Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/92SZBSW-fLmjl45Bdu8tihmZNTI.roa
File: 92SZBSW-fLmjl45Bdu8tihmZNTI.roa (raw, json)
Hash identifier: S1Y2nNl+iRfS87lCGAcl8/pfpJwgnrbor1MkGiiWtNQ=
Subject key identifier: F7:64:99:05:25:BE:7C:B9:A3:97:8E:41:76:EF:2D:8A:19:99:35:32
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018EE3368E4A24E155D41066ED7D3E77110A
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/92SZBSW-fLmjl45Bdu8tihmZNTI.roa
Signing time: Mon 15 Apr 2024 19:23:07 +0000
ROA not before: Mon 15 Apr 2024 19:23:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43278
IP address blocks: 213.226.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e3:36:8e:4a:24:e1:55:d4:10:66:ed:7d:3e:77:11:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Apr 15 19:23:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f764990525be7cb9a3978e4176ef2d8a19993532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:65:26:fc:26:45:d4:28:10:50:4c:30:58:
1d:75:37:ad:87:a7:33:4e:3e:ab:2b:a2:5c:22:09:
ac:64:f5:07:3e:3d:e8:bf:f2:d2:cc:b2:84:2d:4a:
7c:cc:5a:e0:42:f8:ff:05:be:24:ce:c4:b6:88:b0:
9d:ed:e3:76:7f:31:aa:cd:b5:03:d7:e9:0e:62:86:
84:db:c2:c8:cd:83:ff:b1:89:7e:cb:c4:18:6d:91:
e5:e4:77:7c:72:75:e5:d3:e4:18:a7:e2:9b:4c:09:
cb:e3:c9:a2:63:27:22:dd:b9:7c:6c:50:65:cd:d8:
07:96:5e:32:ee:d1:d2:b6:a0:72:c7:90:11:cb:bb:
28:5c:d4:02:02:92:78:89:41:f7:40:65:13:71:38:
39:55:75:bc:e7:08:53:09:df:64:06:40:b8:5a:46:
b9:f2:4f:04:a0:8b:8a:79:8f:5c:e1:7a:41:dc:e8:
67:f1:e4:e2:da:06:5b:4c:e8:8d:a1:f0:a9:b5:d1:
26:76:c3:ad:41:9e:a2:99:b8:a1:97:6d:b8:00:29:
36:89:39:9d:01:84:42:4c:5a:c4:64:a8:b0:d0:b5:
67:58:b5:3b:a2:e4:c0:17:c2:0c:06:f5:97:8c:c2:
d5:09:19:7d:f0:b8:ed:1e:c6:ee:07:59:29:36:b2:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:64:99:05:25:BE:7C:B9:A3:97:8E:41:76:EF:2D:8A:19:99:35:32
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/92SZBSW-fLmjl45Bdu8tihmZNTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:6b:30:3d:85:43:b1:a6:33:40:3f:ac:17:eb:11:69:e7:12:
dc:9d:48:27:3e:f9:42:7c:49:42:97:73:05:af:e6:07:12:f9:
fc:32:c6:5a:78:04:3d:d9:6e:df:01:8e:88:cd:f2:a9:03:bf:
51:b6:08:55:f6:5f:9e:15:61:37:29:31:8a:73:8d:42:df:24:
f4:0d:a7:10:cf:4b:eb:84:18:f8:4b:3a:20:82:bc:e8:ea:fc:
df:29:40:6b:5a:51:03:0f:da:1f:85:dd:ed:19:c7:1b:ee:12:
32:bf:1d:b1:76:fb:e8:65:30:c1:eb:a4:c1:67:43:e2:ea:61:
ad:ab:f4:49:a3:64:6e:04:e4:00:56:3e:f4:77:8a:a6:7f:60:
6f:e3:e6:5d:7b:59:c5:b4:92:d8:4a:0c:73:a4:1b:21:d6:14:
85:34:be:4a:aa:e8:1b:08:e9:89:7f:7c:34:bf:df:f7:41:52:
48:42:79:aa:91:7b:bc:ca:02:05:16:91:a8:5f:83:65:9b:fd:
ca:9d:e3:bb:6b:0f:dd:77:43:bf:70:b2:7a:d7:8f:bd:35:97:
e7:41:40:43:3d:83:21:2f:36:15:4f:2a:01:8f:18:42:60:79:
86:03:a2:1d:a4:f9:e6:a1:09:73:2f:aa:86:fa:cb:5f:67:e1:
ad:5c:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:38:19 2024 by rpki-client on console-ams.rpki-client.org