Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/smdHFipgeUTxTAMR6DVQPDadoos.roa
File: smdHFipgeUTxTAMR6DVQPDadoos.roa (raw, json)
Hash identifier: IwZTaeZnbz3E1pzkMvJw9+Z98y7rgNwmvByTLlUEUXs=
Subject key identifier: B2:67:47:16:2A:60:79:44:F1:4C:03:11:E8:35:50:3C:36:9D:A2:8B
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 018CC9BCA7DD5567C3CADC3D069B5E0FBD70
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/smdHFipgeUTxTAMR6DVQPDadoos.roa
Signing time: Tue 02 Jan 2024 10:33:53 +0000
ROA not before: Tue 02 Jan 2024 10:33:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50256
IP address blocks: 213.252.240.0/24 maxlen: 24
213.252.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a7:dd:55:67:c3:ca:dc:3d:06:9b:5e:0f:bd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jan 2 10:33:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b26747162a607944f14c0311e835503c369da28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:30:89:0a:a6:cc:c1:a3:4b:22:fb:d7:79:
c1:44:12:cf:6d:e0:37:84:6d:8a:ce:c3:45:84:a2:
5e:dd:ec:4d:25:01:3c:65:b1:a8:ce:f3:df:62:11:
bc:d8:2e:3e:f9:2c:c5:e9:bd:1c:8e:ba:5e:9a:61:
91:1c:9e:68:68:f1:b9:86:f3:04:01:46:af:bb:2e:
19:46:6c:a5:b3:2f:9c:46:4c:d2:46:55:88:f9:ea:
c8:b9:fe:6a:12:5e:7c:95:76:4b:21:00:12:fa:4f:
0d:7b:12:30:fa:a6:a3:eb:10:d9:22:7e:bf:a6:86:
e4:a4:5d:0a:38:0c:90:02:09:d3:ed:ae:e2:57:ce:
cc:b8:04:41:b5:4c:0f:55:01:42:6c:e9:bb:e3:28:
25:16:a1:5a:e4:31:96:18:5c:04:76:c7:04:33:d3:
e8:12:f1:d4:70:b8:57:f4:ec:41:eb:9f:0c:94:98:
c3:19:6f:fd:f7:de:0f:fa:99:8f:16:c1:a4:a0:b1:
fc:da:e3:3b:1d:54:20:e0:11:40:6d:30:ce:7a:c2:
3a:05:6a:fb:6c:8a:0e:4e:d3:f0:c2:55:ed:5f:b6:
d6:00:fd:95:d0:64:c3:39:e3:58:b2:8b:fc:16:b8:
26:1a:17:e9:66:2b:3c:56:17:dc:3b:09:22:21:72:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:67:47:16:2A:60:79:44:F1:4C:03:11:E8:35:50:3C:36:9D:A2:8B
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/smdHFipgeUTxTAMR6DVQPDadoos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.252.240.0/23
Signature Algorithm: sha256WithRSAEncryption
16:b3:4b:75:e4:a7:f8:ac:1a:b8:a6:53:47:ba:f9:a2:54:f8:
0e:b5:bb:a1:16:90:65:72:fc:52:c7:5c:b3:ff:0f:54:3a:10:
e4:9c:81:b1:c6:04:bf:92:94:97:ba:e1:84:f8:41:c5:a2:36:
43:7b:1a:7b:a2:69:b2:32:17:fd:3f:76:49:58:d0:02:ee:d7:
05:ae:7e:33:bb:0b:68:ae:41:33:6e:ae:f6:cf:44:3f:15:52:
b4:be:16:0d:c1:c2:ef:f9:ec:29:a9:ec:f5:99:fb:c7:78:f6:
9e:d9:f5:f8:56:b1:76:62:e1:d5:ec:55:66:fb:4e:04:95:26:
54:40:33:10:9a:c3:22:d1:b4:00:fd:53:cf:cb:5b:46:ee:65:
4c:5c:54:5e:66:68:5e:eb:0d:ff:f1:30:8e:03:6c:8d:11:0d:
e7:4e:d1:60:e2:1e:78:f2:cd:ce:0c:73:d3:b4:b9:0d:c9:f7:
91:a4:c3:ab:87:f5:71:04:77:73:89:fe:17:d1:1f:dc:e2:c3:
a6:4c:a5:b8:bb:9e:da:c9:28:47:8f:f0:3c:14:b6:fe:31:57:
77:e4:56:2f:b5:83:c7:3e:56:97:85:25:e5:6c:6b:fc:26:e3:
c0:f1:84:f6:14:9d:11:0a:fd:11:26:73:71:4c:42:d3:96:e0:
25:ae:4a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:46:31 2024 by rpki-client on console-fra.rpki-client.org