Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/c1YAwAJNPI3Ir8QvEzjhcThJ1Cw.roa
File: c1YAwAJNPI3Ir8QvEzjhcThJ1Cw.roa (raw, json)
Hash identifier: aakt9OMPsCIfS1EWHGHKVJ57sMIxD+3fMYfMZtkDuA8=
Subject key identifier: 73:56:00:C0:02:4D:3C:8D:C8:AF:C4:2F:13:38:E1:71:38:49:D4:2C
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 018CC4251F9422366163BAAC08120418462F
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/c1YAwAJNPI3Ir8QvEzjhcThJ1Cw.roa
Signing time: Mon 01 Jan 2024 08:30:16 +0000
ROA not before: Mon 01 Jan 2024 08:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39729
IP address blocks: 213.158.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:1f:94:22:36:61:63:ba:ac:08:12:04:18:46:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Jan 1 08:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=735600c0024d3c8dc8afc42f1338e1713849d42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:90:d8:fe:ee:aa:1f:8f:ba:3d:e0:4d:e9:
d4:e6:ee:81:9f:2f:09:0e:99:51:a0:55:ed:4e:8e:
b2:ae:45:f3:69:c3:f4:21:dd:c8:17:b6:fa:5a:22:
db:86:89:02:8b:dd:b1:10:30:e8:8f:c6:a7:4c:ff:
9c:24:30:93:ad:60:1a:45:e0:f2:24:8b:6d:42:ae:
a2:bf:73:ca:b5:cd:7a:97:15:86:c4:55:5e:92:9b:
72:2e:26:f9:a7:2e:f2:18:5e:fb:e3:fd:a5:43:9d:
50:d9:6a:f7:28:0e:94:36:06:a0:81:76:c7:62:4e:
e2:d2:cb:54:cf:9c:d7:c0:00:f9:fc:3c:d7:4c:2b:
03:04:5e:5d:27:cf:be:f6:2a:0c:f3:5c:1b:bc:23:
c8:4c:e8:c8:98:9e:d9:cd:7d:54:24:a7:02:06:a4:
39:1d:ef:88:e9:d5:d5:1d:dd:9f:68:45:e8:93:61:
a9:52:c7:db:3a:91:b7:c1:4f:7d:96:b8:74:d2:7a:
a9:79:e6:56:5c:77:a3:9f:f3:75:de:51:69:89:60:
00:3e:51:d8:39:47:19:15:e7:16:4e:b3:85:79:09:
f2:d3:81:01:06:58:b4:18:42:c1:be:5d:f7:c7:19:
22:14:09:95:a1:3f:b2:b1:05:d3:01:97:d9:6d:75:
3a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:56:00:C0:02:4D:3C:8D:C8:AF:C4:2F:13:38:E1:71:38:49:D4:2C
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/c1YAwAJNPI3Ir8QvEzjhcThJ1Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.158.64.0/19
Signature Algorithm: sha256WithRSAEncryption
82:ca:03:4f:06:ac:b9:78:43:2d:59:31:cf:77:b6:87:cc:a2:
b7:e4:4d:7a:d0:ac:2a:c2:e1:33:7e:d7:26:f3:f9:cb:52:b7:
57:23:e7:43:a9:91:ca:d9:09:e7:fb:a0:8c:da:c1:2b:c2:e1:
2d:d8:56:16:fa:38:ac:52:24:82:3c:e0:48:14:ec:24:e1:b5:
e9:9c:ea:49:fe:2e:36:60:d0:74:3d:07:96:cc:85:92:66:59:
58:7d:85:78:9e:4b:f7:50:f3:b8:81:91:e4:67:19:f0:f6:cc:
08:67:89:7f:f0:66:5d:da:27:4c:4b:c2:6f:7b:87:17:8a:00:
0a:55:c3:bf:87:96:4d:c2:6e:27:34:7b:9c:51:56:da:10:5e:
40:c7:1b:ea:bc:d0:56:e1:6c:0f:94:fb:6a:a6:8f:83:79:25:
24:43:c1:60:0e:a9:44:0c:a5:6b:09:4e:95:57:95:5a:c0:49:
2e:84:ae:83:f6:cb:34:ea:1b:04:ff:0f:8d:80:9b:4b:7a:a0:
b4:78:4e:7f:7a:20:27:0d:c1:77:a2:5d:fe:b8:fa:06:5c:77:
af:ef:09:ed:d4:1b:54:85:8c:75:99:9f:e8:46:df:9a:91:4f:
e5:f2:64:39:e3:a1:54:e1:ba:c9:42:71:f9:73:5b:60:c7:fb:
5e:12:54:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 00:56:22 2024 by rpki-client on console-fra.rpki-client.org