Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/M9bh_NmInpfu8hi4NJVko4eq9PU.roa
File: M9bh_NmInpfu8hi4NJVko4eq9PU.roa (raw, json)
Hash identifier: rhHlvfQu/+cSTZ9AvQ1iVduWl6MMTlYiMOs2YSLsG+4=
Subject key identifier: 33:D6:E1:FC:D9:88:9E:97:EE:F2:18:B8:34:95:64:A3:87:AA:F4:F5
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 018DA7566A68A5B245F34EB8AD882110A72C
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/M9bh_NmInpfu8hi4NJVko4eq9PU.roa
Signing time: Wed 14 Feb 2024 11:17:54 +0000
ROA not before: Wed 14 Feb 2024 11:17:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212887
IP address blocks: 213.192.113.0/24 maxlen: 24
213.192.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:56:6a:68:a5:b2:45:f3:4e:b8:ad:88:21:10:a7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Feb 14 11:17:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33d6e1fcd9889e97eef218b8349564a387aaf4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:c1:b8:ad:4a:76:b8:9d:ab:16:9d:9f:28:
e6:eb:b7:7e:24:e0:60:2e:25:4a:45:e4:35:7b:e4:
26:c8:54:86:77:98:83:c2:c0:7c:ff:41:a7:1d:ac:
b9:c7:3d:a3:67:f3:48:f6:74:21:4d:92:4c:3a:af:
5b:94:10:83:91:07:b4:71:5c:a3:f2:fb:49:b7:b8:
11:b3:50:ba:af:11:ff:7a:61:57:10:6a:37:95:c0:
b8:70:42:74:e8:e9:97:93:aa:73:c4:b6:ad:b5:ea:
3b:a9:ed:39:6c:b2:3c:16:96:07:e6:84:ff:5a:79:
9b:ee:4e:c3:34:e3:88:60:83:81:17:40:eb:d7:15:
b6:fa:03:a4:70:47:d8:b0:c2:4a:5c:10:72:4c:e4:
e9:86:ec:74:32:6c:44:aa:07:4e:e1:1c:3e:df:a4:
bf:10:ea:3c:93:f1:7c:11:df:a4:8b:5c:3a:92:b6:
05:b3:9e:02:4f:af:a8:97:5e:a5:21:32:9c:4d:f0:
cf:bc:8e:15:4f:13:e7:24:01:70:7e:05:2d:8a:bd:
c3:62:77:a4:50:3a:b3:dd:47:92:3c:f2:e8:db:bc:
1b:79:a0:9f:b7:dc:3f:ed:cb:db:e2:9a:65:6e:2d:
bf:6f:81:42:f5:6a:b4:7f:07:4b:29:48:8c:4b:e4:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D6:E1:FC:D9:88:9E:97:EE:F2:18:B8:34:95:64:A3:87:AA:F4:F5
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/M9bh_NmInpfu8hi4NJVko4eq9PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.113.0-213.192.114.255
Signature Algorithm: sha256WithRSAEncryption
74:5f:96:d9:25:3d:32:b6:fe:2c:ae:32:de:cd:b0:bb:74:16:
96:07:34:5d:6b:17:16:e9:23:e5:06:17:d9:eb:1c:19:b7:4c:
6d:32:c8:55:fb:32:69:01:40:5c:c9:80:1a:94:27:01:5f:1b:
b5:ae:07:2a:c9:45:b5:c6:08:e9:23:fb:c6:d7:66:98:75:1c:
4e:9d:85:e5:a0:1c:76:e1:44:3e:f3:96:c2:a3:38:63:db:a6:
ec:ee:3a:38:05:37:5a:c1:4d:5c:5d:50:fe:0c:86:35:61:eb:
e1:7a:3c:d4:29:8b:12:ed:4c:95:29:90:1d:7f:50:0e:46:82:
37:09:c2:d3:0f:e6:9a:b5:e0:bc:cf:6f:f8:b9:1d:69:ac:85:
72:4d:f4:46:1c:ea:19:57:5a:fc:54:2a:f5:e8:ea:78:a1:a8:
95:b3:3a:d8:e3:5d:a4:79:68:33:d8:cd:7c:83:30:dc:f2:51:
ef:14:3c:76:be:5a:9e:72:09:12:ff:e2:c8:ed:fc:2a:61:c9:
47:0f:7e:35:d1:ce:f8:a1:17:19:17:06:ec:13:7b:58:ce:0d:
ff:2b:57:04:87:b4:72:78:b2:be:d2:e5:e7:bf:d3:2d:c0:11:
0a:2b:96:8f:93:67:aa:76:21:b5:b0:6d:67:6c:20:af:2f:4f:
2a:16:b5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:47:40 2024 by rpki-client on console-ams.rpki-client.org