Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aB9GkO3tsbl9dtuwxHQVx4FhXdg.roa
File: aB9GkO3tsbl9dtuwxHQVx4FhXdg.roa (raw, json)
Hash identifier: Audmb1sQh+mw5blXyoZQ6J7szP6QvXRNVLJ2AWXN3xg=
Subject key identifier: 68:1F:46:90:ED:ED:B1:B9:7D:76:DB:B0:C4:74:15:C7:81:61:5D:D8
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018DFA490FC4F34E946BF3F1FDA27A5B6A1D
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aB9GkO3tsbl9dtuwxHQVx4FhXdg.roa
Signing time: Fri 01 Mar 2024 13:51:48 +0000
ROA not before: Fri 01 Mar 2024 13:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49544
IP address blocks: 213.190.22.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:49:0f:c4:f3:4e:94:6b:f3:f1:fd:a2:7a:5b:6a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Mar 1 13:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=681f4690ededb1b97d76dbb0c47415c781615dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:26:7a:1c:c4:5a:f9:46:2c:68:2b:54:7b:
74:38:66:c2:ab:f0:85:06:88:cc:09:24:8d:a7:a0:
ec:2d:41:00:82:f4:7f:f7:33:98:82:6d:7d:be:a8:
3c:db:40:16:9d:21:3e:46:ec:ab:fb:21:b5:77:13:
2b:f7:16:2a:5a:61:d0:ef:f9:98:96:15:32:06:d2:
6f:1e:82:b5:b0:ca:a7:b4:17:25:c4:f2:a1:59:4f:
f4:b5:3e:c5:28:c2:a5:42:12:54:e2:57:fd:6a:e7:
7e:bc:3b:8f:fd:0b:33:74:cb:4e:93:c5:10:b5:c7:
38:87:a3:4d:97:34:12:c6:75:76:18:17:a0:c2:ce:
72:98:52:28:b0:46:02:57:d1:65:7f:eb:e6:01:6d:
c4:aa:8e:8a:4e:15:cc:ce:0a:51:5d:ce:52:01:98:
af:6c:c0:06:e7:b7:5d:5a:dd:b0:8f:3d:6d:70:46:
06:7b:cc:60:28:11:01:bb:da:d8:1d:84:92:fe:aa:
04:f8:3f:4d:f9:4e:65:e8:2c:82:76:60:30:6c:d1:
86:94:20:1e:65:63:08:4d:c7:c6:63:35:2e:d9:02:
36:ae:73:8a:ed:d4:80:39:6f:60:86:7e:a4:b9:68:
2d:8b:6b:c7:8e:9e:24:70:f3:21:39:69:b1:75:1f:
d9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1F:46:90:ED:ED:B1:B9:7D:76:DB:B0:C4:74:15:C7:81:61:5D:D8
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aB9GkO3tsbl9dtuwxHQVx4FhXdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.22.0/24
Signature Algorithm: sha256WithRSAEncryption
98:62:b9:45:fc:5b:ff:08:98:e0:c3:c6:fd:e5:e4:5d:b1:a9:
1e:06:15:28:2c:a0:51:a7:7d:68:b8:a9:69:9d:9f:90:cd:c2:
75:ab:d2:4e:0a:77:06:c4:c7:4d:df:82:82:42:71:13:08:8c:
8f:1d:8d:37:4a:b6:97:aa:b5:94:59:64:c6:67:31:eb:c9:99:
99:c8:62:4e:ad:bd:31:70:cb:65:da:f7:60:90:54:df:79:6d:
9c:a3:f1:9d:3e:73:26:a4:ff:d0:30:4c:35:6e:f4:2c:e3:b4:
cd:61:21:60:bd:29:f5:36:5a:a7:80:bc:fc:59:37:a4:a2:cc:
ac:6e:10:1f:42:c9:38:0e:28:e5:cd:34:65:58:20:7a:51:69:
d3:05:13:f9:95:ec:e4:b6:1d:5c:c2:e8:1e:40:f0:93:b5:31:
32:9f:3c:7f:19:a7:4f:85:fd:96:72:30:a3:f5:47:b4:d4:b1:
29:e1:47:0e:b8:cf:8f:53:3e:66:9c:c1:88:59:b3:53:5d:f8:
9a:bb:53:b2:31:d2:ed:e2:fc:bc:ba:9d:94:9d:29:ca:d9:57:
e4:5a:20:9f:28:ea:2d:87:34:36:8a:2c:11:92:f5:8e:3c:a4:
86:6e:93:61:3b:83:9b:17:6d:7e:7c:9d:06:67:2a:8e:64:c9:
23:7b:8f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:43:13 2024 by rpki-client on console-ams.rpki-client.org