Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/z4RFsgtdJLQ9ClX7XqhGHv0anNg.roa
File: z4RFsgtdJLQ9ClX7XqhGHv0anNg.roa (raw, json)
Hash identifier: WLv3cDi2URM2G09/ftoU3IXd/mXsQzs0+UwbZTQ879w=
Subject key identifier: CF:84:45:B2:0B:5D:24:B4:3D:0A:55:FB:5E:A8:46:1E:FD:1A:9C:D8
Certificate issuer: /CN=9a74481b87decf63837e2697462c9e44700d4bdd
Certificate serial: 018D405FEDB8FE486D763031E0A1E7C37248
Authority key identifier: 9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/z4RFsgtdJLQ9ClX7XqhGHv0anNg.roa
Signing time: Thu 25 Jan 2024 11:27:25 +0000
ROA not before: Thu 25 Jan 2024 11:27:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204949
IP address blocks: 213.134.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:5f:ed:b8:fe:48:6d:76:30:31:e0:a1:e7:c3:72:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a74481b87decf63837e2697462c9e44700d4bdd
Validity
Not Before: Jan 25 11:27:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf8445b20b5d24b43d0a55fb5ea8461efd1a9cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:a7:37:70:2b:10:a7:fa:af:50:b8:ca:71:
ee:6c:bb:6b:a0:fb:42:e2:08:62:d7:f2:66:e0:57:
4b:76:65:e2:8a:03:3b:2d:8f:13:76:97:33:ff:01:
c4:b7:2a:82:53:b8:1e:05:a8:20:b8:54:7f:02:b2:
74:a2:cd:93:f1:b3:3b:f9:0b:b4:84:03:ef:cd:e1:
5b:68:c0:d8:c8:20:7b:5a:aa:f5:dc:03:cb:93:5c:
d6:1f:2d:ac:4a:3f:21:75:72:8c:d9:c0:50:9a:16:
1f:9a:8d:2b:34:96:14:62:e0:5b:6e:65:bd:dc:89:
a2:c5:91:d0:42:53:1e:79:06:6a:79:13:d1:29:4b:
ff:55:10:59:fa:07:df:23:66:b5:7e:2c:8c:db:2d:
8b:e5:3c:66:bb:9b:67:ad:a3:dc:1a:4a:82:38:73:
f6:8d:47:65:28:82:b6:4e:a3:69:07:f7:06:c3:03:
f5:f3:97:b6:7b:4a:59:41:75:83:06:0b:97:48:a4:
db:c5:e1:4d:02:ac:c8:80:12:c2:60:87:d1:07:f8:
37:eb:0b:85:2a:d6:30:39:df:50:e6:f9:97:e3:77:
d8:e8:78:b4:ed:18:06:85:16:28:c3:b0:44:ed:3f:
34:6e:4f:69:8e:e5:f2:21:3a:c9:bf:a7:cb:5d:29:
5b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:84:45:B2:0B:5D:24:B4:3D:0A:55:FB:5E:A8:46:1E:FD:1A:9C:D8
X509v3 Authority Key Identifier:
keyid:9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/z4RFsgtdJLQ9ClX7XqhGHv0anNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e0:7f:05:c7:86:e3:85:59:90:2c:3e:96:e7:3d:1a:02:98:
32:5a:c6:c4:fb:fa:12:44:95:b6:ba:e0:e4:f8:d8:b2:e9:0a:
64:b6:71:3a:92:0e:eb:bb:b8:aa:da:c8:92:be:2a:f2:cd:02:
be:a7:4d:62:39:46:b5:f8:c4:60:6d:d2:77:9e:dd:a0:bd:41:
df:8d:99:71:ea:4b:14:f7:e7:a6:66:52:28:d2:cb:f2:62:f9:
22:04:ca:fb:f4:81:43:3f:46:71:d6:6f:e7:af:a9:93:5f:c9:
99:81:6b:df:0f:a1:2d:fe:5d:db:13:81:ed:f1:21:29:76:7a:
20:70:bd:23:85:ee:46:90:e7:1e:cc:8d:a9:f8:e5:d7:9d:19:
01:1f:57:19:38:a0:45:49:95:97:54:a0:c2:ff:22:fc:16:51:
92:f8:64:34:52:82:14:17:11:0c:5a:b3:b3:7c:b3:56:56:90:
db:6d:31:8c:87:26:fe:2c:ed:79:9c:58:44:04:52:a5:55:82:
d1:da:fe:26:4b:73:f9:6e:d7:7b:34:f5:59:d1:ac:74:c2:e6:
95:6b:1f:73:90:75:f2:ec:0d:23:ab:e2:cd:bf:ef:79:8a:ed:
76:37:26:8a:62:15:6d:f0:3a:1b:f8:fa:5b:37:57:25:d0:e1:
7f:3d:9b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:49:13 2024 by rpki-client on console-ams.rpki-client.org