Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/tkzaAm2OQNSxaqP0c_gdlNT7ffM.roa
File: tkzaAm2OQNSxaqP0c_gdlNT7ffM.roa (raw, json)
Hash identifier: LWIzQYm8HyKmgEeSh6Po6c+cxhkT3x/PTz3YUrmNs74=
Subject key identifier: B6:4C:DA:02:6D:8E:40:D4:B1:6A:A3:F4:73:F8:1D:94:D4:FB:7D:F3
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FF60461D140209055A4BF8A6B424A
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/tkzaAm2OQNSxaqP0c_gdlNT7ffM.roa
Signing time: Tue 02 Jan 2024 04:30:29 +0000
ROA not before: Tue 02 Jan 2024 04:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203611
IP address blocks: 213.14.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:f6:04:61:d1:40:20:90:55:a4:bf:8a:6b:42:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b64cda026d8e40d4b16aa3f473f81d94d4fb7df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:0e:79:88:7b:be:b5:38:13:20:53:04:fa:
db:e1:6f:6b:fe:de:ee:2c:1f:27:1f:ae:45:bc:85:
9f:b3:96:29:06:74:fd:54:68:28:18:eb:a4:aa:32:
2b:66:ec:d8:32:e7:30:55:79:c6:9d:f2:ad:a7:00:
11:cb:1c:3f:49:5e:30:a7:b8:83:4d:91:7c:f6:c9:
ea:eb:85:9e:52:44:89:59:1b:20:dc:76:87:62:13:
30:c3:41:4c:73:20:da:b4:a7:3e:c7:e2:b9:04:47:
41:01:4d:19:bf:0d:b1:a2:59:f9:72:a5:54:dc:74:
c3:51:2a:8d:cc:56:a5:22:f6:04:92:ae:ae:d7:a1:
00:8e:d2:f7:69:c3:73:2b:3a:c1:09:e3:af:f1:46:
ac:9e:8b:15:18:d6:39:91:75:b0:ed:fc:e8:22:e8:
9b:8b:7c:d5:16:e3:6d:fe:7f:fc:b2:52:26:f6:58:
fe:ef:bd:c4:fc:6d:c4:dd:c7:1e:f7:5a:75:3b:55:
2d:92:2c:cb:ab:82:8c:f4:df:73:79:12:52:b7:80:
af:d2:be:6b:50:7e:23:f7:40:07:ec:f4:d2:e3:69:
11:e2:d8:4a:63:04:1d:69:57:da:37:70:1f:3c:97:
59:4d:be:3e:96:3b:11:50:1f:ae:71:6d:29:c9:2b:
61:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4C:DA:02:6D:8E:40:D4:B1:6A:A3:F4:73:F8:1D:94:D4:FB:7D:F3
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/tkzaAm2OQNSxaqP0c_gdlNT7ffM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.243.0/24
Signature Algorithm: sha256WithRSAEncryption
44:bd:87:8e:3c:0f:33:a0:66:48:1e:b4:15:45:09:48:5c:f2:
24:93:57:93:01:d0:67:62:38:4c:e1:0c:a3:f8:da:74:58:70:
64:62:b2:3d:23:d7:ab:c6:44:89:d3:b5:c0:f4:1e:db:1d:52:
9a:b2:64:3d:45:43:40:86:40:0e:bd:6f:ca:1a:d9:ae:62:03:
50:03:25:16:12:17:1e:8e:86:24:91:f1:6f:ec:88:c6:d9:0f:
53:b7:e5:cd:0f:c7:d7:54:30:e4:cd:e5:64:a7:0e:92:99:5e:
db:78:2a:42:cf:24:63:3b:16:db:48:7a:ea:1a:37:d6:95:ac:
6e:c2:d3:fd:cb:82:04:6a:08:5d:1e:b4:fa:9f:09:19:39:b1:
fd:b7:6b:7d:42:78:41:b6:59:c3:73:1c:a3:05:75:49:8c:71:
5a:6f:df:f3:d4:87:e1:e2:de:fd:00:79:db:59:e2:54:1a:b7:
ac:46:4f:71:7e:31:e6:3e:8a:7b:59:29:4c:ac:99:ed:7a:4f:
8b:c3:9c:65:40:14:42:64:b4:90:f9:24:d5:14:ff:17:94:ae:
2a:6d:60:9a:a2:df:b0:1e:d1:91:71:a6:b4:02:cf:a8:eb:d2:
be:49:00:45:05:f3:67:7d:a4:7a:0a:d5:0f:32:dd:d5:a2:40:
d9:9c:12:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 09:20:07 2024 by rpki-client on console-ams.rpki-client.org