Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/tdmGzTiE02bU7mTmzJZcZdhRJc8.roa
File: tdmGzTiE02bU7mTmzJZcZdhRJc8.roa (raw, json)
Hash identifier: q//IDbX11Q3fTBNdbO95MSdxqInThIMUM4gputWQ2eU=
Subject key identifier: B5:D9:86:CD:38:84:D3:66:D4:EE:64:E6:CC:96:5C:65:D8:51:25:CF
Certificate issuer: /CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Certificate serial: 018FBB98297094CDCE04D8F021B8732EE79F
Authority key identifier: 32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/tdmGzTiE02bU7mTmzJZcZdhRJc8.roa
Signing time: Mon 27 May 2024 19:47:42 +0000
ROA not before: Mon 27 May 2024 19:47:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205012
IP address blocks: 213.134.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bb:98:29:70:94:cd:ce:04:d8:f0:21:b8:73:2e:e7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Validity
Not Before: May 27 19:47:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5d986cd3884d366d4ee64e6cc965c65d85125cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:cc:42:0d:d7:76:c8:7b:49:31:8a:72:38:
89:a5:29:7f:98:df:6d:5e:24:a1:0d:ff:3e:5d:22:
e4:69:5b:72:25:32:fd:af:08:b5:04:65:9e:00:0d:
a8:c3:1a:30:aa:20:9b:cd:6d:b9:fe:85:06:67:be:
ee:62:42:06:35:65:69:f9:2b:ec:d0:20:b4:8c:da:
97:e4:cc:db:3a:a3:48:d6:41:a5:fe:ec:07:4b:8b:
cc:15:70:c6:05:b1:fe:aa:61:b8:a4:f0:9f:3f:c8:
d3:d7:1a:6c:cb:72:15:2f:c7:33:ff:07:db:56:4a:
de:fd:f6:2c:08:37:9e:63:6d:a0:4a:00:cf:63:3b:
b9:9a:63:8a:9f:55:cf:88:e8:67:29:64:76:43:2e:
56:b5:b9:b0:92:e8:cc:c5:03:30:81:48:30:f6:09:
da:82:97:77:2d:b2:4d:7f:c2:f5:38:56:47:1a:6d:
07:cd:66:ec:b9:29:9b:a7:bb:b1:d4:c4:dc:ce:da:
a5:5b:4a:5b:30:f2:59:0b:05:b7:b6:2d:ab:98:3d:
da:f4:0c:ab:66:49:b3:95:11:e7:cf:5e:19:5b:b4:
96:4a:12:f6:bc:bc:3d:b6:79:2e:44:32:f0:d6:3a:
f3:82:f1:5a:b7:57:7d:01:09:36:82:4d:48:d0:fa:
43:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D9:86:CD:38:84:D3:66:D4:EE:64:E6:CC:96:5C:65:D8:51:25:CF
X509v3 Authority Key Identifier:
keyid:32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/tdmGzTiE02bU7mTmzJZcZdhRJc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.9.0/24
Signature Algorithm: sha256WithRSAEncryption
30:73:04:9c:6a:b1:59:24:14:b6:36:66:f0:0e:36:cd:e5:3d:
9b:4c:f2:09:44:e1:27:fa:ef:44:eb:eb:a7:5d:aa:b0:8c:d1:
3f:67:b4:5b:35:5b:11:5a:30:0e:61:d9:01:36:85:fa:10:7b:
44:61:44:dd:ab:d0:99:82:a8:24:ed:f0:56:18:d0:6e:94:bb:
f4:2f:0d:f9:ed:92:e1:0e:71:e9:05:c1:b8:76:fa:4a:dd:16:
91:a2:f2:c1:d0:21:58:2a:54:53:94:69:4d:fc:8f:fd:3a:34:
83:ba:7b:53:dc:52:25:a5:c7:49:d8:f5:87:50:dd:4a:8b:21:
f8:7c:f4:38:a7:bf:a5:d6:2e:69:0b:54:13:34:c7:ce:d3:fb:
c7:d6:b2:aa:ff:63:3a:e7:1b:cf:f0:8b:61:15:1d:e1:82:36:
c0:8b:7f:aa:f3:b8:c5:f0:a3:e6:81:2d:37:b3:5a:34:d9:02:
65:77:69:6a:4d:2a:b8:f7:cd:a4:97:50:2d:53:44:e5:b3:47:
8f:91:71:0e:c6:33:d8:d6:35:da:24:e0:3e:6d:c6:49:b4:2a:
31:98:35:07:14:4f:35:18:80:40:8a:b1:25:0d:44:06:7a:ab:
62:4f:c9:9a:ff:0a:10:1c:af:c6:01:d7:da:fb:8c:d4:82:0c:
db:bc:40:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:37:03 2024 by rpki-client on console-ams.rpki-client.org