Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/J9bseT3olDis1lPtLqfezWThsc0.roa
File: J9bseT3olDis1lPtLqfezWThsc0.roa (raw, json)
Hash identifier: pFfBwn4YLVV9Iq+BxtC44KsFiqDm/l9UtO8wA4EAVd8=
Subject key identifier: 27:D6:EC:79:3D:E8:94:38:AC:D6:53:ED:2E:A7:DE:CD:64:E1:B1:CD
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 018CCA2A23BFA7A3CE7FB6C05111C593E637
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/J9bseT3olDis1lPtLqfezWThsc0.roa
Signing time: Tue 02 Jan 2024 12:33:28 +0000
ROA not before: Tue 02 Jan 2024 12:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47817
IP address blocks: 213.195.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:23:bf:a7:a3:ce:7f:b6:c0:51:11:c5:93:e6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 2 12:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27d6ec793de89438acd653ed2ea7decd64e1b1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:24:3c:ea:99:31:3c:9b:52:fe:05:75:bc:7a:
9a:64:dc:4c:22:eb:13:2a:34:51:79:a0:37:d9:29:
06:dd:f8:e2:26:17:6f:04:35:3c:97:24:38:8d:5e:
ae:85:37:56:e4:86:13:b0:d6:be:10:5d:66:51:9e:
75:e1:eb:ef:e8:0a:2b:e3:4b:7e:28:74:14:d2:84:
6e:77:23:ba:b7:70:82:83:f7:95:31:19:5e:59:03:
6d:4c:be:b7:6b:59:d4:73:ea:34:97:c5:e4:54:b5:
f5:45:8e:78:f1:e2:97:9c:e0:53:87:42:c8:57:2b:
df:7a:39:e4:e0:42:30:a9:b7:c0:97:fa:ee:df:e5:
c8:92:10:91:8d:7c:fd:5e:6f:21:b8:79:9b:7b:f3:
5f:d0:08:e2:91:e6:93:be:3a:4b:1b:cb:dd:77:c3:
59:de:55:dc:20:cf:93:1f:69:c3:fc:9a:ba:c1:05:
58:0c:b9:b0:80:69:cd:6f:6d:2a:e0:2b:b4:46:e2:
8f:58:61:08:59:a9:d7:07:a1:98:fc:19:0d:93:6f:
f0:1a:71:38:93:f9:57:e9:a1:92:7b:13:4d:dc:eb:
08:47:4a:1c:87:20:e5:3a:bf:41:85:da:0c:03:75:
5d:7b:f9:d8:af:48:df:10:cd:27:40:e1:3d:ef:23:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D6:EC:79:3D:E8:94:38:AC:D6:53:ED:2E:A7:DE:CD:64:E1:B1:CD
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/J9bseT3olDis1lPtLqfezWThsc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.195.21.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:84:f6:67:54:c8:19:24:ce:27:0e:1a:42:44:27:03:e4:4b:
99:71:fb:9b:e2:f0:c9:d8:f0:95:2f:2c:5b:d1:39:d1:99:28:
90:ef:cf:04:2a:d8:ab:32:d3:f6:fe:56:48:21:ac:b7:6c:2b:
31:81:e9:cd:4e:ec:19:57:51:64:b1:5e:62:67:9b:b5:c9:db:
50:11:6d:88:87:82:b8:aa:50:a7:50:03:73:fb:27:03:e0:26:
5d:0c:c4:1c:42:e9:fb:0a:7a:54:1a:91:3e:38:c4:41:53:56:
e9:7b:f6:ad:69:46:39:66:60:ca:24:d0:82:8f:2a:56:e0:ee:
d6:b7:2e:d4:20:b9:5c:95:86:a6:fb:c0:3b:dc:75:30:c5:02:
0f:5d:b4:c4:49:30:2c:ea:a1:28:f7:3f:a0:23:d6:4b:75:03:
97:db:93:12:8a:96:bc:e0:d0:1b:fa:97:2e:c1:e0:a3:5b:22:
b0:d4:df:41:b7:56:c9:eb:8c:7f:05:33:69:d4:bb:8f:0b:c7:
73:ed:8c:fb:ca:a2:84:1a:76:e4:9b:28:e9:08:fe:53:27:15:
6d:54:46:dd:9d:a9:ef:9d:a6:48:8d:e9:61:6b:1a:e7:4e:54:
2e:f6:11:51:15:da:ca:a4:2b:52:1a:7e:ea:0d:35:df:13:a1:
91:08:5c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:09:16 2024 by rpki-client on console-ams.rpki-client.org