Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/B0ckMvjCQjEeplhT6t4X0foApLU.roa
File: B0ckMvjCQjEeplhT6t4X0foApLU.roa (raw, json)
Hash identifier: O/PQXBukE9k04M9ezvt3OCAKRteUouuLJ/5PB3Ipp/Q=
Subject key identifier: 07:47:24:32:F8:C2:42:31:1E:A6:58:53:EA:DE:17:D1:FA:00:A4:B5
Certificate issuer: /CN=afba10b0a676d3e1fab56528430fac891a083652
Certificate serial: 018CC6B7DA313A4473993DF9A3E375207AD5
Authority key identifier: AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/B0ckMvjCQjEeplhT6t4X0foApLU.roa
Signing time: Mon 01 Jan 2024 20:29:46 +0000
ROA not before: Mon 01 Jan 2024 20:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28900
IP address blocks: 213.190.240.0/20 maxlen: 20
213.190.224.0/21 maxlen: 21
213.190.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:da:31:3a:44:73:99:3d:f9:a3:e3:75:20:7a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afba10b0a676d3e1fab56528430fac891a083652
Validity
Not Before: Jan 1 20:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07472432f8c242311ea65853eade17d1fa00a4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:af:55:65:6a:e0:f6:0c:7b:a9:ea:d9:d5:
37:2c:05:82:9f:93:82:29:86:98:c1:49:f1:40:87:
78:30:75:33:6b:c9:12:95:f1:e3:ec:d6:b7:aa:db:
6d:9e:6a:30:a0:9a:e9:8f:82:a3:f1:78:43:ca:f6:
60:23:a6:54:82:8f:b5:36:f8:fc:bd:59:b5:77:4c:
f9:04:c3:60:63:85:02:d5:7e:27:ca:32:98:89:81:
85:5a:52:4c:9a:cd:65:30:1b:11:dd:c2:1e:35:26:
fc:e6:83:51:5a:d3:e8:15:6b:6d:f0:b3:6b:82:23:
40:67:48:ca:66:0a:ae:a6:4e:b0:8f:f7:cd:8d:b1:
6b:d5:58:e7:ac:98:ac:62:7e:65:4e:b4:b0:14:44:
ac:26:85:e1:17:0c:49:80:76:fb:63:4b:26:d0:9d:
e2:15:27:69:7a:38:c3:e6:a3:68:3d:fb:6b:c6:99:
31:a6:cf:31:3f:ac:cf:fa:a0:1e:58:40:83:32:a9:
4b:32:83:42:ee:c4:60:94:5b:fc:94:e8:29:36:60:
2f:78:ac:b5:23:e1:bc:96:b9:2a:91:4c:6f:25:8b:
fe:a0:e7:fe:28:23:63:94:35:b0:bd:f4:d7:18:81:
01:fd:ed:79:89:19:5f:d5:8e:f6:af:2e:36:79:40:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:47:24:32:F8:C2:42:31:1E:A6:58:53:EA:DE:17:D1:FA:00:A4:B5
X509v3 Authority Key Identifier:
keyid:AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/B0ckMvjCQjEeplhT6t4X0foApLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.224.0/19
Signature Algorithm: sha256WithRSAEncryption
52:87:60:1f:1e:11:9b:12:e0:86:7a:a1:58:f0:eb:44:84:61:
be:a7:1f:b5:36:79:a8:03:b3:07:37:d3:58:7e:ef:5a:f9:13:
e2:46:97:49:55:4a:b2:7a:39:8a:cd:a6:56:a9:c0:57:77:38:
cb:48:00:b0:6c:8b:82:74:41:8c:bc:4f:0a:1f:d6:e8:53:50:
1d:0e:02:e2:92:13:dc:2b:e1:5f:5d:51:07:b0:7e:30:ae:80:
1b:78:1a:3a:67:38:2a:15:4a:29:90:b6:46:80:94:33:55:6d:
45:6d:2b:fd:88:91:e7:ca:e5:4a:da:49:e5:68:8a:63:c9:3c:
75:ad:c5:b1:1a:c0:f8:94:f6:6a:a9:e2:b6:87:86:17:fa:49:
12:7a:ab:87:c3:d7:12:1e:ec:f7:db:31:03:2b:c7:5f:15:21:
ac:56:fc:34:46:e1:ad:99:0c:d9:42:43:2a:28:d7:16:5a:b6:
5c:73:fa:51:81:e1:b9:bc:9a:eb:20:1a:e7:06:b6:67:e2:64:
9e:84:27:63:eb:69:83:86:6b:c3:78:82:15:26:2c:de:58:f7:
c6:bc:3a:25:39:5f:70:28:73:bd:4f:8e:b2:df:07:9a:ab:c2:
11:d4:1b:8d:e0:01:a3:f1:5b:0c:09:46:91:4e:b2:12:13:85:
70:5e:de:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:36:03 2024 by rpki-client on console-ams.rpki-client.org