Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/7hBnuPv6_nbQ6URQ1vo1_2ysEQQ.roa
File: 7hBnuPv6_nbQ6URQ1vo1_2ysEQQ.roa (raw, json)
Hash identifier: YsZ60bZ+yI6hV3NMBlvl6zm0ggVBXI57zdja8Nt2VOQ=
Subject key identifier: EE:10:67:B8:FB:FA:FE:76:D0:E9:44:50:D6:FA:35:FF:6C:AC:11:04
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0191EAEF7BC0244C1AF3D597C85433303BC4
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/7hBnuPv6_nbQ6URQ1vo1_2ysEQQ.roa
Signing time: Fri 13 Sep 2024 10:30:48 +0000
ROA not before: Fri 13 Sep 2024 10:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400992
IP address blocks: 213.21.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:ef:7b:c0:24:4c:1a:f3:d5:97:c8:54:33:30:3b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Sep 13 10:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee1067b8fbfafe76d0e94450d6fa35ff6cac1104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8c:22:0b:b9:c9:a8:10:5d:3b:ef:ed:38:78:
c6:19:1a:48:5d:d8:0c:81:a7:a3:f4:fd:4d:c6:50:
cd:7d:ac:09:1f:e1:14:04:1b:a8:77:97:38:8e:fd:
11:98:08:2c:51:ad:36:8a:33:9d:70:5a:97:33:c5:
80:2a:4d:63:4b:07:c7:9e:19:49:02:37:20:42:9e:
e4:a5:34:62:aa:6e:01:74:3f:65:3e:84:12:9b:60:
51:fe:ea:84:b3:9e:f4:5c:21:72:ed:cb:53:2e:29:
f5:13:d7:e4:1f:8b:40:85:1a:28:d4:a3:d9:da:95:
a8:f0:79:b0:cd:f4:e1:91:fa:2a:3a:c4:03:d1:d7:
66:3f:89:85:1f:f7:55:e6:0c:42:99:82:67:43:14:
f3:65:e6:b2:5b:5b:86:b7:60:99:7e:07:42:9b:99:
57:09:b3:f7:82:1b:88:9a:cd:7f:62:28:84:fa:53:
d4:9f:e4:c9:02:2e:fb:7c:c3:a0:a5:d7:d0:12:8c:
5e:ab:91:9d:87:67:d6:ab:98:1f:e7:e4:3d:87:03:
17:78:e7:66:6a:53:77:d3:db:0f:9b:80:a9:f8:58:
8d:5d:fd:a5:c7:c3:5e:a2:3f:ae:d4:c6:0b:1b:9c:
52:a8:c2:27:82:55:61:65:04:0b:c5:8e:81:e9:47:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:10:67:B8:FB:FA:FE:76:D0:E9:44:50:D6:FA:35:FF:6C:AC:11:04
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/7hBnuPv6_nbQ6URQ1vo1_2ysEQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.232.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:50:5a:46:ad:90:9b:34:f3:ec:7b:c3:66:f0:bc:b6:0f:fa:
82:ca:4f:64:fa:79:e9:27:92:2b:4f:d6:f7:9a:7e:a5:d7:e6:
ce:10:92:98:fc:07:c9:a4:ed:29:c5:18:26:3a:e0:ff:03:b5:
f5:71:a7:11:5c:75:f2:2e:45:ec:83:49:3f:51:f3:76:03:2b:
08:cf:1d:6a:e2:03:8d:90:a0:f7:3e:0c:bb:18:ca:29:76:3b:
51:b9:8f:22:6c:e8:f1:66:1a:ca:e4:0d:5d:aa:ab:74:cc:65:
a2:62:0d:ba:4d:1f:81:e0:9b:ce:de:b9:2f:83:51:c2:70:e6:
c0:74:bd:d2:9e:43:d2:02:74:16:38:80:40:de:5f:b7:83:0d:
1f:5f:cb:84:34:77:a2:47:25:c0:65:09:ba:04:5f:b2:bd:e9:
bb:03:1d:ba:12:d4:af:39:e8:f8:8b:e6:3b:ba:2b:b6:3c:39:
20:d1:ca:2d:8e:6e:22:2e:c0:c5:f2:74:d0:a0:0c:9e:90:13:
88:1d:06:26:e0:42:b9:6a:f3:3f:2e:d2:96:2c:c1:52:b5:d2:
04:1a:f1:f2:fa:3f:46:d9:b0:3c:0c:c6:cb:58:bf:f9:bc:01:
07:34:9f:f2:f7:85:c4:80:fc:f6:03:97:07:27:fa:47:1d:e6:
b6:e3:32:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 09:39:40 2024 by rpki-client on console-fra.rpki-client.org