Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/j6UOSc_ktXRVk5nAhgjmfllhkik.roa
File: j6UOSc_ktXRVk5nAhgjmfllhkik.roa (raw, json)
Hash identifier: H4tS0PmN9Wws0UXcCN6xz1HWfFM5TmvSSR66VGgaVQg=
Subject key identifier: 8F:A5:0E:49:CF:E4:B5:74:55:93:99:C0:86:08:E6:7E:59:61:92:29
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 018CC3B6FA375D90D5646AEB298FD36583D6
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/j6UOSc_ktXRVk5nAhgjmfllhkik.roa
Signing time: Mon 01 Jan 2024 06:29:57 +0000
ROA not before: Mon 01 Jan 2024 06:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211496
IP address blocks: 193.22.12.0/24 maxlen: 24
185.195.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:fa:37:5d:90:d5:64:6a:eb:29:8f:d3:65:83:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Jan 1 06:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fa50e49cfe4b574559399c08608e67e59619229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:0d:56:ae:1a:9a:7c:3d:e8:48:f3:7c:6d:
98:19:6f:88:80:c5:24:4c:ad:d2:c2:29:0e:06:e2:
5c:26:81:18:a6:fd:af:a4:e3:4b:40:30:e8:e3:15:
2d:49:ff:46:7d:b0:56:66:21:bd:e9:42:86:fb:e2:
66:c8:1b:cf:2a:59:77:0f:cf:90:87:e5:a5:92:b3:
42:78:e6:6f:8a:83:4f:cc:04:8b:46:18:d5:40:9f:
f2:bc:b1:0b:3a:f7:22:5f:19:4a:1b:ba:27:20:09:
f3:37:44:34:be:a4:0f:44:c7:48:68:d4:39:9e:cb:
82:48:5d:f6:e5:45:4b:81:48:d4:22:b8:ab:f2:93:
fe:a0:0c:2e:46:08:92:3b:25:f0:60:97:e0:c3:05:
39:1e:14:29:74:ce:c2:04:59:3e:f1:c6:ed:ff:c2:
16:9e:33:a5:f9:98:59:bb:9c:03:78:52:64:5c:70:
62:65:10:7a:c9:50:bc:1e:06:92:4c:55:71:a7:9a:
b8:a7:c4:f2:33:20:22:5d:87:e2:5c:25:a7:6c:96:
0f:8d:f9:93:22:e8:e4:e6:64:2d:f3:26:1f:ae:70:
38:2e:0f:ad:2d:a6:a0:da:1b:c2:b3:c6:76:16:42:
f8:55:59:34:26:af:5d:f6:03:f3:d9:91:12:fe:ff:
1a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A5:0E:49:CF:E4:B5:74:55:93:99:C0:86:08:E6:7E:59:61:92:29
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/j6UOSc_ktXRVk5nAhgjmfllhkik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.252.0/24
193.22.12.0/24
Signature Algorithm: sha256WithRSAEncryption
08:db:05:80:0c:ba:a2:d6:49:6f:a5:fe:15:02:b5:15:76:0c:
69:98:b4:80:cb:8b:90:b4:ac:4c:4b:54:55:45:33:11:b7:b8:
a7:22:9b:21:ec:33:f9:5f:a4:92:19:1a:05:80:c3:38:2f:02:
00:aa:cc:35:22:a0:22:fa:dd:e8:7b:68:e7:5b:31:ec:63:60:
de:12:dd:da:d6:b3:52:2a:24:d7:d6:f4:49:1e:f9:4d:7a:e5:
c6:19:bc:04:94:72:e2:00:72:e0:db:c5:7a:d2:1b:8b:8f:fc:
06:3f:10:fd:49:c5:8e:d8:62:fa:1f:85:b7:ab:12:d0:40:ac:
6d:04:52:fc:20:b5:7d:fc:38:77:cb:e9:96:3b:0d:c7:c1:be:
c7:f8:35:d6:0b:fb:40:46:3d:e7:3e:8f:46:e6:60:57:4c:d7:
f8:09:ec:28:24:83:a6:21:ca:e7:7b:37:33:51:51:34:73:45:
e6:88:cb:9c:ba:83:41:98:e5:2f:3e:55:38:2f:59:c2:dc:1d:
fb:5b:be:d4:4e:c0:d8:62:96:70:51:76:ef:03:23:d3:06:0e:
ae:a4:55:6c:85:db:b3:6d:02:52:f7:34:3f:5f:1f:a8:32:ac:
49:ea:c8:65:f9:1a:ed:78:e4:5a:81:a7:82:39:1d:08:7b:92:
41:42:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:21:35 2024 by rpki-client on console-ams.rpki-client.org