Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/B8kN1FcW5TjbYM6oWuZu-iKDK7A.roa
File: B8kN1FcW5TjbYM6oWuZu-iKDK7A.roa (raw, json)
Hash identifier: DiSzXOP2l8CxTvk5D1JIXwMpnrQyuZzSrb5Io28vVa8=
Subject key identifier: 07:C9:0D:D4:57:16:E5:38:DB:60:CE:A8:5A:E6:6E:FA:22:83:2B:B0
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01928480954D504BFBC0EED1C1AD582A4464
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/B8kN1FcW5TjbYM6oWuZu-iKDK7A.roa
Signing time: Sun 13 Oct 2024 06:11:12 +0000
ROA not before: Sun 13 Oct 2024 06:11:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 213.145.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:84:80:95:4d:50:4b:fb:c0:ee:d1:c1:ad:58:2a:44:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 13 06:11:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07c90dd45716e538db60cea85ae66efa22832bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:8e:0c:4b:60:07:49:ba:a4:2a:22:27:ad:
1a:c4:3c:95:55:32:36:af:c5:58:e8:52:06:d1:b1:
4b:2b:d1:73:05:d6:9c:b2:86:fb:9a:db:01:87:6f:
9c:2f:5e:59:15:09:49:f3:0e:aa:78:bc:9a:d4:86:
26:49:24:53:e1:4b:ff:28:b8:8d:05:88:2e:3e:ae:
28:31:da:32:3e:ab:f2:92:e7:c2:e7:07:38:5e:ff:
48:ab:7e:aa:b7:65:fe:d9:c1:80:2e:ab:97:6a:c8:
e0:d3:b1:cd:81:4d:25:a8:0e:e1:35:57:03:82:74:
d7:39:ff:3f:88:4a:d5:0e:cb:cc:22:70:d7:52:e8:
79:da:b4:55:e8:40:d2:37:0e:16:d8:ac:10:10:1a:
9e:4c:14:48:5d:52:7c:1b:94:80:c6:e0:95:64:a4:
e7:5c:dc:07:ee:b2:84:15:cb:fc:a4:c2:47:e7:c6:
a6:6d:db:34:11:a1:8f:17:46:8e:94:29:9f:33:da:
05:ee:fd:05:40:f5:93:11:ab:69:47:00:62:ab:7c:
b2:29:8d:70:30:49:0c:9d:9c:1b:7e:07:55:3f:67:
b2:e4:9d:5d:e8:28:e7:d1:5e:17:f5:32:7b:a4:f6:
f8:6e:b9:91:27:13:ad:ae:82:02:56:e0:80:3e:2c:
bc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C9:0D:D4:57:16:E5:38:DB:60:CE:A8:5A:E6:6E:FA:22:83:2B:B0
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/B8kN1FcW5TjbYM6oWuZu-iKDK7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.70.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3b:0b:28:47:d2:ab:0f:82:a2:67:bc:34:2d:dd:71:e1:2f:
7f:72:ec:66:65:9d:79:2c:ea:28:fc:7b:cc:38:85:cd:6c:b4:
73:2f:64:27:1c:7e:66:64:69:2c:f8:e6:83:29:a4:a9:4f:37:
6e:a5:36:e6:72:03:16:4f:b8:f0:f4:3b:22:9c:0e:f3:92:ef:
eb:d5:f4:0d:8f:32:88:e8:6b:d6:ce:aa:8d:83:72:86:34:55:
41:4a:31:ca:9a:30:14:e6:60:b6:8c:68:6f:51:50:78:ea:7a:
a5:da:84:2a:59:e4:9a:20:45:aa:55:b0:7a:3d:8e:d5:e6:85:
db:b6:11:57:c4:00:0a:37:d8:aa:e8:86:76:a5:30:88:c1:0d:
0c:c5:ba:d0:fd:6d:6c:7d:1f:10:e6:6f:3c:34:39:67:62:20:
f1:00:72:8a:10:0c:c3:be:4f:3f:2c:ef:25:b4:fe:78:3b:59:
eb:a7:37:90:0f:77:10:2c:8f:2f:62:ee:9a:b3:8b:40:d1:47:
0d:4f:c3:91:2b:6f:c3:96:e1:70:70:bc:72:22:b0:ea:47:80:
3a:cc:0e:ac:ab:6a:39:b8:55:38:7c:fb:2b:67:28:14:46:4d:
ea:38:b4:bc:c9:76:e4:f1:32:00:2b:fa:81:39:32:17:70:27:
03:1a:cf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:33:26 2024 by rpki-client on console-ams.rpki-client.org