Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ra12yTY2gjwkWdQYx1zOzmQdhkQ.roa
File: ra12yTY2gjwkWdQYx1zOzmQdhkQ.roa (raw, json)
Hash identifier: so4uYbIzkwm2J4YXDGo1z5tcLO62UX7MElHjvew5FzU=
Subject key identifier: AD:AD:76:C9:36:36:82:3C:24:59:D4:18:C7:5C:CE:CE:64:1D:86:44
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0192D3F6C25901B5DC1CD502118E241C3340
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ra12yTY2gjwkWdQYx1zOzmQdhkQ.roa
Signing time: Mon 28 Oct 2024 16:30:17 +0000
ROA not before: Mon 28 Oct 2024 16:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 213.220.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d3:f6:c2:59:01:b5:dc:1c:d5:02:11:8e:24:1c:33:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Oct 28 16:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adad76c93636823c2459d418c75ccece641d8644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:b2:b7:22:9e:88:c8:e0:ec:73:06:0d:99:
c9:f7:36:88:c6:a7:60:22:02:63:c5:7b:20:1f:79:
b9:12:5a:27:8a:49:5d:ed:22:a6:b8:42:bc:69:8e:
63:19:15:c7:33:5c:d6:84:92:55:7f:43:f7:2b:9f:
be:fd:fb:8c:3a:38:b3:10:ca:ec:78:ac:ad:8f:a2:
e8:07:c5:36:71:de:9d:8a:31:bb:95:e1:69:e0:89:
45:82:6e:65:c2:3c:57:b8:55:97:28:3b:f4:95:0c:
00:63:1f:e3:f9:fd:01:e8:52:15:c7:57:12:51:a7:
42:50:ab:1f:fd:38:13:1b:7d:7f:cc:6a:05:27:35:
bc:38:7d:fb:80:42:7e:a4:bc:5d:62:c4:b1:43:88:
cb:79:28:ed:92:2e:d3:30:29:44:13:3f:cb:5e:e3:
56:b4:fa:f1:28:0c:8b:23:9b:76:b2:7e:0b:2a:14:
83:49:40:8e:a4:eb:11:73:c3:83:04:d9:5c:10:3b:
f5:1b:82:7a:b0:3f:40:2e:70:20:7d:95:1a:33:e7:
1c:54:75:e1:ce:ec:e5:a2:27:0b:58:80:44:aa:02:
0a:94:f6:95:67:c6:b8:7b:ad:ea:52:5d:b0:a0:a9:
57:eb:bc:af:fb:4e:19:56:99:9f:df:84:5d:ea:0b:
2f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AD:76:C9:36:36:82:3C:24:59:D4:18:C7:5C:CE:CE:64:1D:86:44
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/ra12yTY2gjwkWdQYx1zOzmQdhkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.58.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3c:49:00:9f:d1:5c:34:4d:7a:bc:a7:db:46:67:26:a3:57:
ad:15:f4:e4:33:83:fb:1c:1b:11:63:0b:d1:34:f6:97:47:5b:
29:48:02:07:73:fd:0b:ce:66:4a:9b:b6:40:07:d9:1f:ce:13:
41:1f:bb:12:75:cc:5f:0a:41:d6:8d:45:a9:f2:8e:90:08:b0:
65:7f:3e:4a:9b:23:9a:39:5f:1e:6c:71:b1:a0:03:2b:ab:f2:
79:42:6f:35:01:c7:84:63:41:ee:3c:9a:1d:ab:df:8b:a5:06:
4f:6f:ec:0c:e6:94:45:b1:2e:3e:f9:d4:b5:a5:8f:0f:23:37:
fe:c9:70:8c:85:cc:41:71:10:19:0c:31:81:cb:60:f7:41:24:
c3:3c:11:d6:1f:a6:1a:f8:76:e6:7e:d4:79:df:1d:10:92:9f:
53:12:c6:7b:d1:00:3b:a2:d9:9e:1e:8d:93:6a:27:7a:b2:f1:
f1:cd:76:46:12:76:d7:ad:e5:06:92:2c:6f:cc:70:e2:db:2d:
21:13:4e:3a:0b:df:0d:cf:7a:b8:74:ce:b4:22:61:55:b4:49:
c6:18:8c:00:5a:67:13:ba:63:17:95:59:b7:1e:c7:fb:4e:1b:
8d:f7:b3:14:3c:48:b5:e4:e7:3d:f9:de:a7:9c:4b:b3:ab:82:
db:39:ca:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:52:27 2024 by rpki-client on console-fra.rpki-client.org