Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/93nVoOkxrI2IFkAch-By_33q6Q8.roa
File: 93nVoOkxrI2IFkAch-By_33q6Q8.roa (raw, json)
Hash identifier: lgZKBLixYYj6gHyYiUuWvPGFwEeCXiuCFr1U60VzVic=
Subject key identifier: F7:79:D5:A0:E9:31:AC:8D:88:16:40:1C:87:E0:72:FF:7D:EA:E9:0F
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0191087709F330DD4BD51449627774B21D0E
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/93nVoOkxrI2IFkAch-By_33q6Q8.roa
Signing time: Wed 31 Jul 2024 11:05:04 +0000
ROA not before: Wed 31 Jul 2024 11:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214515
IP address blocks: 213.21.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:08:77:09:f3:30:dd:4b:d5:14:49:62:77:74:b2:1d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jul 31 11:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f779d5a0e931ac8d8816401c87e072ff7deae90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:7a:17:57:5b:84:b0:fa:6e:fb:66:c1:63:
65:ac:7f:3d:df:77:80:4a:ad:2a:01:f2:0c:ee:56:
f1:b7:52:fe:a4:c3:fb:9c:21:a3:d6:66:b3:5d:73:
e4:60:4e:8a:4f:e4:6e:fe:ac:62:38:69:c7:44:bb:
6e:90:67:65:4f:9e:c8:1c:b6:fa:53:8d:a9:e5:a1:
05:e6:d9:43:ed:82:01:d4:4a:60:d6:28:81:87:d3:
45:06:0c:1c:9d:71:62:b9:e7:ec:48:77:75:6b:f2:
f9:db:18:87:3f:14:00:8d:7f:b5:d3:20:8e:04:38:
c2:cc:51:d2:92:e1:2f:2b:57:75:d5:70:d2:8c:2f:
31:dc:2b:59:44:3e:49:53:85:e5:e1:a2:35:ce:f0:
0f:17:23:48:9f:a8:d8:3f:87:11:8c:e7:ed:7c:5e:
1a:42:09:91:75:6b:c7:ef:fb:83:84:3b:00:70:c6:
2f:da:67:bd:ee:94:60:47:b6:b1:ca:4e:62:66:42:
72:1a:a2:78:f9:ea:4a:eb:a7:a3:9e:d4:34:29:88:
95:a9:5f:30:bc:d5:80:9f:0f:e1:5c:94:1a:32:40:
9d:9d:ad:f3:e7:d0:5b:8e:2c:b5:77:0d:04:ab:c6:
63:f7:cf:72:29:3a:19:e5:e5:77:c8:89:01:ac:31:
14:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:79:D5:A0:E9:31:AC:8D:88:16:40:1C:87:E0:72:FF:7D:EA:E9:0F
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/93nVoOkxrI2IFkAch-By_33q6Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.245.0/24
Signature Algorithm: sha256WithRSAEncryption
28:37:d9:f5:fd:40:27:b0:77:54:c0:d8:88:81:9d:a6:ca:ba:
4c:ac:5d:b1:1d:f4:48:32:81:7b:f0:0f:34:8e:57:25:1a:bf:
c2:c3:6b:88:a0:7d:36:ed:d9:43:f0:d4:f2:00:a9:22:7b:a5:
2e:3b:f2:f7:f3:91:8d:7d:e6:88:df:62:57:c9:64:1b:3a:d9:
85:69:65:2f:07:26:b8:19:02:ae:97:90:05:67:58:34:c1:44:
c5:cd:e5:5b:b3:5e:f4:a1:42:a0:52:5b:31:80:bb:35:ac:6f:
cb:fd:5c:c7:6f:69:97:da:c8:89:8b:9f:b0:77:cc:b3:3b:c2:
fe:7f:48:4b:68:76:4a:11:1b:ab:e7:9f:af:a5:35:23:fd:a5:
e5:3e:9b:9c:08:d3:d9:e2:6d:7f:01:d3:61:c1:c0:c1:39:82:
4d:f8:b1:49:f5:f4:17:8e:97:f7:a8:d3:ce:8f:9e:f0:7a:a3:
60:4f:96:4d:48:06:e4:96:39:a0:b7:4f:18:37:44:70:4d:87:
ee:6b:2f:59:d0:d2:4a:ba:ff:8c:d1:de:3b:de:b4:e2:b7:ce:
19:e1:a0:bb:81:d7:9d:42:0e:99:4d:b7:be:50:59:84:3d:db:
8e:e6:84:34:c5:38:1c:ad:17:ad:e0:07:46:7b:ba:ed:f9:3a:
8c:32:44:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:31:20 2024 by rpki-client on console-ams.rpki-client.org