Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/sktTO6TxTJNHj8YITDuUP4nXBi8.roa
File: sktTO6TxTJNHj8YITDuUP4nXBi8.roa (raw, json)
Hash identifier: 7UlCFhheUpJBtMykK/4HrXLHqSG3QPH8LnXusk6yp0w=
Subject key identifier: B2:4B:53:3B:A4:F1:4C:93:47:8F:C6:08:4C:3B:94:3F:89:D7:06:2F
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0190ED70675DB2F2DD72727DC336E7806DDA
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/sktTO6TxTJNHj8YITDuUP4nXBi8.roa
Signing time: Fri 26 Jul 2024 05:08:04 +0000
ROA not before: Fri 26 Jul 2024 05:08:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135402
IP address blocks: 213.145.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ed:70:67:5d:b2:f2:dd:72:72:7d:c3:36:e7:80:6d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 26 05:08:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b24b533ba4f14c93478fc6084c3b943f89d7062f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:87:8f:1e:44:92:06:ec:8e:9d:ff:8b:92:b3:
cf:17:9d:f6:39:d5:b0:08:fa:5d:3c:67:95:47:8a:
a4:3d:47:dd:7c:32:ef:ad:47:3c:71:ae:fd:85:6d:
8a:f2:82:2e:60:05:13:5f:61:fd:7d:01:c9:9f:de:
0a:7f:26:9f:c4:53:94:1a:66:2b:50:7d:4f:66:3d:
d0:7d:27:de:4e:63:f9:89:ed:65:89:18:65:69:a4:
3c:e8:08:8c:f0:3e:1e:c2:32:e0:8c:f0:6b:88:f2:
0d:32:13:98:b3:e7:6e:96:ce:6f:96:ac:88:f0:af:
2c:1c:a6:c7:90:66:6d:02:a8:b3:e7:70:72:3e:87:
25:33:0b:70:8e:e8:fd:7a:e4:29:8f:be:04:19:d5:
7b:d0:03:8c:85:48:41:2c:fc:c9:e1:eb:72:42:7e:
85:b7:1a:fd:0a:b5:7a:8d:bd:75:63:51:c9:37:26:
f7:f3:86:af:d5:45:c9:b3:bb:6c:4b:02:f2:6f:2b:
d7:61:25:11:80:27:5d:f1:76:88:3e:bc:0c:20:c0:
e4:7b:c7:a2:fe:60:53:ea:15:b1:63:77:44:6a:98:
85:ac:2b:0a:3b:e1:a8:3a:8d:ab:89:20:c3:40:aa:
ff:01:42:e4:55:2d:96:1a:75:3f:1b:65:47:06:42:
c7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4B:53:3B:A4:F1:4C:93:47:8F:C6:08:4C:3B:94:3F:89:D7:06:2F
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/sktTO6TxTJNHj8YITDuUP4nXBi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.67.0/24
Signature Algorithm: sha256WithRSAEncryption
f2:d8:19:04:37:a8:f8:41:d4:26:e1:78:8f:d0:b0:5c:51:17:
c7:df:a7:87:18:d6:08:ba:ce:d8:bf:21:01:a9:82:b4:81:40:
c0:19:45:b0:e2:d7:40:27:7e:42:52:c4:68:43:88:18:1b:01:
be:04:02:51:56:06:6e:ae:6e:ad:a0:38:95:75:0c:53:c3:f1:
36:01:e3:df:05:d4:90:0c:4f:18:a2:5d:b5:de:b1:5f:b9:87:
bd:b3:b7:00:61:d9:4a:ab:a2:93:7e:70:20:35:a3:26:ce:d7:
4a:93:8f:95:68:1e:cb:fd:35:d0:a3:4a:b7:70:f5:a1:60:36:
92:81:5c:00:21:8c:a2:e2:e8:7f:61:da:0c:b2:0f:f2:ee:b8:
02:68:c0:31:3b:8c:f2:f2:4d:1a:d1:7c:aa:dc:13:ca:82:a3:
0e:5d:2f:d1:62:1e:11:d5:17:99:22:2a:b8:80:82:31:27:a2:
a6:fa:a3:40:b3:cf:9b:b1:22:76:0e:90:7b:b5:73:ea:52:93:
73:8a:39:ea:db:b0:20:d9:c0:73:e4:50:b5:a9:de:8c:97:d8:
92:45:68:fe:c3:47:17:8c:94:5e:a3:6a:4a:9b:82:9e:73:45:
52:c1:e4:0d:7f:57:2a:70:de:33:cd:df:89:fc:de:de:40:8a:
aa:ee:12:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:13:05 2024 by rpki-client on console-fra.rpki-client.org