Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/0VJ10u7Fe1GyP7ylb38oMQBb8ks.roa
File: 0VJ10u7Fe1GyP7ylb38oMQBb8ks.roa (raw, json)
Hash identifier: tFQVhRSD0a8LM+pYAqDVC4kSz3spu3psvzAm5E5vvi0=
Subject key identifier: D1:52:75:D2:EE:C5:7B:51:B2:3F:BC:A5:6F:7F:28:31:00:5B:F2:4B
Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial: 018CC5DC79D9B29056E1620A7A68D8AF87B8
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/0VJ10u7Fe1GyP7ylb38oMQBb8ks.roa
Signing time: Mon 01 Jan 2024 16:30:09 +0000
ROA not before: Mon 01 Jan 2024 16:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25575
IP address blocks: 213.145.224.0/19 maxlen: 22
2a03:1000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:79:d9:b2:90:56:e1:62:0a:7a:68:d8:af:87:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
Validity
Not Before: Jan 1 16:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d15275d2eec57b51b23fbca56f7f2831005bf24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:6f:29:82:0f:1f:fa:59:f8:98:be:46:bc:
9e:a7:07:c6:5b:1d:f5:de:9b:05:08:e1:35:9b:26:
ff:aa:f1:9a:31:ce:ac:7b:2b:bc:e4:12:66:9b:20:
66:03:67:b2:b8:7b:f1:67:42:09:28:21:be:41:36:
9a:c9:4c:8b:fd:3b:cc:59:c3:55:b1:c9:01:97:22:
4a:29:4a:54:d0:91:ab:03:d9:8e:e2:8b:e8:06:40:
52:0b:42:58:16:c8:f7:58:87:45:53:5e:ba:e3:9e:
ac:79:f4:e0:20:9a:1b:5d:83:b3:84:02:3b:83:e8:
3a:ad:fb:12:d2:f2:7f:51:e2:b8:fe:32:b9:6f:a8:
fd:5d:52:38:0e:d6:54:e8:3b:7e:57:38:8d:d2:58:
8c:75:68:c2:ad:dd:4e:08:86:0b:7f:4a:be:d5:f5:
2a:0e:d6:d2:56:b9:6a:13:a6:1e:e7:99:bd:e3:e5:
91:de:c6:b5:f6:c5:33:8e:36:71:a1:e6:34:00:65:
5d:18:73:a4:d8:bd:28:b6:e4:ba:14:5c:cc:d9:3a:
73:d1:01:61:0d:8d:a6:27:a4:f1:75:f8:68:5c:d9:
97:b6:6a:11:06:0c:f9:13:da:b2:70:d0:25:bc:c4:
8e:17:c2:bd:a4:d6:a2:4d:aa:0a:e3:86:a3:85:71:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:52:75:D2:EE:C5:7B:51:B2:3F:BC:A5:6F:7F:28:31:00:5B:F2:4B
X509v3 Authority Key Identifier:
keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/0VJ10u7Fe1GyP7ylb38oMQBb8ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.224.0/19
IPv6:
2a03:1000::/32
Signature Algorithm: sha256WithRSAEncryption
88:e9:65:4e:ae:e1:73:f4:a4:b1:02:93:62:37:06:b3:83:13:
b0:59:cf:c0:39:3a:d4:1c:d7:e4:ec:6a:15:ec:9c:cf:cd:f8:
1c:b7:7a:ad:55:9a:7c:ab:0f:47:f5:4e:8e:24:4e:4e:30:9b:
3b:c2:78:73:62:01:94:db:19:a4:f9:7a:18:e1:30:fc:0a:01:
72:6a:3c:cc:ab:23:4a:b3:25:96:8d:4e:ec:dd:93:9a:78:6e:
79:d1:36:19:64:e0:f8:40:4f:25:dc:ca:d0:0b:0b:4a:16:c6:
8a:19:91:1f:27:c1:24:6c:f5:45:c7:87:1b:bd:e9:73:ed:2b:
4a:d8:3a:0e:4a:7f:69:01:0c:64:1a:71:78:14:e8:ac:ef:95:
f1:61:46:f9:c7:5a:a2:46:6b:df:3e:07:d2:b2:bf:f6:b4:a9:
9b:fe:6f:48:e8:79:40:6d:40:e0:74:33:31:7b:d3:ba:bf:f8:
43:e5:19:8e:a4:c6:4b:25:7e:a3:e2:9b:89:ae:5a:f9:3c:75:
7d:1c:5d:cc:1e:86:e6:c1:be:e7:cc:46:26:78:a2:91:fa:02:
c5:26:0b:34:4d:01:90:82:60:62:71:6e:74:d0:c2:b5:da:e2:
eb:c5:c6:75:9b:a2:95:6a:c9:69:f1:41:5b:d3:88:56:d9:a7:
10:97:eb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:04:27 2024 by rpki-client on console-fra.rpki-client.org