg=
Subject key identifier: 02:65:B6:37:24:93:A0:E0:C2:DF:66:89:92:11:AF:1B:60:93:56:55
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 018CC2DABBAE8D86027C59596DCA6291116C
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/AmW2NySToODC32aJkhGvG2CTVlU.roa
Signing time: Mon 01 Jan 2024 02:29:23 +0000
ROA not before: Mon 01 Jan 2024 02:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47448
IP address blocks: 213.187.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:bb:ae:8d:86:02:7c:59:59:6d:ca:62:91:11:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Jan 1 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0265b6372493a0e0c2df66899211af1b60935655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:96:e0:05:ca:29:29:ac:a7:b8:48:35:81:
69:6a:44:80:78:59:3c:0a:0d:d1:53:da:38:11:1e:
65:1c:7b:bb:d3:39:21:d5:27:9c:18:f3:40:3c:fb:
96:e4:e4:70:ec:6c:f8:77:31:67:35:5a:16:13:51:
32:aa:ab:e4:bc:80:91:35:50:6e:fe:2f:dc:f6:78:
21:55:63:7e:04:b3:00:b6:0c:34:db:a0:c4:56:df:
cf:f9:7e:60:8e:31:84:d3:d7:92:b6:47:04:d0:a1:
f2:e8:41:4a:f3:2e:c9:e1:a3:04:d7:b6:a7:79:34:
b7:f7:8d:f5:4b:8a:8b:a6:90:c0:c8:29:d2:b8:8e:
b6:60:d3:38:8b:50:c6:93:ac:56:f2:11:37:15:8b:
7e:91:f1:c5:2b:41:09:eb:7e:49:c3:76:a2:ef:11:
c1:90:8e:b7:4e:47:5b:4c:17:dc:f1:df:69:e3:9a:
72:43:bd:5c:b7:c1:e4:62:d7:25:30:23:d4:6a:0c:
f9:7b:0e:ed:ac:9d:0b:b5:59:9c:77:af:ce:d6:2b:
3b:60:12:5a:ef:97:8f:de:46:d8:56:9b:48:c0:19:
b7:24:ed:1a:6f:ea:6a:7b:ec:ff:7e:78:5f:2b:d5:
e8:c9:c4:60:c6:d9:7a:23:10:8c:ab:84:1f:43:83:
59:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:65:B6:37:24:93:A0:E0:C2:DF:66:89:92:11:AF:1B:60:93:56:55
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/AmW2NySToODC32aJkhGvG2CTVlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.187.234.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:71:e6:82:02:ff:68:a0:57:0f:40:76:ca:3e:03:5f:b6:e4:
19:7a:d2:0f:6e:2b:66:d2:aa:ed:9b:1e:32:8d:4e:5a:99:ba:
37:1c:89:df:26:1e:b9:1b:7e:aa:3e:57:11:6b:46:05:25:00:
eb:7f:74:4a:43:85:ff:7d:14:4b:e1:4d:2d:3a:aa:c5:87:e7:
71:cc:80:6e:26:f3:4f:b3:32:ca:47:10:79:8c:7d:f5:fc:4d:
04:31:20:61:c8:fc:64:1d:a0:8a:ef:8c:8f:52:9a:41:f2:16:
9a:f0:67:c3:d8:29:22:54:a1:d8:df:52:5e:35:8c:39:e2:d3:
66:0e:75:ac:52:9f:76:d0:47:8b:5d:3c:f2:6b:3c:e7:5f:a7:
01:6c:ee:29:35:fa:ba:a4:39:d0:5e:e8:62:ad:ae:4b:12:bf:
59:68:99:df:15:51:59:bd:8f:1f:71:b6:f6:8a:e9:97:fe:85:
54:38:ff:ed:07:7f:4d:76:f1:48:a4:17:9c:ed:8e:c5:33:7a:
9c:97:98:83:b0:1a:fe:1c:0d:84:03:ce:a6:76:e0:97:3b:b6:
af:0a:4a:55:a2:b3:fa:ee:f9:65:dc:8d:23:f5:f3:b7:29:78:
ac:5f:d1:98:ba:7e:53:6d:86:9f:e4:08:3c:c2:b7:df:85:65:
db:22:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:41:40 2024 by rpki-client on console-ams.rpki-client.org