Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/0o2NeXWSotTclZDM0Uh2esFaRts.roa
File: 0o2NeXWSotTclZDM0Uh2esFaRts.roa (raw, json)
Hash identifier: hT9nXtZUCAY8cP+7f6rJKU4isnOC5YASjvR3jogxOek=
Subject key identifier: D2:8D:8D:79:75:92:A2:D4:DC:95:90:CC:D1:48:76:7A:C1:5A:46:DB
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FF03B52BB255B5FC5E0DA3277E76D
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/0o2NeXWSotTclZDM0Uh2esFaRts.roa
Signing time: Tue 02 Jan 2024 04:30:28 +0000
ROA not before: Tue 02 Jan 2024 04:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50875
IP address blocks: 213.14.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:f0:3b:52:bb:25:5b:5f:c5:e0:da:32:77:e7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d28d8d797592a2d4dc9590ccd148767ac15a46db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:f3:0f:5c:1b:49:34:c1:70:f1:66:be:db:
06:65:94:aa:ce:9b:a9:af:af:10:5b:ad:59:0b:73:
80:1a:2f:b0:6c:d6:22:60:84:1a:83:32:ba:be:81:
54:7a:70:e0:87:b5:cf:da:c7:c1:c1:3e:de:e3:ad:
bc:48:55:b0:fd:a0:cd:49:8f:47:de:fd:a6:3a:c6:
14:34:43:95:cf:81:85:6b:be:65:40:27:ce:2b:4d:
8a:2f:9a:d7:b9:02:31:5f:72:d8:90:ff:f5:9e:65:
ec:b9:f5:1a:4e:6d:6c:dc:cd:77:fe:a5:8d:5d:b7:
ba:bb:4a:59:85:23:4d:fa:e2:a9:1e:df:c2:c6:27:
d5:0a:4f:36:51:88:f6:65:7a:7c:cf:75:25:ec:7d:
3c:bb:5a:fc:81:94:b0:9a:dc:96:55:ed:0b:a8:c3:
fd:6c:ab:f0:f0:18:77:30:fb:64:3e:e3:f8:87:53:
18:02:2d:06:51:82:bc:f3:e9:de:2b:17:55:03:a1:
47:63:42:eb:14:31:cd:cc:d4:be:94:32:4f:94:56:
53:7d:af:a0:8b:b9:6f:65:0d:3f:a8:9a:0d:21:78:
4b:ae:de:90:61:ba:74:b0:d1:29:57:8b:18:21:27:
56:b6:85:1b:84:21:f9:dc:17:2b:ee:c8:b5:2b:0c:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8D:8D:79:75:92:A2:D4:DC:95:90:CC:D1:48:76:7A:C1:5A:46:DB
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/0o2NeXWSotTclZDM0Uh2esFaRts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.238.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:58:eb:a4:26:21:87:df:79:bc:5d:09:87:59:21:ee:8e:a1:
8c:6c:15:ca:39:4d:bf:a3:4c:9c:c3:7a:2f:5c:b4:08:b4:ee:
6b:66:91:90:73:d6:83:68:88:5d:a3:66:fc:19:68:b3:31:8a:
93:39:e2:37:9a:a1:58:bd:2a:f9:cb:57:0d:ad:0e:bb:af:25:
93:41:ff:63:de:d0:f9:69:1b:9d:21:cc:a4:71:04:c1:35:5d:
ec:b1:ac:dc:b5:9d:52:07:66:41:c2:fb:7b:f5:71:b4:03:9b:
f1:ed:f5:d4:b9:88:dd:d9:b9:16:03:6e:22:e0:b8:e0:95:42:
78:d1:63:38:35:3a:2b:ad:0c:2a:c9:66:54:d9:c0:bc:61:90:
fe:69:30:80:36:a5:ed:4b:2d:fe:b3:49:ea:70:1d:13:c0:26:
10:81:f5:49:66:97:49:7e:41:41:de:38:fe:90:66:7a:f8:9e:
be:4c:51:f0:87:f2:62:ff:4d:ae:ed:d8:88:10:3e:86:4c:54:
7c:98:c1:23:c7:f7:0c:4f:51:46:38:4b:3e:ac:53:71:3b:54:
90:24:83:e9:5c:63:a8:fa:d8:24:2b:67:2f:b5:22:53:0b:77:
36:9b:27:42:86:46:d8:55:54:e4:e0:07:11:c8:1f:6a:6c:16:
8b:fb:6f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:42:03 2024 by rpki-client on console-ams.rpki-client.org