Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/rZ7xUgNck1yP178EFkRc59qD0Q4.roa
File: rZ7xUgNck1yP178EFkRc59qD0Q4.roa (raw, json)
Hash identifier: mIx7lI9xi457nYIE2xvvA43jVV+dMX7ZUnBmk1Cj75A=
Subject key identifier: AD:9E:F1:52:03:5C:93:5C:8F:D7:BF:04:16:44:5C:E7:DA:83:D1:0E
Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial: 018CC26D150958390A3B8AA31B21BF8771EB
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/rZ7xUgNck1yP178EFkRc59qD0Q4.roa
Signing time: Mon 01 Jan 2024 00:29:37 +0000
ROA not before: Mon 01 Jan 2024 00:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17350
IP address blocks: 204.13.56.0/22 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:15:09:58:39:0a:3b:8a:a3:1b:21:bf:87:71:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Validity
Not Before: Jan 1 00:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad9ef152035c935c8fd7bf0416445ce7da83d10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f4:06:5f:f3:73:05:c0:b7:e2:6e:d4:da:ae:
be:70:14:9c:78:ae:fb:41:9f:18:df:19:3f:fb:4a:
40:cd:7f:0a:9d:cf:fc:dc:63:82:b1:d0:0d:72:18:
65:bc:0b:a6:89:34:2b:7d:0a:f0:03:4b:8b:c8:d8:
1a:91:c1:c1:a7:2b:02:f7:37:5e:36:dd:4e:70:df:
3e:77:29:af:36:92:01:b8:18:bc:b7:98:e3:d0:ed:
2a:cb:b1:82:73:06:73:53:32:82:6b:42:ef:01:1e:
17:95:f9:f5:e1:28:fd:55:84:39:a0:2a:04:5f:ed:
f5:6c:8d:b5:8b:bc:b0:4b:57:bb:31:14:69:5a:3a:
93:5d:5a:85:85:c8:d1:cb:8c:ef:3b:77:3f:7c:a7:
08:db:a5:53:f7:b3:61:a4:eb:66:f0:64:3a:a1:da:
33:ad:d5:7c:4e:6d:98:87:3f:70:2d:a5:c4:ac:4a:
9f:14:61:90:c0:4d:5a:aa:f8:ba:a7:a7:7a:1c:55:
90:73:1b:03:9f:9e:4f:5b:c6:14:d0:a8:9d:06:c4:
33:2b:df:d5:4d:74:34:5c:5f:88:79:f2:93:a1:3a:
cc:ca:55:68:99:52:c5:72:1c:13:80:1e:3f:83:f0:
d9:9d:9b:ff:24:0b:2b:dd:a3:22:21:fe:a5:f6:78:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9E:F1:52:03:5C:93:5C:8F:D7:BF:04:16:44:5C:E7:DA:83:D1:0E
X509v3 Authority Key Identifier:
keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/rZ7xUgNck1yP178EFkRc59qD0Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.13.56.0/22
Signature Algorithm: sha256WithRSAEncryption
65:f6:f4:68:9f:39:13:3c:52:d7:99:c1:c3:7f:4f:76:05:59:
62:6d:cb:c4:4b:25:26:7a:d9:21:70:cb:af:25:74:3f:0e:76:
f7:fd:db:0e:95:2d:7a:e3:49:3e:44:72:59:65:57:9c:b8:bc:
af:d9:70:8d:7f:08:f5:c8:cd:6b:00:6d:78:1c:69:c9:d0:79:
5c:3a:ea:56:93:d7:fa:8d:3f:58:6d:07:c7:18:89:9c:97:4a:
a6:66:75:95:fc:ab:4d:23:4c:8d:69:5a:2f:77:45:4a:90:76:
91:a4:ef:64:6c:04:e1:32:22:d4:c8:0b:40:e0:45:56:69:d7:
0d:6e:ba:0c:af:00:0d:de:f1:fa:87:a6:8f:bb:30:7b:64:15:
3d:18:42:0b:79:ca:fc:56:5b:9b:f1:9c:3d:0d:b6:d4:95:42:
66:a0:f8:7c:44:17:21:a6:bd:6a:fe:48:2c:2e:05:fe:ac:4e:
4c:c7:48:9e:c9:5d:92:b3:e7:9f:27:2a:dd:f2:28:16:e5:4b:
07:97:cc:f3:e7:0d:bb:97:61:fd:96:81:62:d3:68:43:bd:cb:
47:02:e8:ff:6d:b4:90:1f:c1:4c:cb:af:5d:6f:c0:ab:b4:b1:
a1:38:9a:4b:84:9c:ae:58:ba:4c:fc:d5:fe:f9:fd:9d:6f:ac:
cb:4e:d1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:02:51 2024 by rpki-client on console-fra.rpki-client.org