Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/F0JTo65zzb-oMHVyHfFHPeMUNF4.roa
File: F0JTo65zzb-oMHVyHfFHPeMUNF4.roa (raw, json)
Hash identifier: uMagb04Koq3f87WHCKIxab1jGl3lFRPSxCFI4myZ2qY=
Subject key identifier: 17:42:53:A3:AE:73:CD:BF:A8:30:75:72:1D:F1:47:3D:E3:14:34:5E
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 019108BC9EC55EACB48D01DC1B99E16B9F7F
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/F0JTo65zzb-oMHVyHfFHPeMUNF4.roa
Signing time: Wed 31 Jul 2024 12:21:04 +0000
ROA not before: Wed 31 Jul 2024 12:21:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39729
IP address blocks: 213.158.64.0/19 maxlen: 24
213.158.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:08:bc:9e:c5:5e:ac:b4:8d:01:dc:1b:99:e1:6b:9f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Jul 31 12:21:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=174253a3ae73cdbfa83075721df1473de314345e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:25:9a:79:f0:85:1c:05:10:4e:61:17:6d:
fc:9c:f1:2e:34:3a:c4:b7:25:7f:ca:22:5a:ff:d6:
c8:91:e6:22:47:cc:ca:b3:79:73:7f:f9:da:9c:7d:
db:94:44:dd:e4:66:1c:c9:4e:e9:2d:1b:ae:c3:f7:
53:3e:48:34:8d:a4:b5:b3:53:a3:bf:7b:e3:2a:05:
c5:06:04:c8:1f:2a:f1:e6:8f:bb:b5:1f:9f:11:35:
3e:41:b4:5e:03:3c:5d:e3:e3:46:ef:ad:53:52:f0:
9f:33:fd:60:33:12:6b:03:83:64:36:60:1b:99:fc:
01:ac:05:c7:15:98:ee:84:cc:1e:7b:43:4e:20:88:
2d:99:83:d7:b0:0c:95:d6:cf:78:01:71:64:a3:2e:
5d:4b:82:a5:cc:2b:59:3c:d7:97:9c:bf:e5:4e:7a:
b6:a7:2e:31:7d:ec:dc:53:89:71:15:73:9e:17:ff:
8d:82:4d:4a:3c:24:e9:fb:00:69:88:83:d6:29:c5:
b1:51:01:42:d9:95:a3:0f:10:e4:98:55:b6:67:5e:
d0:8f:f9:f4:e2:b0:cc:03:4e:bd:12:d1:cf:fa:cb:
ae:36:e0:61:28:bb:76:71:26:f7:e4:da:97:07:1f:
fe:96:ab:4c:5f:6f:1c:b9:5d:8e:b1:ca:5f:bb:f0:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:42:53:A3:AE:73:CD:BF:A8:30:75:72:1D:F1:47:3D:E3:14:34:5E
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/F0JTo65zzb-oMHVyHfFHPeMUNF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.158.64.0/19
Signature Algorithm: sha256WithRSAEncryption
50:ab:84:93:7a:f1:8b:b8:c0:17:f3:87:2c:88:9d:31:7b:78:
ca:df:aa:f3:b4:45:b1:f2:aa:61:fe:f9:35:b9:71:f0:c2:3a:
dd:0e:c3:84:ca:18:a8:59:8b:cb:7f:c8:1d:27:82:51:a3:0f:
ac:8e:09:65:cf:ce:f5:93:15:3b:11:0f:e1:48:ca:fb:2c:33:
4d:84:0e:05:47:56:6f:fb:69:c8:98:e1:8e:47:aa:7b:6a:f5:
18:ea:e8:22:a9:cd:d5:05:3d:1a:de:7e:b1:ac:61:7b:c3:41:
29:c8:a9:0e:8a:d7:fd:1c:09:ef:66:b0:9c:f5:0d:c5:f1:b0:
64:72:d0:3e:94:6b:f1:53:1d:83:27:89:38:88:c5:33:8c:e8:
03:e1:7f:7d:43:d3:a2:cc:f4:12:af:79:3b:69:ec:b0:34:44:
96:e6:68:e1:a0:04:d4:00:56:0f:59:05:75:69:1e:c6:0b:78:
6f:ac:b4:92:33:24:d8:eb:55:4c:dc:8c:08:9d:36:f5:39:e2:
01:21:a1:4f:55:fd:03:4f:11:0d:d9:b6:5c:65:5e:6e:7f:d8:
c8:34:6b:19:f4:6d:21:17:16:60:63:bf:00:00:bc:d0:ee:42:
e5:17:aa:ab:c0:88:ac:f9:b2:23:67:ae:df:e0:73:9e:de:39:
a0:1e:ad:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:42 2024 by rpki-client on console-ams.rpki-client.org