Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ckysOzGLlWj_p1zhOcmn-9TUwKw.roa
File: ckysOzGLlWj_p1zhOcmn-9TUwKw.roa (raw, json)
Hash identifier: ZatU81og/YBcuwGU2Mz6Ufw8B9fvxjuge5DSgPRdpdg=
Subject key identifier: 72:4C:AC:3B:31:8B:95:68:FF:A7:5C:E1:39:C9:A7:FB:D4:D4:C0:AC
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 018CC7274869D8BB898F02D4FED6CCCDDA05
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ckysOzGLlWj_p1zhOcmn-9TUwKw.roa
Signing time: Mon 01 Jan 2024 22:31:29 +0000
ROA not before: Mon 01 Jan 2024 22:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201867
IP address blocks: 213.152.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:48:69:d8:bb:89:8f:02:d4:fe:d6:cc:cd:da:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=724cac3b318b9568ffa75ce139c9a7fbd4d4c0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:ef:b5:2f:ee:f3:d0:94:4c:c7:b8:36:98:
e1:19:c6:45:b2:f3:a5:71:24:46:c5:a5:9f:82:12:
2f:5f:b6:bc:82:c8:99:5c:07:5c:f3:6c:a3:03:b6:
3d:98:81:db:ab:48:2c:e8:e6:78:3b:9c:67:92:db:
ff:d7:3a:32:ce:01:69:5f:ae:08:49:e3:5a:37:80:
dc:e4:d3:c9:a4:8d:c0:71:52:6f:f0:ef:d7:3c:34:
7b:a6:68:e9:00:e6:4b:b0:ac:59:5e:26:70:e0:32:
94:e1:3b:0e:3f:61:d9:1a:f1:1a:24:c3:76:06:59:
e8:3b:7f:62:45:47:86:a7:95:e8:aa:33:b1:8a:a4:
68:36:e0:c0:e5:9b:02:6b:7f:5e:d6:51:d6:01:5a:
4d:f0:d2:ed:12:ac:73:f0:44:5e:d7:2d:d9:a7:80:
c3:34:93:75:00:9c:d2:69:6d:6a:2c:8d:07:a6:bb:
79:1a:be:3e:bf:98:ef:1b:83:02:9e:a8:ab:c9:30:
a3:38:bd:2a:d9:1b:bf:4c:d0:3a:9e:ac:33:d6:ad:
99:3d:b8:38:ab:48:9f:fd:90:26:40:6d:6b:5d:57:
9a:84:b3:dc:3f:d7:2b:0f:94:95:12:3e:a9:db:d1:
62:50:a3:03:39:34:00:e6:54:75:d0:73:4c:ba:c7:
ee:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4C:AC:3B:31:8B:95:68:FF:A7:5C:E1:39:C9:A7:FB:D4:D4:C0:AC
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ckysOzGLlWj_p1zhOcmn-9TUwKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.152.250.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9b:5a:90:e4:4e:85:f3:85:a7:ee:db:24:11:92:78:bf:22:
33:27:49:72:8f:46:c2:1d:59:5d:50:38:f8:fc:99:c2:11:38:
9d:ae:18:ea:8e:71:92:87:8f:1e:d4:36:aa:94:a7:8d:8d:32:
74:83:7e:11:06:95:a4:d6:8e:bc:54:42:91:e7:74:00:ff:c9:
1d:ee:6b:27:f3:9e:3b:27:06:45:c4:9b:a5:33:b0:f6:5a:83:
75:12:d7:cf:b3:8b:f6:0b:e3:bd:a4:74:f4:f1:e1:94:be:a6:
b0:1c:fa:7c:48:a2:85:18:7f:8a:06:dc:9d:57:85:17:dd:d1:
71:94:7d:1a:0a:76:3c:26:6b:68:2c:6b:9f:ce:a6:2f:7b:43:
4c:69:d3:a3:07:97:82:f4:ef:ec:02:97:dd:17:98:70:ac:3b:
7b:ae:49:63:b5:1e:a3:72:96:f6:47:57:9b:0c:65:14:d3:60:
06:30:e8:ae:ea:40:40:f9:8e:95:b2:28:37:da:29:5f:5e:df:
d3:e5:68:31:59:02:59:32:cf:77:4c:cc:d1:94:fa:fd:9b:ee:
49:54:bb:19:85:40:53:bc:78:34:ee:ee:46:45:91:ac:ec:46:
cc:85:74:51:27:45:62:eb:fb:c5:02:0d:e4:ce:4d:a9:c8:82:
b6:b8:5e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 19:02:34 2024 by rpki-client on console-fra.rpki-client.org