Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/fDV7y5APrROmAfpotfIpURezlxY.roa
File: fDV7y5APrROmAfpotfIpURezlxY.roa (raw, json)
Hash identifier: /h+M3BrUnaoe1KcTBJAsgPsaBOGNFje18Z5OI9pN+wY=
Subject key identifier: 7C:35:7B:CB:90:0F:AD:13:A6:01:FA:68:B5:F2:29:51:17:B3:97:16
Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Certificate serial: 018F0715528F7F87A817F7126637930471AC
Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/fDV7y5APrROmAfpotfIpURezlxY.roa
Signing time: Mon 22 Apr 2024 18:33:08 +0000
ROA not before: Mon 22 Apr 2024 18:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 213.156.248.0/24 maxlen: 24
213.156.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:07:15:52:8f:7f:87:a8:17:f7:12:66:37:93:04:71:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Validity
Not Before: Apr 22 18:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c357bcb900fad13a601fa68b5f2295117b39716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:f7:ce:c6:32:65:2b:33:a2:66:63:27:98:
38:a9:36:ab:b6:28:d0:d8:d4:c3:6f:7a:ef:05:64:
52:26:0e:73:2e:3d:85:87:26:cd:3e:9e:6e:92:1f:
73:72:88:ce:76:0b:29:2b:71:78:ab:c4:e3:ad:8e:
88:70:46:bd:da:02:b9:90:63:1f:0c:95:4b:b9:94:
9d:af:02:ef:1a:9f:7a:c4:33:76:54:64:ea:11:44:
8a:f6:40:aa:d9:11:0c:4b:11:50:77:a2:90:7f:da:
23:e0:82:f2:6b:7a:64:f8:a2:74:b5:5c:d6:63:8c:
bf:8a:2b:07:cb:94:0e:b6:a2:25:6c:2b:61:78:e2:
2d:3c:3b:53:d4:3d:14:7a:db:2f:05:fd:23:d6:9e:
21:7e:46:69:bf:e6:07:fc:4e:aa:2a:54:25:d4:fb:
30:37:be:67:dc:ed:52:05:b4:89:6c:ec:91:16:8c:
16:85:5f:7c:61:1a:01:eb:65:7f:67:39:13:fd:78:
e6:34:f4:fe:9f:d8:b1:dc:ec:7b:db:85:55:03:99:
1b:f4:01:8d:5b:b8:a3:f4:a8:6b:cc:e4:05:c1:59:
96:b9:9f:25:e5:45:7d:04:7c:fb:c6:15:63:f5:e4:
83:66:e9:f8:ae:de:22:b7:24:40:b5:19:9b:27:74:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:35:7B:CB:90:0F:AD:13:A6:01:FA:68:B5:F2:29:51:17:B3:97:16
X509v3 Authority Key Identifier:
keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/fDV7y5APrROmAfpotfIpURezlxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.156.248.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:fd:78:1e:c9:3f:48:31:89:f1:78:1e:b8:3f:a5:a4:e0:5d:
2a:83:11:7a:9c:a0:97:5e:21:a8:ec:68:d5:9b:94:d8:98:11:
d3:80:81:01:e8:43:81:07:86:77:5f:2e:10:06:e3:e4:80:d8:
9b:1d:ea:80:d7:6e:4a:14:a6:71:dd:29:99:95:74:31:e0:77:
cb:f5:5e:5e:dd:40:0f:dc:1e:a2:57:8e:31:8f:12:1e:7d:3f:
5e:59:4b:c9:38:c9:f7:94:10:8d:f0:3d:df:b5:f4:ef:00:39:
87:94:bf:a2:23:b1:fb:de:7f:b8:5b:56:aa:0d:d9:a3:87:8c:
9d:b4:c6:be:ed:01:b6:91:bb:0e:e7:22:c5:de:d8:63:05:8d:
83:17:32:e7:4e:ae:76:30:14:82:eb:0b:bc:45:7b:23:0d:e6:
d6:7d:ce:e1:de:84:eb:d2:c5:94:84:a3:00:fe:0b:57:03:03:
38:07:1b:94:41:8f:9a:17:56:47:e7:66:a6:48:b3:0b:71:cd:
05:c1:58:42:0b:6c:a0:8e:2d:6d:08:7a:06:85:0e:5f:4e:e5:
e1:66:66:80:3b:c5:49:e8:89:b1:b3:9b:e9:a9:7a:bb:8b:b9:
25:26:91:12:c6:ee:81:95:d1:81:e3:b0:1b:2a:55:e9:8d:1a:
ad:cd:c4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:29:17 2024 by rpki-client on console-ams.rpki-client.org