Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0W2Dt34LGJ6ZkLSzYLcvKokiGo4.roa
File: 0W2Dt34LGJ6ZkLSzYLcvKokiGo4.roa (raw, json)
Hash identifier: QtnwWL/teNoo07bmIVXQhMVNDUa51aCn6rQtozyBEkQ=
Subject key identifier: D1:6D:83:B7:7E:0B:18:9E:99:90:B4:B3:60:B7:2F:2A:89:22:1A:8E
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018FE2481CD69A7218BCE02163202F70A3D3
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0W2Dt34LGJ6ZkLSzYLcvKokiGo4.roa
Signing time: Tue 04 Jun 2024 08:05:27 +0000
ROA not before: Tue 04 Jun 2024 08:05:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18214
IP address blocks: 212.36.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e2:48:1c:d6:9a:72:18:bc:e0:21:63:20:2f:70:a3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jun 4 08:05:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d16d83b77e0b189e9990b4b360b72f2a89221a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:8c:2b:8d:72:b7:b4:8f:00:d2:48:f3:fc:
e2:66:1f:23:cd:ad:ec:d8:b6:49:79:8c:9f:a8:0a:
a8:bd:f1:50:a0:d2:63:1a:ef:2f:fa:46:fd:be:94:
59:ca:7e:df:3d:ce:1c:38:d6:14:7a:e7:f1:fe:a4:
ee:29:c1:b2:ac:c5:fa:3c:cd:6e:1e:73:01:e7:1e:
be:ca:50:d2:61:1d:16:ea:c3:e5:0e:0a:af:15:2f:
05:32:f0:15:cb:42:67:a5:49:5c:b5:04:c5:bc:88:
de:1f:8c:82:d2:83:42:7f:8b:1a:e6:f1:b1:53:49:
6f:a5:ff:d9:05:f8:15:e7:49:85:b4:cd:29:48:14:
d2:a1:d5:14:09:af:6d:26:70:a3:db:ce:b2:9e:a9:
31:06:fa:5f:a9:ca:bb:a5:ec:1f:cd:8e:33:86:58:
b9:8b:5a:8a:e2:bf:cf:e2:3b:fe:ed:51:e1:0c:1b:
c2:5f:45:3b:62:79:a6:6b:c0:90:80:6d:0d:ad:7d:
c2:bd:7e:4f:af:f7:92:3c:32:8a:e9:bd:6b:91:18:
fd:89:38:b5:65:e5:d0:11:83:6a:69:0c:eb:3c:b9:
2b:77:c3:2d:5f:84:0d:d5:26:db:38:4b:ca:e4:84:
08:f4:8b:92:c4:cf:de:0e:4a:7d:70:fb:8d:60:19:
0d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6D:83:B7:7E:0B:18:9E:99:90:B4:B3:60:B7:2F:2A:89:22:1A:8E
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/0W2Dt34LGJ6ZkLSzYLcvKokiGo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.36.25.0/24
Signature Algorithm: sha256WithRSAEncryption
88:93:61:0a:3a:54:f3:2e:ab:9f:e4:26:55:93:64:9f:01:00:
0c:2d:75:56:10:d6:96:75:6b:0e:ff:6a:63:09:27:34:2b:16:
9e:2a:d5:de:62:84:6b:99:42:75:1a:6d:01:a9:f6:ab:fb:44:
79:be:0f:20:be:ee:fe:29:55:4e:c3:d5:e2:55:af:c8:6e:84:
41:cc:bf:12:e7:f3:10:a9:3c:70:c3:ab:1a:51:b3:b6:9a:35:
50:d3:41:00:9c:b2:12:5d:ad:01:0f:1f:91:e6:ce:fb:b2:8d:
a3:3b:35:37:01:4a:22:b2:b5:98:7a:f6:08:6b:da:94:90:ba:
2f:5c:4f:30:e4:c1:72:86:96:f8:66:33:0c:72:b9:d8:4a:7e:
b7:a4:a4:9d:c8:ed:a2:64:3f:d1:15:28:05:56:84:90:81:66:
39:da:77:53:b3:85:ee:6b:db:d9:cd:1f:51:3a:12:75:d5:07:
04:93:08:f3:fa:b3:5a:2a:de:25:28:09:01:d5:0f:5d:44:df:
29:5e:ad:2d:84:2d:dd:fc:13:28:00:cc:34:00:f2:e2:91:21:
1f:65:21:9a:b2:19:43:e6:00:51:93:4a:16:c5:29:eb:08:d4:
f4:b3:6c:b0:f1:2c:c7:23:2c:01:71:0c:4c:61:16:16:59:0b:
c0:07:03:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:43:21 2024 by rpki-client on console-fra.rpki-client.org