Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/gy6hO3sL8Pzu5MsFt_Ab1Pmn6og.roa
File: gy6hO3sL8Pzu5MsFt_Ab1Pmn6og.roa (raw, json)
Hash identifier: 8JqnRVWZA1q+1hFWOtRbgwtNNHsn7/Rya81nxJfHE8Q=
Subject key identifier: 83:2E:A1:3B:7B:0B:F0:FC:EE:E4:CB:05:B7:F0:1B:D4:F9:A7:EA:88
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01935399D35D794DECC78CDBD9A46DE001C0
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/gy6hO3sL8Pzu5MsFt_Ab1Pmn6og.roa
Signing time: Fri 22 Nov 2024 11:20:10 +0000
ROA not before: Fri 22 Nov 2024 11:20:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8285
IP address blocks: 213.21.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 18:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:99:d3:5d:79:4d:ec:c7:8c:db:d9:a4:6d:e0:01:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Nov 22 11:20:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=832ea13b7b0bf0fceee4cb05b7f01bd4f9a7ea88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c9:41:b7:ec:19:22:c6:67:ab:7c:e2:b8:0f:
77:e8:8e:30:8f:68:f2:8a:06:bb:55:c8:a6:ff:cd:
38:a5:f8:1b:59:46:eb:af:92:d0:0e:de:cb:23:57:
03:82:ae:37:30:f9:6e:4e:ba:81:74:87:1b:d9:12:
63:04:cc:5e:3e:c7:5d:87:19:d8:d2:8d:9e:5a:7d:
73:fd:ab:c0:19:39:58:87:00:fd:ae:c2:56:ab:aa:
7b:89:fd:12:53:b0:9c:31:4c:27:12:e1:c7:33:95:
8a:57:e3:47:2a:aa:e8:af:be:2e:e1:08:fa:01:cc:
42:8e:d5:b3:a4:82:79:6b:07:6d:e7:4d:72:d6:0c:
1c:7d:4b:ec:dd:d6:b1:61:f7:62:b7:52:fb:a0:02:
37:27:00:5a:07:16:0c:a7:ff:f5:da:16:99:69:f4:
99:c1:27:3a:10:1b:6a:8c:88:db:63:99:e8:42:bb:
fa:62:93:6b:57:87:93:47:47:d1:56:92:c4:a9:62:
c2:24:2b:40:77:45:b3:ee:9f:7f:a7:b3:59:a3:c6:
88:71:d1:ac:46:60:ba:e5:a4:43:37:6d:14:93:19:
26:4e:4c:52:37:84:28:f5:18:1d:cd:f5:fa:59:23:
ea:ce:15:03:95:a6:c1:6a:7b:63:3a:22:31:25:fe:
ef:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2E:A1:3B:7B:0B:F0:FC:EE:E4:CB:05:B7:F0:1B:D4:F9:A7:EA:88
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/gy6hO3sL8Pzu5MsFt_Ab1Pmn6og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.253.0/24
Signature Algorithm: sha256WithRSAEncryption
50:3c:c6:bc:0e:eb:2c:ed:1c:29:0c:61:36:7b:64:b0:fa:30:
b8:46:78:df:cb:12:07:31:d7:10:6a:07:c2:88:89:b1:f3:46:
25:de:ee:58:0b:85:3d:ed:58:5e:47:c6:f1:47:c2:62:46:87:
92:f8:32:70:b3:b1:f9:3a:10:1e:89:39:54:79:df:2e:5c:bc:
a0:9a:42:83:2c:37:f3:45:b9:cd:ed:ef:ef:4f:17:7b:62:7d:
b8:79:05:46:0c:71:e7:d5:b4:bb:88:e8:d4:d5:9e:17:4b:44:
29:80:60:b1:b1:26:da:6a:83:d1:60:1e:a9:5b:18:c9:6a:b2:
ed:63:08:c8:60:3d:f1:67:f7:34:e1:14:12:36:4e:82:8c:40:
6d:a9:fe:44:e7:89:a6:c5:48:a9:b0:7b:f9:b0:3b:1d:c7:bd:
e6:3d:5b:fc:2e:b9:fc:2b:cd:16:8c:80:43:72:6b:fd:bf:6d:
1a:90:22:0c:73:4c:2e:ed:a1:7b:eb:c7:ab:44:32:07:03:60:
9a:0d:73:a4:9d:9b:c2:5d:ac:0c:b1:f2:49:e3:67:01:68:40:
f0:2e:0f:fc:ab:0a:79:f7:2b:b1:a7:6c:48:b2:14:90:86:da:
d8:43:8a:eb:5c:cb:33:1b:64:0f:d0:12:58:61:9a:91:f6:3c:
ae:1d:68:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:26:42 2024 by rpki-client on console-fra.rpki-client.org