Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/tZYGOeJ7aJqvKIYPUrcLi4O_Kcw.roa
File: tZYGOeJ7aJqvKIYPUrcLi4O_Kcw.roa (raw, json)
Hash identifier: KvHR5P0hooFnukInlmlb6NP0DWOtAGeHIbmSGVZ8HOc=
Subject key identifier: B5:96:06:39:E2:7B:68:9A:AF:28:86:0F:52:B7:0B:8B:83:BF:29:CC
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018CC79590F5A22E8D8D979E2D7E6FF828EA
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/tZYGOeJ7aJqvKIYPUrcLi4O_Kcw.roa
Signing time: Tue 02 Jan 2024 00:31:57 +0000
ROA not before: Tue 02 Jan 2024 00:31:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208287
IP address blocks: 213.142.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:90:f5:a2:2e:8d:8d:97:9e:2d:7e:6f:f8:28:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jan 2 00:31:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5960639e27b689aaf28860f52b70b8b83bf29cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:6f:eb:d6:68:12:4e:0a:4a:48:b9:07:33:
5c:44:82:4a:d9:53:b0:9f:bf:b8:ae:5c:0a:2a:e3:
af:32:43:1a:02:e3:68:95:c4:45:c4:3a:46:a2:e3:
ca:76:b7:33:01:93:67:e0:cf:53:70:e1:6e:14:3b:
eb:59:05:ec:9f:3e:e3:9e:67:63:e5:19:d6:fa:3d:
a7:84:85:a2:1b:85:75:90:cb:c9:89:84:fa:58:a1:
98:13:d6:c7:17:ea:f5:be:07:20:0d:f2:4c:c5:86:
d1:6a:c4:0e:9c:16:09:f7:dd:65:73:2d:4b:d8:a5:
8b:e6:1a:ff:4c:0f:96:4b:d5:8f:93:b5:5d:ed:a8:
36:29:3c:31:a6:12:05:ff:be:53:be:f9:9c:13:7a:
8e:c6:52:6a:30:83:ef:9a:30:df:e0:a9:6c:a9:68:
6d:71:b8:6d:db:ed:c6:e6:fa:8b:6f:1c:29:b1:ba:
e1:f7:5c:00:77:59:fb:b2:29:f1:8b:b0:88:84:c1:
3e:64:79:f9:fe:fd:51:e6:45:9e:5c:46:98:aa:1e:
41:0e:6c:49:90:f4:45:64:b3:66:c2:d6:63:60:15:
e0:e1:3a:85:b2:12:4c:3c:78:03:66:ac:29:5f:37:
16:63:67:ec:b6:75:9d:56:f5:57:f2:ea:cb:0c:c7:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:96:06:39:E2:7B:68:9A:AF:28:86:0F:52:B7:0B:8B:83:BF:29:CC
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/tZYGOeJ7aJqvKIYPUrcLi4O_Kcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.142.149.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6f:05:13:bd:45:53:d1:bf:33:71:92:b1:06:a1:78:e2:a4:
d2:34:90:0d:69:d4:97:ef:7b:a4:40:11:09:f5:c7:4e:8f:1a:
51:88:7f:17:0f:21:8d:f7:bb:78:01:91:ac:a1:fd:3c:75:85:
79:fc:6a:8e:cc:00:0e:87:3a:70:97:5d:ac:2f:b5:3d:fa:5e:
cb:21:46:c9:c4:8b:dc:cd:42:12:89:29:e7:11:a8:b1:6e:4b:
97:e0:16:4b:72:51:ee:1c:cb:b1:73:dc:ef:a1:2c:80:0a:bb:
41:c6:f0:bb:ab:f1:b3:24:51:c8:0e:1b:4d:29:8a:82:0c:71:
ab:ee:3e:74:a7:3b:e1:6b:ce:79:fc:31:ad:fa:85:75:bf:1b:
21:3d:7e:98:89:90:55:cf:3e:e9:ce:b7:eb:ef:58:7a:a8:e5:
68:9a:23:df:3e:cb:5e:c2:01:d3:fe:e5:b5:13:ac:96:d9:92:
3b:63:a5:8c:13:82:f5:8e:c2:4b:bb:7f:3a:c9:8f:7a:71:4a:
26:b4:aa:8d:46:6d:83:74:84:59:76:72:39:40:e7:cc:45:d4:
e5:9e:80:54:81:0d:83:dd:87:27:39:37:72:4f:bf:a9:cb:a5:
d6:3a:96:90:41:d6:48:c1:7e:18:90:b7:de:ce:c6:de:44:80:
df:3d:83:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 16:02:22 2024 by rpki-client on console-fra.rpki-client.org