Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/1eaj2hRTJcHRgiJw2AuBqjXYVGQ.roa
File: 1eaj2hRTJcHRgiJw2AuBqjXYVGQ.roa (raw, json)
Hash identifier: i5hhNXm2V8Z/FnnMfWtAMy/pdFPYLRRzRdNluo2mPSU=
Subject key identifier: D5:E6:A3:DA:14:53:25:C1:D1:82:22:70:D8:0B:81:AA:35:D8:54:64
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 018EBC72F47C92E8B5F1E74503EEE392D7D6
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/1eaj2hRTJcHRgiJw2AuBqjXYVGQ.roa
Signing time: Mon 08 Apr 2024 06:43:54 +0000
ROA not before: Mon 08 Apr 2024 06:43:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57604
IP address blocks: 213.232.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:72:f4:7c:92:e8:b5:f1:e7:45:03:ee:e3:92:d7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Apr 8 06:43:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5e6a3da145325c1d1822270d80b81aa35d85464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:a3:ec:d3:16:6f:77:b7:ad:6a:4f:7f:54:
fe:56:96:3b:e0:85:10:b5:9a:11:a2:90:99:3b:54:
b2:eb:e7:c2:02:af:10:e6:da:0d:9a:6c:0e:e3:ec:
85:b1:53:9d:99:b8:52:25:ca:62:0f:14:9f:f0:72:
9e:18:46:f1:30:d9:05:38:e2:82:95:86:91:a2:8c:
91:2d:e0:80:c6:c4:9b:76:ed:bc:ca:ed:62:4e:19:
81:db:c7:a3:9b:97:e2:a2:c8:34:34:df:94:74:ac:
4c:b5:c0:05:c2:3c:45:e0:dc:b0:46:e2:53:03:bb:
ed:73:9d:99:30:75:7c:7d:b1:fe:c6:cd:88:c0:77:
c9:56:92:9e:83:db:e5:64:b9:de:43:25:f5:af:e7:
0c:f1:16:f1:1f:f1:d7:25:af:1b:c3:c3:48:15:d7:
51:d4:3e:04:6c:53:47:2e:38:d0:08:b3:5d:ca:53:
3c:42:fd:92:42:3e:ad:b6:59:30:7f:cf:48:42:44:
fa:68:0c:42:4c:23:56:ec:36:7d:83:52:ac:cd:c8:
a7:18:63:ee:37:92:40:3b:3e:ee:60:96:e9:17:53:
34:4e:48:41:c0:33:14:9e:f8:51:c9:f0:0a:7a:99:
28:73:1e:68:65:8a:53:0f:b1:7c:3e:fa:a4:8e:16:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E6:A3:DA:14:53:25:C1:D1:82:22:70:D8:0B:81:AA:35:D8:54:64
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/1eaj2hRTJcHRgiJw2AuBqjXYVGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.236.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d1:5d:c8:4a:8b:bb:85:31:d0:77:c1:15:6e:45:fa:50:e2:
9c:dd:80:3c:b9:4e:c5:99:64:7d:d7:b2:f7:eb:27:81:f3:a6:
24:0b:4a:f0:94:64:f5:7d:0c:3e:14:0c:67:55:a3:17:2c:cf:
d2:6c:8a:27:08:2a:1e:5a:ce:a3:d8:c2:7e:0c:ca:f6:4f:19:
d8:b4:d5:b0:0e:89:1b:0c:91:93:55:c4:73:67:fc:73:ef:e0:
44:32:d8:2e:1c:23:6f:5a:b9:e8:a9:5d:d0:7c:cd:30:a0:4b:
c9:4b:4a:9c:9d:70:6b:99:c0:1e:bd:ab:9a:cc:d0:db:4d:82:
e1:5c:f0:07:bd:d7:cf:91:73:09:4b:e1:93:7b:5e:9a:f5:16:
d2:d2:b4:14:3c:59:b9:ad:be:7a:10:f2:9b:25:21:42:86:61:
06:48:8d:b2:0b:5b:a1:94:52:70:8a:c9:1d:5d:80:6b:ba:73:
90:94:a9:33:83:85:d5:3d:ea:a2:e3:a5:53:a5:2a:e4:7b:c1:
01:0d:c3:5d:f9:31:d9:fe:23:b7:13:34:82:34:45:a9:b1:11:
ef:b0:08:ca:bd:85:30:4c:83:8a:73:39:d9:4b:62:53:92:85:
72:54:b2:c1:3f:e1:dd:b2:d6:d1:84:a2:a4:b7:0c:34:d6:22:
42:42:e6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 02:37:12 2024 by rpki-client on console-ams.rpki-client.org