Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/fntaAJZlYCUmrHSwrpWlQYWOnSs.roa
File: fntaAJZlYCUmrHSwrpWlQYWOnSs.roa (raw, json)
Hash identifier: 84x2Cz8YlbsqTVWGmwBidZIMI1Wg2sYknwL9rOBToSw=
Subject key identifier: 7E:7B:5A:00:96:65:60:25:26:AC:74:B0:AE:95:A5:41:85:8E:9D:2B
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 019301246052AF2E0932E7B04E092202D97B
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/fntaAJZlYCUmrHSwrpWlQYWOnSs.roa
Signing time: Wed 06 Nov 2024 11:03:01 +0000
ROA not before: Wed 06 Nov 2024 11:03:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 213.21.232.0/24 maxlen: 24
213.21.237.0/24 maxlen: 24
213.21.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:24:60:52:af:2e:09:32:e7:b0:4e:09:22:02:d9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Nov 6 11:03:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e7b5a009665602526ac74b0ae95a541858e9d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:79:d7:47:b8:98:d0:e5:a0:18:3f:36:04:
1f:29:74:93:c2:cd:33:17:d9:e3:11:10:d1:02:45:
85:9c:ad:2c:cc:4d:eb:06:97:77:dc:cf:fa:68:c8:
bc:81:ae:4a:c8:f0:f2:c6:5f:07:54:32:7d:f7:4c:
1e:04:4d:45:e4:c3:d1:40:b5:2d:2f:06:d3:20:93:
eb:6d:b5:1a:04:95:55:45:3b:e9:c4:a0:19:41:9a:
8d:26:22:96:b5:46:7e:ab:cb:42:82:93:8b:b1:a6:
0f:66:82:ef:ba:df:5e:cf:a2:04:18:0d:cd:6d:d9:
b4:d5:e7:e4:fe:72:88:a1:fd:05:cd:bf:89:98:3b:
87:49:9c:23:0d:7f:f2:22:c7:b1:90:61:66:e5:be:
95:8d:cf:cc:4b:d8:11:e1:09:ba:08:00:d6:cb:29:
a2:55:7a:9d:6b:86:86:82:cb:55:55:4d:0c:f5:2d:
ee:0f:44:b1:60:fe:63:71:5e:91:b6:ba:b9:4c:c4:
10:17:c4:14:ae:82:70:77:16:b9:a4:6f:3e:9f:b9:
29:da:b5:1b:62:cc:45:b5:8c:31:66:c9:45:4e:b7:
25:83:b5:03:79:85:a7:07:21:ce:e6:35:a7:69:14:
ee:94:bc:77:20:52:b4:51:35:82:31:91:0c:de:ab:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7B:5A:00:96:65:60:25:26:AC:74:B0:AE:95:A5:41:85:8E:9D:2B
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/fntaAJZlYCUmrHSwrpWlQYWOnSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.232.0/24
213.21.237.0/24
213.21.253.0/24
Signature Algorithm: sha256WithRSAEncryption
43:de:95:5d:fa:4c:39:ea:59:86:91:ce:22:d2:ce:0c:12:e1:
ff:f5:78:c3:ac:3e:46:cb:32:c6:9d:d1:02:34:80:40:b2:35:
9d:28:1e:26:37:b9:aa:ea:78:11:97:0c:06:ea:55:cf:6b:a7:
8e:d0:e0:52:ec:2f:61:b0:fe:ad:d4:13:59:88:51:4f:44:43:
bc:ff:72:a7:18:2d:24:d9:13:3d:11:9e:31:fd:fa:00:b6:e7:
ca:60:69:cb:bf:69:7a:87:c9:cb:e5:5e:3d:7d:b1:7f:12:bf:
0d:08:d2:53:71:a9:ae:89:69:53:50:a5:43:b8:b5:e7:e9:3c:
69:fe:02:5e:0f:01:ef:45:1b:a7:15:e5:0c:f4:41:e2:1f:ab:
db:9b:85:92:28:e5:d9:56:4b:5e:be:20:cc:1a:77:e7:30:01:
5c:ef:41:bb:18:1a:14:45:32:0b:72:77:a6:2e:de:7e:12:7c:
fb:ed:73:cc:4d:5c:51:85:3f:68:b9:ae:fc:fe:16:40:50:21:
0c:cd:d8:fd:24:66:26:f1:d9:ce:3d:fd:47:5b:89:48:05:cb:
7b:30:28:62:33:00:05:3d:d1:b1:6d:00:4c:be:8a:da:70:ce:
c8:21:2c:c8:17:58:b4:72:bf:ba:e2:8f:18:4d:dd:6c:04:60:
ad:f0:c5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:09:39 2024 by rpki-client on console-ams.rpki-client.org