Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/25rt-59pCJD21KAbPb1LOx7ZzmA.roa
File: 25rt-59pCJD21KAbPb1LOx7ZzmA.roa (raw, json)
Hash identifier: y9Nl6H8v4IqmiwrvgtYQ61grGPdd8Mc/CVMpX2IjvJU=
Subject key identifier: DB:9A:ED:FB:9F:69:08:90:F6:D4:A0:1B:3D:BD:4B:3B:1E:D9:CE:60
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FF543C2524443A14C431A20A6694F
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/25rt-59pCJD21KAbPb1LOx7ZzmA.roa
Signing time: Tue 02 Jan 2024 04:30:29 +0000
ROA not before: Tue 02 Jan 2024 04:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201364
IP address blocks: 213.74.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:f5:43:c2:52:44:43:a1:4c:43:1a:20:a6:69:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db9aedfb9f690890f6d4a01b3dbd4b3b1ed9ce60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:3b:01:ee:5e:1f:02:61:cb:e5:32:70:79:
57:59:0f:30:de:1f:f6:62:7d:f6:7f:15:6d:1e:60:
a6:1a:e0:0e:49:1f:35:7f:03:cb:ea:5d:d4:9f:51:
bf:d5:ce:e8:45:90:b2:a3:4d:f8:8f:f0:23:28:31:
0e:99:1a:ed:ee:02:d5:14:0d:aa:02:57:91:c4:31:
4d:28:9e:12:cc:32:71:7a:eb:56:ce:19:f8:25:f4:
c6:ef:85:d5:e9:a0:fe:a1:d8:29:71:53:39:6c:2b:
19:4e:2d:04:6f:3a:76:bd:3e:42:20:cd:60:5c:8d:
46:c5:92:a3:28:df:e0:f1:d6:ed:90:a3:18:c2:6d:
37:1b:7e:bf:bd:e7:5c:bc:ab:bc:0c:bd:6c:55:a3:
0d:19:7b:31:b8:68:b0:5c:89:4e:d6:aa:88:22:2f:
44:f9:f1:2a:63:04:0f:7e:73:92:c0:b3:8b:dd:c1:
81:ba:29:1e:6a:39:e7:88:e5:65:66:38:22:03:17:
97:2a:7a:bd:c1:f9:75:a3:74:ff:03:90:1b:76:d1:
4b:0b:ae:78:12:06:ac:b3:a4:19:b0:87:a6:27:c9:
9c:f6:ec:58:4c:c5:7a:a8:51:ff:a1:da:42:ac:11:
02:f5:d9:3a:c8:7d:e6:d7:98:4f:5f:b5:51:27:dc:
61:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9A:ED:FB:9F:69:08:90:F6:D4:A0:1B:3D:BD:4B:3B:1E:D9:CE:60
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/25rt-59pCJD21KAbPb1LOx7ZzmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.74.40.0/24
Signature Algorithm: sha256WithRSAEncryption
07:bb:f4:3a:52:26:63:2a:fe:68:0b:23:f4:99:db:b5:9e:ab:
57:cb:f8:97:c4:78:f7:7a:1c:2a:e8:38:23:d7:84:5c:71:2b:
60:f3:b8:94:f5:98:58:b2:e6:22:d0:9b:09:2a:ed:45:84:43:
aa:47:72:2d:1a:f5:47:c3:af:c6:7a:1d:9e:e9:fc:a4:b0:f8:
02:60:1a:82:55:e6:d1:5c:45:6e:d9:5e:8f:d9:6e:e2:8c:0f:
a5:45:ac:f7:dd:2c:a7:9e:b6:eb:c9:9c:66:17:70:87:6d:7e:
b0:4d:af:f9:75:7f:d9:53:4e:15:8a:bb:52:92:90:7b:ab:dd:
59:8e:b7:b7:58:80:14:14:53:50:6d:68:62:a6:3e:3f:b7:f0:
57:2f:47:65:d1:5e:ac:e1:6c:96:a8:79:9a:dd:fc:e3:21:24:
a8:d6:3f:ee:e7:a6:95:cb:7d:58:16:de:60:c3:ee:d5:44:af:
0f:79:37:d0:a3:54:9c:fa:0d:53:b0:99:2d:ab:c4:12:19:2d:
32:9e:c0:2d:51:a4:ad:05:68:8c:0c:cc:18:cf:62:d7:c2:b4:
15:00:0a:fb:44:e2:c3:e0:3f:8d:e4:e9:80:41:fc:b6:62:5d:
78:cf:85:9a:34:43:8e:fc:34:35:a6:d3:7b:a1:f7:7a:aa:1a:
c5:7c:45:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 10:37:55 2024 by rpki-client on console-ams.rpki-client.org