Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/M13TNvUSwInG9szrM0bG04-qa10.roa
File: M13TNvUSwInG9szrM0bG04-qa10.roa (raw, json)
Hash identifier: 1cts9Lqv/wi7B+GNiFmpmx5Ir3nCFjWWQRqUxKK7i+I=
Subject key identifier: 33:5D:D3:36:F5:12:C0:89:C6:F6:CC:EB:33:46:C6:D3:8F:AA:6B:5D
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018CC5004B36B1C2681917D7977569174A6E
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/M13TNvUSwInG9szrM0bG04-qa10.roa
Signing time: Mon 01 Jan 2024 12:29:39 +0000
ROA not before: Mon 01 Jan 2024 12:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206783
IP address blocks: 217.113.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:4b:36:b1:c2:68:19:17:d7:97:75:69:17:4a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 1 12:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=335dd336f512c089c6f6cceb3346c6d38faa6b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:de:87:51:96:af:d6:7c:07:85:96:f5:93:af:
9f:19:e3:59:91:91:35:8f:8e:49:cc:c7:8c:2d:4f:
16:05:e9:c3:d4:fc:4c:1c:e5:43:bb:30:06:c6:ee:
d9:26:40:b2:0e:3c:ac:ac:f8:d3:c3:cc:b3:0f:e8:
a9:bc:40:06:7a:96:91:9c:7d:d6:eb:80:e7:d3:04:
45:53:b2:1b:6d:6d:15:7b:d3:ab:eb:45:01:57:f9:
3f:5a:e1:3f:13:23:84:70:68:af:73:c9:3f:a1:e3:
83:c8:00:01:59:39:d1:bb:a4:3f:36:64:1d:ba:26:
59:a2:fe:91:0a:ae:0e:c2:2d:28:5a:5a:24:30:f2:
74:63:33:32:7c:6a:08:5e:7a:8c:b5:d3:5c:03:dd:
26:21:71:0c:8d:2f:df:fa:2d:e1:46:94:f0:ae:9a:
43:e7:c3:48:48:9d:2a:c3:d4:ce:b7:10:b7:43:1f:
af:63:01:0d:7c:ac:e7:91:84:8d:5e:ab:58:ef:fc:
22:3f:a0:f6:64:c6:6b:4c:91:49:bb:8c:22:70:f4:
ec:89:4b:28:5f:0c:b0:2f:e0:c7:7c:c5:46:55:73:
00:74:c6:46:7f:a5:92:d1:35:8e:67:28:9e:6c:03:
a1:5b:4a:91:d5:79:3a:4f:8d:c8:8e:55:63:48:06:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5D:D3:36:F5:12:C0:89:C6:F6:CC:EB:33:46:C6:D3:8F:AA:6B:5D
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/M13TNvUSwInG9szrM0bG04-qa10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:4c:b5:42:b8:8c:44:4f:b9:5b:18:66:9f:11:05:50:d0:83:
c3:6f:0e:13:7b:10:c8:b7:eb:06:54:62:cc:4e:fb:9a:70:3c:
95:b6:3f:77:2f:37:da:d7:25:32:c8:21:61:16:7a:f3:f3:30:
f5:57:26:57:1c:6b:e9:97:d8:95:64:02:ef:ad:70:23:85:b5:
42:dd:76:98:fb:6b:6d:eb:d1:17:ac:68:e2:7f:1a:a5:e0:34:
c6:f2:5b:8b:e3:a8:7e:61:84:c0:c6:dd:c2:fd:cb:4b:08:84:
a2:60:c9:66:7b:e9:dd:ed:e1:27:79:19:48:33:b7:bd:d2:06:
1f:3c:8d:1c:b7:c1:3a:ac:b4:17:12:88:5d:97:d0:3f:2d:a9:
07:89:c9:ed:c1:54:70:b6:b2:dd:55:c9:18:0e:86:d8:12:d7:
c9:f5:47:59:69:98:3d:45:a5:a0:0b:6d:fb:37:16:83:ef:1d:
15:fb:2f:bf:1d:7e:eb:32:cc:4e:9f:58:dd:1d:cc:02:22:aa:
4c:cc:41:0b:84:61:6b:4a:f7:b3:8e:5f:78:18:cd:ed:0b:fa:
cf:33:2f:7c:c4:c3:19:03:8f:13:7c:58:e4:31:1e:81:18:bf:
17:67:55:5f:71:79:e0:e2:68:71:25:27:83:40:c6:64:79:7e:
5b:9d:1e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:37:08 2024 by rpki-client on console-fra.rpki-client.org