Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/RIa6-VoF8v3txI87_ou5BlGKzK4.roa
File: RIa6-VoF8v3txI87_ou5BlGKzK4.roa (raw, json)
Hash identifier: CwIxU+2C9/9lFWbYe+sG7VcnTREo7JV6RkmiZgomQxE=
Subject key identifier: 44:86:BA:F9:5A:05:F2:FD:ED:C4:8F:3B:FE:8B:B9:06:51:8A:CC:AE
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F98056348D3213FE934C5F4307B5B
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/RIa6-VoF8v3txI87_ou5BlGKzK4.roa
Signing time: Tue 02 Jan 2024 04:30:05 +0000
ROA not before: Tue 02 Jan 2024 04:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211838
IP address blocks: 213.175.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:98:05:63:48:d3:21:3f:e9:34:c5:f4:30:7b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4486baf95a05f2fdedc48f3bfe8bb906518accae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:cb:e8:4c:a3:e8:d5:9b:9f:19:97:ee:fc:
ce:43:3a:8f:81:e4:e5:cc:91:a6:55:eb:d0:92:0f:
68:41:12:54:ca:04:f9:1c:4b:98:b5:fb:26:b5:a1:
ae:27:0b:f2:e2:4e:67:6a:d6:eb:72:cb:4b:d7:3d:
02:7b:82:a7:35:2b:87:33:8b:4c:84:4e:df:99:55:
39:8c:0c:7b:79:b8:2a:e8:e9:14:1b:0d:0d:f7:d1:
15:50:db:28:b1:f5:1d:48:f6:35:6b:08:fd:b9:3f:
a2:fe:ed:2a:1a:9e:94:40:ea:13:4a:71:3a:bc:ec:
11:82:4d:6c:35:c7:e9:d5:01:2a:f5:49:83:28:40:
3d:9b:15:20:2e:b4:ac:e4:01:6d:3e:79:f7:20:5a:
77:f8:0c:ed:f7:e3:53:64:57:09:d3:b7:8d:1b:98:
49:56:ae:c9:82:d2:43:e3:df:10:e8:73:6c:48:97:
a8:9a:24:2f:99:a2:d1:80:dc:d2:4a:d3:5a:de:d7:
4b:49:37:fd:24:a8:a7:22:d3:27:e1:61:5c:ec:eb:
e5:85:10:ca:a7:ab:96:6a:86:66:70:43:53:54:e1:
5c:8e:41:00:84:9e:3f:93:07:11:1b:c9:a9:d7:37:
a9:b5:76:ad:17:3e:ea:72:99:fa:ca:75:4f:9e:9c:
db:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:86:BA:F9:5A:05:F2:FD:ED:C4:8F:3B:FE:8B:B9:06:51:8A:CC:AE
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/RIa6-VoF8v3txI87_ou5BlGKzK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.119.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:41:3c:68:cf:53:a9:46:a9:73:fa:6a:12:56:80:5d:8d:a5:
13:3a:58:ee:b6:e5:ba:62:38:83:99:53:4b:19:b3:32:e2:fe:
18:ad:49:63:54:07:e3:75:3b:aa:b9:f4:1e:d0:6e:0f:4e:31:
a1:dc:a7:c3:48:af:ec:70:03:e5:e2:a4:5f:23:90:af:2b:b9:
9b:02:56:ba:6a:c0:1a:4a:51:4f:bc:bc:42:0d:eb:e6:cd:25:
e6:8e:43:81:18:76:b0:6e:3e:d7:77:9d:c4:01:fd:f7:30:64:
f0:a8:d1:94:64:40:70:82:55:59:f5:1e:02:2b:2a:f3:11:de:
ec:7a:5e:fc:f4:a9:48:d2:23:bc:57:5d:f1:da:92:61:e1:3b:
20:93:6f:e4:63:06:fa:55:a6:a8:b7:89:c9:41:f2:1f:ff:3a:
c0:dc:4f:61:5c:25:9a:b9:34:09:ad:84:1b:ff:c8:f5:e7:58:
4f:1a:7b:d7:52:72:32:a2:e7:76:69:1e:bd:11:2e:a2:48:f2:
07:38:62:3e:a1:8f:4c:30:37:08:62:51:da:73:d8:e4:68:bb:
21:04:02:45:55:68:e7:bc:9d:f5:6a:de:6f:33:64:8e:ad:aa:
77:03:b3:6f:75:f0:30:32:c8:b5:cc:26:f5:04:be:7a:40:80:
2b:ee:50:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 04:27:53 2024 by rpki-client on console-fra.rpki-client.org