Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/h2yRPerrhfhxK8Z1225FUHV6Mb8.roa
File: h2yRPerrhfhxK8Z1225FUHV6Mb8.roa (raw, json)
Hash identifier: sDzKZ5tYVqcU2E5e0gDO3hANgcFPWAx2D++0PH29JD0=
Subject key identifier: 87:6C:91:3D:EA:EB:85:F8:71:2B:C6:75:DB:6E:45:50:75:7A:31:BF
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019102ACCC94F629EB3B6305120CB92BC69A
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/h2yRPerrhfhxK8Z1225FUHV6Mb8.roa
Signing time: Tue 30 Jul 2024 08:06:04 +0000
ROA not before: Tue 30 Jul 2024 08:06:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28924
IP address blocks: 213.181.216.0/24 maxlen: 24
213.181.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:02:ac:cc:94:f6:29:eb:3b:63:05:12:0c:b9:2b:c6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 30 08:06:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=876c913deaeb85f8712bc675db6e4550757a31bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f3:c9:df:7a:b3:9a:25:ec:ca:58:aa:75:74:
e0:2b:90:1a:16:cb:82:25:50:62:eb:1e:a8:f6:b0:
ce:9d:92:29:7d:c3:fc:50:b2:95:bb:f9:d2:c7:66:
bb:af:45:f5:bc:52:22:c5:bb:0a:56:c5:5d:a5:26:
25:d2:e4:78:f1:0c:82:61:c8:4c:3d:15:a4:02:89:
b3:fe:af:03:69:d7:84:a7:54:4c:5c:62:cb:c2:22:
79:c0:07:31:27:ba:36:c0:1d:0e:2f:e3:54:f4:67:
4e:1a:c1:71:46:dd:9f:3f:9c:98:0d:9f:5b:81:ef:
ea:0c:04:63:28:bd:b6:3b:c5:1f:ed:29:b7:d8:bd:
ed:2f:e8:d6:08:29:8e:88:78:c8:0d:dd:90:21:7b:
13:fd:59:ab:c9:7b:58:09:e3:8e:61:4b:2e:d3:69:
1d:b6:3c:e9:30:4f:69:8d:3e:88:6b:58:2b:37:7c:
c4:3f:47:0b:7d:a7:67:d8:e5:5a:f7:d0:73:d5:00:
4b:38:1b:18:30:63:63:59:24:e5:cd:57:05:2d:58:
6b:09:94:e3:22:4b:28:79:ee:8b:b4:a7:af:e4:41:
2c:0a:e1:91:cc:d1:f4:a4:35:e9:1e:4f:44:11:8b:
db:bd:04:47:b0:09:b4:01:dd:dc:e6:60:d3:35:8a:
ad:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6C:91:3D:EA:EB:85:F8:71:2B:C6:75:DB:6E:45:50:75:7A:31:BF
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/h2yRPerrhfhxK8Z1225FUHV6Mb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.181.216.0/24
213.181.220.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:7b:a5:52:a4:15:36:94:c2:16:2e:78:cd:5a:9f:b1:90:d9:
2c:be:f2:21:b6:0d:2c:6a:29:bb:b3:2c:c4:2e:53:a1:c2:13:
e4:89:35:5a:f5:28:27:5e:10:01:d2:e2:c8:07:2f:eb:96:fc:
03:65:82:4e:03:51:75:85:60:86:98:65:1d:06:72:f7:ed:c0:
f4:a6:fd:da:1d:cd:6c:22:a4:00:90:b1:a2:fa:ce:46:7b:e2:
e4:24:57:2e:ab:36:23:f4:11:9b:01:d6:1d:ae:9e:bb:e7:b8:
91:3b:95:76:21:52:ec:50:c0:39:77:b2:41:6b:dc:f0:32:1b:
3c:71:d5:3b:2b:0c:86:4e:c4:91:13:0b:9b:7e:59:cf:a0:e1:
e8:9b:d9:3b:f6:ec:ca:be:6f:31:01:37:ef:72:99:00:b9:5f:
15:1b:d6:2e:e0:d7:a2:10:90:5d:4f:8d:58:97:4a:70:a7:12:
6c:88:c1:3d:2c:c9:88:65:8f:4e:4c:73:98:33:0c:1c:4d:5b:
a0:69:1b:64:f5:41:9b:e4:1f:20:e6:f8:ef:f8:c6:10:00:39:
b5:5c:af:2c:3a:a6:24:2b:4e:24:f8:3f:d7:ae:52:03:62:6f:
02:d3:35:84:c1:dc:30:b5:55:cd:75:8d:88:4d:2e:9e:7f:3c:
d2:4b:3e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:30:57 2024 by rpki-client on console-ams.rpki-client.org