Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/yRMx67NEg2-zEMiewi4j3QkHYss.roa
File: yRMx67NEg2-zEMiewi4j3QkHYss.roa (raw, json)
Hash identifier: cNHa6Dg3tM7/S8NhUrYWbCcVZbXKW0D2QmYLIqwbqL8=
Subject key identifier: C9:13:31:EB:B3:44:83:6F:B3:10:C8:9E:C2:2E:23:DD:09:07:62:CB
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018CC9BCC315A66032BE11785D4D247B508C
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/yRMx67NEg2-zEMiewi4j3QkHYss.roa
Signing time: Tue 02 Jan 2024 10:34:00 +0000
ROA not before: Tue 02 Jan 2024 10:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212230
IP address blocks: 213.0.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c3:15:a6:60:32:be:11:78:5d:4d:24:7b:50:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 2 10:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c91331ebb344836fb310c89ec22e23dd090762cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:2d:38:81:86:29:be:ac:26:12:73:d6:3d:
cd:a1:8f:72:65:2a:14:5e:f1:1f:d9:23:5b:5c:02:
0a:db:d7:bd:9d:c9:64:c9:83:30:4d:b0:22:81:a8:
4c:e4:d5:fe:b8:05:86:c9:61:77:c2:67:62:49:73:
9d:6a:4a:c4:b9:a3:df:bc:3c:ea:25:b2:f4:db:d4:
9e:31:ec:72:2c:cb:49:85:7a:0e:75:7d:ac:34:0a:
3c:3c:7e:df:36:2c:c8:7d:b4:c9:9a:2f:74:44:9c:
24:be:2e:8c:de:d7:9f:39:4e:76:01:4b:ad:1c:ba:
ca:1b:45:b6:06:c7:51:46:5b:0b:20:5c:2f:45:35:
5f:3e:f7:86:ea:cb:1c:ae:dd:39:9f:4f:3b:75:16:
2c:ab:98:99:6c:0d:af:3b:63:2b:91:a4:77:a1:05:
a8:20:45:34:9b:d3:e8:8b:60:04:f7:64:4f:75:5c:
e2:ad:48:3e:4d:4e:26:a0:93:fb:cc:09:e1:d1:6e:
5a:f3:b7:46:12:41:1d:23:3c:28:f4:84:4c:d1:0a:
a7:f9:d0:fe:11:88:2b:7e:db:a6:a9:ad:61:d8:ca:
3f:e4:07:6d:38:f8:c4:a3:60:7d:64:d8:e5:50:d3:
58:6b:b6:59:06:c6:01:cc:fd:78:61:d4:a4:76:fb:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:13:31:EB:B3:44:83:6F:B3:10:C8:9E:C2:2E:23:DD:09:07:62:CB
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/yRMx67NEg2-zEMiewi4j3QkHYss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.0.21.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c9:62:d9:50:c4:d8:eb:1a:7f:eb:d2:5e:a2:4a:09:49:8b:
ea:9d:da:77:ab:99:8c:65:dc:fb:d0:c9:28:ef:32:08:4f:b5:
4c:29:a1:6c:dc:52:64:d3:68:5b:7e:16:af:2b:09:fc:29:8a:
24:82:da:b2:67:09:8f:51:3d:84:20:45:a0:45:1a:af:9c:9e:
3d:c9:14:5c:5f:9d:0c:1d:40:89:e0:51:a2:16:8f:88:6f:e6:
87:ea:d3:8e:e3:ce:3d:6d:72:62:eb:67:f0:d1:5d:07:cc:e2:
fc:a3:6a:fd:63:ef:71:71:fb:fd:d3:b0:f5:3f:8d:af:36:bf:
30:de:a9:c5:fc:b6:81:a6:7d:d2:0b:0f:02:b1:4b:d0:4b:5d:
51:1c:dc:e2:7f:75:1d:b1:5b:c1:59:31:4a:62:73:ea:c6:76:
ac:cb:40:fa:14:8d:95:02:65:af:d1:81:55:63:32:b7:aa:7f:
f6:3a:99:b5:b8:04:0d:42:90:8d:71:1a:04:83:ef:7c:21:86:
9e:e6:77:40:da:26:00:a0:b4:ee:b0:02:1a:db:7e:16:57:5a:
87:d2:58:48:c0:7d:8b:db:56:7f:9d:77:7e:f6:43:fd:d8:b5:
f5:46:7f:47:8d:52:eb:c2:b1:d7:ce:a8:fd:b7:6a:a2:0e:1f:
5d:3f:02:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:57:43 2024 by rpki-client on console-fra.rpki-client.org