Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/z9p0pmU8e27DZXNTaLkfZwIsI3M.roa
File: z9p0pmU8e27DZXNTaLkfZwIsI3M.roa (raw, json)
Hash identifier: uuhaBw+5owZv0yvCWTgiVO4Nxj2HBejqAkJRFGx2aj4=
Subject key identifier: CF:DA:74:A6:65:3C:7B:6E:C3:65:73:53:68:B9:1F:67:02:2C:23:73
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 019301254AF3EE2FB26A96B3EB270DFA1BA1
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/z9p0pmU8e27DZXNTaLkfZwIsI3M.roa
Signing time: Wed 06 Nov 2024 11:04:01 +0000
ROA not before: Wed 06 Nov 2024 11:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 213.21.238.0/24 maxlen: 24
213.21.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:25:4a:f3:ee:2f:b2:6a:96:b3:eb:27:0d:fa:1b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Nov 6 11:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfda74a6653c7b6ec365735368b91f67022c2373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:ec:65:3c:89:74:3e:66:ed:2d:4d:4d:d2:
6f:3e:92:c6:fc:e9:27:7e:35:24:6c:14:f8:d5:ff:
4d:7b:f5:a2:b5:30:22:99:22:10:94:14:e5:2a:da:
03:38:44:05:cd:42:ee:f0:a8:6a:55:2d:6f:ca:ac:
10:d9:d4:58:77:f1:7a:39:22:5b:0e:fe:93:dc:d6:
b2:e4:d7:15:6a:bc:bc:0b:78:bf:88:4d:c4:84:0c:
ad:86:04:05:95:02:fb:6d:8c:da:f0:e9:70:6e:f1:
dd:1f:d7:d8:64:b2:a9:f6:71:a8:d9:e8:ec:52:b1:
ec:67:19:85:0c:fa:d5:9a:e8:77:71:d3:c0:52:b5:
ce:97:96:8a:43:87:64:3f:e2:56:f6:db:20:5c:ca:
f2:c8:c4:34:1b:da:21:f9:5a:de:96:4a:f3:79:02:
b0:8c:bb:dd:ce:b7:d2:b5:63:ec:91:c0:f0:16:e6:
84:48:83:a5:57:0b:60:80:70:c1:2b:9d:2b:cd:37:
23:84:0b:0f:22:0c:1f:8d:29:7b:92:37:5a:f3:3c:
5d:63:10:ba:83:06:25:28:22:f4:f8:b7:09:d7:a0:
f3:68:a5:1f:1b:fa:83:5c:a5:fb:88:36:f6:26:34:
28:38:6b:5f:96:06:76:db:83:84:ce:af:6e:e1:33:
5c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DA:74:A6:65:3C:7B:6E:C3:65:73:53:68:B9:1F:67:02:2C:23:73
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/z9p0pmU8e27DZXNTaLkfZwIsI3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.238.0/24
213.21.248.0/24
Signature Algorithm: sha256WithRSAEncryption
39:33:bd:bf:fb:8c:a8:00:a1:2c:24:81:3b:61:bc:7f:bc:0e:
e9:25:97:1a:2b:93:24:dd:ea:5d:a8:80:81:1a:66:c2:fe:56:
69:1c:15:10:6b:d6:f9:09:03:14:d4:40:bf:5e:4d:c2:93:79:
f3:f0:96:9c:8c:0c:c1:75:47:ad:89:9c:82:54:51:08:ba:89:
f9:f8:96:25:4e:9c:8e:bb:00:a2:e9:3d:11:0f:1e:63:35:b5:
7d:54:d8:04:75:8e:3a:23:a0:f0:32:c1:2f:fe:6c:0f:37:67:
88:11:13:ef:cb:f8:c5:13:5b:98:aa:a7:c4:17:21:eb:3f:d9:
6e:8c:16:4a:a6:68:f0:2c:93:96:63:3c:a7:f2:da:f8:6b:2f:
e5:bc:7e:01:5b:b0:0c:ef:87:50:b6:ae:ae:6b:66:ba:e2:6b:
66:d8:16:22:08:3b:b9:2d:11:1f:24:bd:3b:5c:e4:9e:be:aa:
2f:6d:24:6b:d2:0a:a4:4a:2c:db:fa:36:2b:ec:ff:b4:6e:cd:
e8:a5:91:d5:1f:79:08:7b:e1:5c:39:24:5e:af:92:cb:dc:d0:
6a:cb:8e:f3:22:7c:5a:6d:65:ae:bd:7b:bb:26:a9:1a:35:2e:
56:5d:cd:07:4f:81:9b:d0:85:f9:62:3f:8c:88:66:f5:ee:00:
34:9e:53:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:31:20 2024 by rpki-client on console-ams.rpki-client.org