Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/ISdLZTdBDzUp8N32jHXXPQczkkc.roa
File: ISdLZTdBDzUp8N32jHXXPQczkkc.roa (raw, json)
Hash identifier: y2yyayDoFmL4+6CiAugATk3juPEZbKGNG9u9yhaZVGk=
Subject key identifier: 21:27:4B:65:37:41:0F:35:29:F0:DD:F6:8C:75:D7:3D:07:33:92:47
Certificate issuer: /CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Certificate serial: 018D83EFED1218C27E03C662BB60B12A8AC7
Authority key identifier: 9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/ISdLZTdBDzUp8N32jHXXPQczkkc.roa
Signing time: Wed 07 Feb 2024 14:19:15 +0000
ROA not before: Wed 07 Feb 2024 14:19:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 213.156.160.0/24 maxlen: 24
213.156.161.0/24 maxlen: 24
213.156.162.0/24 maxlen: 24
213.156.163.0/24 maxlen: 24
213.156.164.0/24 maxlen: 24
213.156.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:83:ef:ed:12:18:c2:7e:03:c6:62:bb:60:b1:2a:8a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Validity
Not Before: Feb 7 14:19:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21274b6537410f3529f0ddf68c75d73d07339247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:84:91:93:36:a4:d9:63:a1:26:b7:9d:fa:
3e:d7:b4:30:41:94:d3:b7:4c:b5:c4:99:a4:29:b8:
42:55:0b:df:a5:83:d9:70:e6:6b:ee:d8:57:23:b6:
38:87:83:f4:5f:19:84:11:b1:a1:3f:ba:02:9c:d5:
97:e5:0d:e6:52:04:6e:ed:ab:54:fc:af:28:ac:62:
29:d4:6f:46:ed:8b:fe:36:56:2e:94:c5:3a:c9:01:
2d:b8:34:54:f4:86:4c:68:72:cf:1c:2c:b5:e0:bc:
cb:05:25:ad:a9:15:3f:c2:cb:61:47:57:ce:0c:e9:
ac:07:cd:5e:ee:f0:65:42:bd:c8:32:07:4d:8f:5d:
b2:7a:c9:ee:14:d5:09:60:ad:f9:75:40:db:07:ea:
5c:e4:52:c8:54:f5:79:5e:9f:92:e3:9e:68:98:2a:
93:4d:77:e8:da:16:19:f9:fb:96:57:59:3b:73:54:
63:10:ae:ba:bd:43:15:cc:cc:5f:54:7f:2a:a2:39:
e9:c2:bf:65:78:76:c5:7e:13:07:43:65:fb:45:0a:
63:a9:40:5e:de:f6:a4:f2:77:bc:df:8e:32:fd:96:
77:7a:02:1b:64:49:f8:e3:e7:14:73:dc:c1:88:66:
8f:b9:ed:8b:6c:f5:db:a4:12:b6:89:73:13:22:9f:
b7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:27:4B:65:37:41:0F:35:29:F0:DD:F6:8C:75:D7:3D:07:33:92:47
X509v3 Authority Key Identifier:
keyid:9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/ISdLZTdBDzUp8N32jHXXPQczkkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.156.160.0-213.156.165.255
Signature Algorithm: sha256WithRSAEncryption
3c:92:9d:26:69:5f:48:3f:b5:a0:1a:ab:5f:17:8c:e9:0c:9e:
32:39:b4:0d:3e:ed:7e:69:15:93:54:eb:e9:a8:6d:94:f8:70:
17:ca:c0:f2:d5:17:10:ab:97:f2:37:c3:4a:f3:ac:3f:f3:8c:
32:37:d8:14:8d:06:b3:d2:9a:e9:b6:42:90:87:9f:c6:4b:bc:
eb:b1:b1:90:1c:8f:2b:dd:fc:c1:d8:e0:0d:08:e4:3a:9d:86:
de:4f:55:1d:72:14:67:ae:d6:a9:c5:54:b6:ad:66:6b:ff:9d:
31:69:71:82:dc:b7:5d:67:1f:9f:52:09:4d:5a:0f:1e:8f:5b:
2b:a5:ef:54:f3:92:27:a3:ba:d6:a5:27:8a:f8:a8:0b:ac:0c:
48:d8:6c:35:21:01:70:02:ff:fb:66:33:0e:c4:98:d2:c3:ff:
c8:54:b1:40:4f:fe:9c:ee:02:57:0d:98:d9:df:96:d6:8f:ae:
60:b5:c0:e2:9e:9f:5e:74:fd:29:59:57:4f:cc:37:38:77:27:
e6:6b:78:04:69:45:0e:88:10:60:49:d9:f1:a0:16:98:9b:b2:
3e:ac:89:0e:ee:89:be:d5:00:34:5e:dd:35:99:ca:bc:09:82:
a8:e9:44:7d:28:6c:f3:87:30:87:3f:4f:0b:15:93:5c:ca:26:
57:c2:f4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:01:52 2024 by rpki-client on console-fra.rpki-client.org