Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/daDNG2gdu7ZritE51fTYRQ6MitY.roa
File: daDNG2gdu7ZritE51fTYRQ6MitY.roa (raw, json)
Hash identifier: f/JZNRrLt4jL9zWpkSSxb/H1pnMKA2ZIROJgMvCfPs8=
Subject key identifier: 75:A0:CD:1B:68:1D:BB:B6:6B:8A:D1:39:D5:F4:D8:45:0E:8C:8A:D6
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DF99DFC496616D0D4B282E67B21D93
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/daDNG2gdu7ZritE51fTYRQ6MitY.roa
Signing time: Tue 02 Jan 2024 06:32:26 +0000
ROA not before: Tue 02 Jan 2024 06:32:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 213.108.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:99:df:c4:96:61:6d:0d:4b:28:2e:67:b2:1d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75a0cd1b681dbbb66b8ad139d5f4d8450e8c8ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:73:ef:28:3d:14:89:57:1f:ab:92:fa:9b:b3:
42:e2:43:ad:ac:35:b9:3c:6f:b6:07:b2:f1:68:74:
f2:f0:b3:03:07:95:74:e4:a6:dc:b7:54:fa:9d:1a:
e5:bc:f7:58:16:2f:7d:e9:a3:19:32:76:a0:3c:23:
88:ec:b4:b8:a4:39:82:55:d0:fd:f8:da:c0:ff:59:
17:87:9d:8c:91:40:c2:39:bc:ca:86:a4:81:09:62:
f5:df:93:ea:e3:8e:1f:80:42:13:e4:b3:ae:fe:15:
93:50:f5:fe:b0:f6:4a:7c:09:0d:12:8f:e4:8d:2b:
02:ac:44:d3:57:fd:60:d1:ab:ce:60:c9:7b:ad:91:
f8:74:48:96:6e:98:1b:21:05:ef:5f:a4:71:4d:9a:
d1:6d:9b:b7:2f:6b:85:07:cf:ef:82:6c:31:94:50:
4d:74:0b:4b:ce:04:6b:19:10:14:28:b5:01:8c:4d:
9c:34:14:b0:08:ce:3e:bf:77:1f:70:de:b9:7f:59:
09:23:49:5a:e8:24:e0:2d:55:0b:08:28:07:1a:32:
1e:db:ff:a2:a2:b0:96:eb:1e:3c:25:47:3c:2f:4e:
59:ec:45:46:3a:2c:2f:20:42:a1:4a:ff:4b:ac:e1:
0b:b5:39:ff:67:4c:5f:6c:a9:98:3c:33:dd:c0:c2:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A0:CD:1B:68:1D:BB:B6:6B:8A:D1:39:D5:F4:D8:45:0E:8C:8A:D6
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/daDNG2gdu7ZritE51fTYRQ6MitY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.199.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ff:ef:d1:dd:7f:d2:ba:6a:ff:87:5c:e8:62:fc:01:ff:bf:
fc:11:90:a9:fd:d7:f6:4f:c5:dc:cd:ca:a1:76:6b:05:e9:38:
cb:4c:b6:0d:8a:0e:67:9c:58:ac:61:7d:39:39:01:f3:7d:f6:
e8:37:29:a5:ee:be:3d:15:d0:0b:23:6d:75:d8:4b:2d:9c:18:
0f:be:8e:3c:9c:57:90:1e:ab:02:7f:7f:c5:a9:d6:72:63:e5:
ca:89:4f:05:a8:1d:b3:e8:1b:8e:23:ff:db:30:8c:d1:fb:2d:
3d:9d:f0:7e:6e:8b:08:bb:3b:25:8a:e5:68:96:68:e4:8d:64:
66:2b:b5:b6:10:2b:3c:be:c4:43:9c:be:40:11:ab:74:cf:95:
c5:79:8c:cd:d8:39:b7:9b:5c:5e:7e:5c:81:8f:59:76:74:9b:
1e:88:06:6b:81:96:1d:01:95:61:32:d6:e8:d0:f3:97:4a:75:
7a:f6:0c:d1:86:07:f0:e6:2b:ce:3f:8f:9f:d0:64:5f:16:35:
ef:8a:c1:ff:90:5e:7d:42:c5:26:e8:cd:d2:56:3c:4f:41:8b:
9e:6c:86:ca:db:77:7e:34:bb:81:43:ba:68:0c:6b:f1:c1:94:
c4:cf:3a:27:78:82:d6:e8:6c:58:ef:f6:b1:0f:a5:d2:34:66:
6a:0e:f3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:38:35 2024 by rpki-client on console-fra.rpki-client.org