Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/c92eF-Wr5zJHdI0bKQjtNzHP4YU.roa
File: c92eF-Wr5zJHdI0bKQjtNzHP4YU.roa (raw, json)
Hash identifier: x2+EkrubW8DDqxaWsy9DUwLYTFGTOGYsJh6hC/biOw4=
Subject key identifier: 73:DD:9E:17:E5:AB:E7:32:47:74:8D:1B:29:08:ED:37:31:CF:E1:85
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 018E9E4DD74EFB207E52A84ADC2C79744D38
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/c92eF-Wr5zJHdI0bKQjtNzHP4YU.roa
Signing time: Tue 02 Apr 2024 10:14:45 +0000
ROA not before: Tue 02 Apr 2024 10:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51017
IP address blocks: 213.21.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:4d:d7:4e:fb:20:7e:52:a8:4a:dc:2c:79:74:4d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Apr 2 10:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73dd9e17e5abe73247748d1b2908ed3731cfe185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:55:ac:3c:cb:44:7b:e9:10:e0:56:be:a5:da:
33:37:25:24:da:d6:3b:2a:aa:97:86:8f:69:25:11:
06:92:24:83:49:d8:1c:63:55:25:11:bd:04:2e:a7:
08:d6:71:84:f6:47:0b:17:43:ec:cd:a2:4b:ee:74:
3c:c2:6a:a0:88:f6:85:2f:75:ec:a0:41:f0:23:1a:
df:45:a1:ca:21:82:57:a0:90:fc:9d:b6:f5:71:17:
5b:29:8b:b3:7f:f3:0c:06:9b:86:83:e2:f6:e3:60:
a5:80:5f:aa:de:c0:a5:02:ba:61:27:88:b3:8e:f3:
57:d4:aa:74:a1:80:91:f9:74:e6:97:df:4f:2d:f9:
5f:ff:3a:c9:ad:94:4c:b2:43:b1:59:41:fe:c8:85:
6e:de:02:39:7d:04:22:38:ca:e6:05:51:e9:92:04:
6e:02:cd:7b:f0:14:d6:59:48:09:f3:5d:9a:68:76:
97:12:45:ad:9b:2f:24:0a:08:0b:8b:84:20:7b:97:
34:b4:67:57:1f:7b:39:6b:6c:9e:de:3e:60:a0:9c:
f4:38:d8:c6:f4:94:c8:69:15:10:32:93:fa:9a:f2:
82:28:4f:fd:58:8b:88:68:d3:e1:de:e4:36:f8:fc:
46:7d:83:93:ce:9b:91:f6:13:ed:86:0a:35:d7:b8:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DD:9E:17:E5:AB:E7:32:47:74:8D:1B:29:08:ED:37:31:CF:E1:85
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/c92eF-Wr5zJHdI0bKQjtNzHP4YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.220.0/24
Signature Algorithm: sha256WithRSAEncryption
01:73:9a:6c:85:ef:20:b6:9d:6d:cc:9b:8c:6b:ee:2f:31:06:
60:2a:fa:2a:a7:0d:65:5a:42:c9:56:66:c8:1a:98:76:0b:83:
ce:44:d1:b5:5c:77:4e:2b:a7:ef:89:ed:63:61:a8:92:7b:c2:
9e:d3:c6:4c:4d:f4:82:e2:18:ab:57:7e:56:e6:49:62:f2:ef:
01:69:d2:9f:6d:3d:1f:c1:5f:58:1f:3b:c2:fb:ee:fe:4e:55:
02:e1:6f:db:e7:c1:a0:70:a5:8b:4e:1a:24:c4:e0:cc:cc:02:
e6:a1:fd:95:63:9b:5f:60:71:b8:87:98:97:26:69:1d:9b:d2:
68:02:ab:93:04:6e:6e:d5:48:34:a4:0c:61:77:28:ae:58:b0:
81:c5:3a:31:2d:99:d6:5e:bf:e4:c4:fb:fb:93:a8:22:1b:6d:
26:9b:b5:8b:a1:b0:6c:38:35:67:57:2f:5e:d6:a3:a0:16:79:
3b:0b:bc:06:81:6c:86:3a:05:e7:8f:98:2b:76:d7:19:c4:bb:
3c:31:0e:57:20:5e:c6:0c:c8:d9:5c:2c:96:42:6b:3c:b3:15:
b2:e9:d4:46:66:ab:28:69:b8:22:02:0b:c2:3f:82:b4:d9:79:
00:ff:87:cf:7d:2d:e4:b8:fb:3b:9a:85:7b:38:75:81:a3:89:
12:42:fd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 18:27:04 2024 by rpki-client on console-ams.rpki-client.org