Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/N7QXhMGNsXQLhHAvswSKNTGlgC0.roa
File: N7QXhMGNsXQLhHAvswSKNTGlgC0.roa (raw, json)
Hash identifier: MxdE66ICviyhO+da/jrEyLc2xfBWC61+11B8dV91c8A=
Subject key identifier: 37:B4:17:84:C1:8D:B1:74:0B:84:70:2F:B3:04:8A:35:31:A5:80:2D
Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial: 018CC3B6D902223F9F9A5462DAAC8B166BBC
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/N7QXhMGNsXQLhHAvswSKNTGlgC0.roa
Signing time: Mon 01 Jan 2024 06:29:49 +0000
ROA not before: Mon 01 Jan 2024 06:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201184
IP address blocks: 213.109.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d9:02:22:3f:9f:9a:54:62:da:ac:8b:16:6b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
Validity
Not Before: Jan 1 06:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37b41784c18db1740b84702fb3048a3531a5802d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:fa:fe:ed:28:88:5e:fa:ef:7d:a5:53:66:
5b:65:69:19:51:b4:37:1e:5c:eb:49:b2:07:d5:fc:
43:e3:10:f0:12:3b:58:39:48:04:e3:1e:07:b8:88:
1e:cd:f3:ce:e1:96:c3:e3:5d:2f:2b:12:c8:29:52:
26:06:42:ca:51:61:a5:30:46:05:20:55:9f:28:6b:
cf:c7:37:e0:f4:e3:b5:d3:96:8a:be:0d:8e:30:cd:
c0:19:d3:68:c0:27:99:3f:45:0a:85:bf:a0:e6:db:
4b:03:29:74:e5:6d:47:df:71:cb:10:92:94:40:c9:
b4:d2:95:97:bd:8f:e1:b1:5b:90:e3:c6:c7:ed:64:
81:3f:66:8f:e0:13:c0:ad:c9:10:c2:29:b9:4b:78:
d0:ee:4d:79:02:8d:18:63:74:f7:3e:cd:b5:d3:e7:
71:e5:45:90:65:3f:0e:d4:2f:c5:ae:fa:86:51:39:
2c:15:28:60:d3:9d:a5:89:0b:2b:66:de:95:69:f6:
01:30:0b:9d:4c:b8:1a:70:0e:a6:aa:b0:e2:0c:33:
ae:b2:3f:d9:a9:c3:bf:65:80:26:d5:c6:db:7d:7d:
26:32:6d:21:7d:3c:64:2f:1b:29:ac:dc:74:8f:e9:
84:23:92:3a:b0:7d:85:03:fa:72:2d:ab:44:57:6f:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B4:17:84:C1:8D:B1:74:0B:84:70:2F:B3:04:8A:35:31:A5:80:2D
X509v3 Authority Key Identifier:
keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/N7QXhMGNsXQLhHAvswSKNTGlgC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.81.0/24
Signature Algorithm: sha256WithRSAEncryption
39:bd:d8:a1:10:9c:ac:25:f8:14:8c:91:0c:15:10:c2:7a:01:
2a:93:e8:b0:5f:ae:28:8e:6a:2d:26:7f:df:dd:f2:19:7c:ba:
e0:52:66:bf:72:c8:c7:27:25:26:81:21:74:4b:c8:d4:d6:e8:
14:67:40:c1:da:99:4a:a5:90:63:c2:4c:20:cc:a5:1a:bf:59:
d6:7a:e8:24:bb:b3:c2:75:e8:99:28:29:c0:3b:2e:63:36:c8:
28:f3:8e:50:82:48:48:d6:b8:ef:48:d0:9f:fa:e8:a8:84:31:
26:7b:c6:1d:00:3a:97:3f:18:63:a2:9c:2b:c1:81:25:c0:73:
29:30:fd:3f:4f:55:78:68:0c:27:bf:16:82:37:bf:ba:85:65:
b0:3c:44:44:3e:63:4d:5c:aa:e1:c1:67:f9:a5:f9:44:7d:48:
3b:78:ba:b8:0f:dd:c0:28:d3:7c:27:6e:84:c0:33:c8:f2:0c:
13:a0:ce:c8:67:4e:b6:34:d0:b0:ee:44:1f:7e:0f:85:50:49:
d0:5b:ee:47:21:e1:2e:7f:64:25:a7:25:4a:26:f9:45:b7:6c:
da:cf:74:01:cb:83:80:7d:22:53:89:1f:c0:7f:a7:cc:b7:5f:
0a:11:fa:a8:d7:83:f5:01:02:8d:41:1b:3e:2d:a2:e7:a8:6e:
d0:4d:9d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 06:38:00 2024 by rpki-client on console-fra.rpki-client.org