Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/W6kwgbKnyDhSQYIpktG7UuJlYbc.roa
File: W6kwgbKnyDhSQYIpktG7UuJlYbc.roa (raw, json)
Hash identifier: +ya7BrsGqOO9VEXM3KXXmQQAfWpN5f6Nmz4eZ0chrYY=
Subject key identifier: 5B:A9:30:81:B2:A7:C8:38:52:41:82:29:92:D1:BB:52:E2:65:61:B7
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 0192AF047473D142FF41E393BFDA58871D25
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/W6kwgbKnyDhSQYIpktG7UuJlYbc.roa
Signing time: Mon 21 Oct 2024 12:19:17 +0000
ROA not before: Mon 21 Oct 2024 12:19:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208027
IP address blocks: 213.192.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:04:74:73:d1:42:ff:41:e3:93:bf:da:58:87:1d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Oct 21 12:19:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ba93081b2a7c8385241822992d1bb52e26561b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:18:51:89:93:d7:f0:e7:8e:b9:22:cd:e1:
e5:2b:4a:53:10:26:ef:cf:5f:4b:e4:48:07:3d:98:
09:0b:e8:d3:1e:bd:a4:7a:aa:69:bd:58:69:0f:68:
a3:a0:d9:19:e1:d4:99:cc:97:ff:07:f6:54:b0:2e:
f5:f3:25:c2:28:c2:3d:48:df:68:4c:28:2d:ca:01:
4b:8c:e1:a2:3f:3e:9e:80:c7:89:c6:d5:a1:59:c0:
15:7f:9a:8e:46:12:ff:7e:7c:e3:ae:76:66:1b:24:
ec:ab:92:50:20:4a:b0:db:29:8e:23:e7:c7:59:1b:
a7:34:d1:38:c5:94:bd:58:fc:f6:59:ee:87:93:54:
39:1c:b5:f6:b9:2d:3e:80:76:6c:71:75:d2:3e:a6:
87:e8:32:55:80:a6:a0:a6:44:39:1f:90:c7:29:8d:
f7:52:a4:14:eb:f4:3c:c1:c1:cf:9c:0b:9b:2b:83:
55:63:ad:89:49:f3:6d:69:09:5f:0a:41:ef:5f:ab:
98:e8:e1:3b:75:d0:23:44:f5:f4:a8:4d:78:7f:8d:
88:84:74:35:ff:c1:27:73:aa:a7:c5:22:89:39:34:
bc:34:35:44:bb:13:eb:ae:29:f5:74:5e:e8:dd:82:
fb:d8:c8:39:66:75:d5:8b:5d:a8:1d:b0:0b:97:d8:
cc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A9:30:81:B2:A7:C8:38:52:41:82:29:92:D1:BB:52:E2:65:61:B7
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/W6kwgbKnyDhSQYIpktG7UuJlYbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:15:35:5c:00:8f:6e:e4:b2:7d:1d:ad:f7:ad:3e:66:97:2b:
fd:4a:87:55:5e:1e:cb:28:10:4e:75:fc:8a:e4:0d:0e:60:fb:
6c:21:5b:96:19:24:b1:67:5c:b8:36:05:52:d3:d5:44:4b:8d:
24:b6:91:b1:38:f6:74:9a:95:79:f1:c5:ea:a7:bb:c4:3e:09:
5d:4b:f3:31:a1:70:48:98:45:91:a8:6f:c2:5c:89:5f:0d:d4:
e7:33:eb:d0:e7:e0:21:ff:ee:9c:ea:e3:2a:d1:ef:60:da:d9:
67:c4:a6:78:95:32:96:02:c3:a6:13:2d:07:68:ed:59:e3:a9:
9a:f8:f8:e6:0b:7a:cc:07:9a:94:e5:d6:79:49:82:09:5e:02:
5c:c3:7c:ec:14:dd:cc:18:05:08:af:35:1d:dc:e2:f4:f2:bf:
f6:05:42:59:44:49:ca:38:1f:00:b0:5a:6a:9c:c3:08:76:69:
64:a0:4d:a9:78:d9:20:38:99:29:3e:94:21:19:ae:83:da:f1:
a2:9a:5e:67:ed:ba:9f:1c:3d:ca:5e:2b:35:94:00:ee:12:29:
b4:b4:46:ec:76:a8:3e:1a:83:ac:db:78:9b:ad:3e:92:58:50:
ec:a8:1e:5f:7e:ed:fe:13:fd:74:3d:c2:d2:31:67:09:c0:f7:
41:cc:71:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:22:30 2024 by rpki-client on console-fra.rpki-client.org