Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/tJCPXYentc8qfQVb0C98QF4xDx8.roa
File: tJCPXYentc8qfQVb0C98QF4xDx8.roa (raw, json)
Hash identifier: 9jANFZjA6+DXhPBzmgqJCzv4sY+1e10nhIOvUgUT/8E=
Subject key identifier: B4:90:8F:5D:87:A7:B5:CF:2A:7D:05:5B:D0:2F:7C:40:5E:31:0F:1F
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01910F890907FED0FE8D14B29D207AD48B0B
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/tJCPXYentc8qfQVb0C98QF4xDx8.roa
Signing time: Thu 01 Aug 2024 20:02:04 +0000
ROA not before: Thu 01 Aug 2024 20:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 213.145.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0f:89:09:07:fe:d0:fe:8d:14:b2:9d:20:7a:d4:8b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Aug 1 20:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4908f5d87a7b5cf2a7d055bd02f7c405e310f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:2d:1c:ef:14:8e:63:fd:7c:cd:d8:84:3c:
b4:94:bc:2f:72:94:88:37:37:87:f9:a6:17:f4:89:
5f:d5:0c:e5:ac:ab:7d:fc:9c:5e:a4:ea:77:30:2d:
d3:fd:b5:75:b0:b1:a8:ac:a9:14:5c:5f:6b:fb:61:
6f:77:ae:b3:f0:6b:9f:f2:5e:4b:c9:a5:27:52:c8:
f5:75:52:6b:41:6e:e1:53:18:5f:dc:80:3c:94:21:
f7:3d:6d:e2:6a:d9:f0:c6:b1:a8:33:75:54:25:b7:
8a:bc:87:2a:06:4c:ac:31:42:aa:4f:7a:02:2c:0d:
64:18:f1:ad:31:69:cb:72:cd:80:2d:f7:b4:10:24:
3d:78:c6:af:3c:05:37:c8:d8:33:48:7b:45:ef:18:
85:bb:33:41:e1:a3:39:5c:71:8e:b7:ae:44:42:71:
e6:47:48:42:7e:db:26:4c:98:5d:29:c4:af:cd:98:
9d:7e:53:b7:f8:5b:54:f6:65:23:a8:33:0f:6e:b4:
49:ac:25:27:f2:a6:9f:72:1d:1e:5b:b3:55:9b:f2:
5a:80:25:fe:c5:09:b5:61:a0:8a:0d:42:a1:77:8c:
42:d9:ad:45:4b:2d:da:a5:5b:08:9a:34:b1:a2:33:
4f:20:e5:6c:0f:3a:24:b9:30:aa:d2:bd:5a:ea:3e:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:90:8F:5D:87:A7:B5:CF:2A:7D:05:5B:D0:2F:7C:40:5E:31:0F:1F
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/tJCPXYentc8qfQVb0C98QF4xDx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.69.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:4a:7c:13:3b:22:ac:69:28:66:9a:ce:83:55:43:6d:69:be:
a9:25:c4:af:ad:e2:64:75:80:ab:70:ba:28:ac:db:8a:31:51:
0d:d1:e3:60:4e:62:6d:7e:e3:6c:3c:95:9d:a6:6d:ca:8c:32:
01:cc:3f:78:e5:d6:f2:86:f1:54:f4:9a:b5:9e:66:d5:e0:a0:
71:b5:5c:fe:77:f9:67:b2:99:a9:93:70:0d:f9:fd:46:a0:8c:
46:24:e7:36:0c:56:39:1d:4e:78:73:2c:6c:f2:09:54:73:ae:
6b:e3:48:07:11:4a:da:a7:17:96:4c:1c:9f:ba:08:f4:a5:78:
53:7e:48:6c:3a:57:b0:6e:33:5f:0c:d5:85:a3:29:c2:c9:87:
c4:58:1f:40:0a:cd:fd:36:5c:40:6a:5e:09:c0:cc:cc:a3:8b:
48:f0:68:7e:82:70:57:c8:b7:c9:90:f3:1e:2f:a8:66:42:85:
ea:5e:9e:79:0f:ff:52:c0:9d:9b:28:f2:95:0c:e9:d1:20:82:
1b:de:84:8d:e4:76:af:58:b8:db:d7:a0:af:55:14:75:1e:f9:
f9:8f:4e:36:c2:df:e5:42:2e:2d:f8:c3:99:7a:19:fc:e9:2c:
ce:ca:bf:90:0a:2e:62:24:55:7e:66:a6:56:b7:80:da:46:d8:
64:a5:84:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:53:32 2024 by rpki-client on console-fra.rpki-client.org