Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/CTc-qJWYiJOl4VXmRhq442UGJa8.roa
File: CTc-qJWYiJOl4VXmRhq442UGJa8.roa (raw, json)
Hash identifier: SMWCsJDmzoCCAhwHsS+ZoGIGiAWAMHEXXKaV1Gx8F2E=
Subject key identifier: 09:37:3E:A8:95:98:88:93:A5:E1:55:E6:46:1A:B8:E3:65:06:25:AF
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 018CC94DE8BBC55D525D17DDC1031FE555DD
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/CTc-qJWYiJOl4VXmRhq442UGJa8.roa
Signing time: Tue 02 Jan 2024 08:32:55 +0000
ROA not before: Tue 02 Jan 2024 08:32:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47697
IP address blocks: 87.118.141.0/24 maxlen: 24
212.116.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:e8:bb:c5:5d:52:5d:17:dd:c1:03:1f:e5:55:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 2 08:32:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09373ea895988893a5e155e6461ab8e3650625af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:23:d2:7c:53:e6:a4:5f:98:20:cd:af:53:
e8:ed:3a:41:d0:39:ca:8c:00:f9:7d:11:e8:96:4b:
73:cb:58:93:1e:6e:77:73:ea:2e:f8:a5:91:27:e6:
05:e4:f0:5a:0a:24:6a:f8:68:dc:8f:eb:62:dd:95:
12:86:e0:c1:0f:70:19:a4:33:98:20:22:40:04:e6:
f3:48:ea:a1:96:b8:f2:99:50:2b:8c:0d:a3:d7:ed:
bf:1d:3b:41:7d:c2:7c:c6:67:13:30:3a:4e:82:ab:
a4:b7:7a:9c:be:e3:e3:50:7e:c7:d7:e0:39:b3:c1:
99:d4:74:b9:b5:c0:80:4d:b7:40:a5:fa:3d:db:36:
67:a8:ae:73:ef:41:37:4f:f6:ef:99:ff:56:93:07:
9b:7d:ea:4f:54:0d:a6:c8:56:79:13:20:51:5e:d5:
01:03:0d:a0:9b:6f:95:c4:4d:08:be:a7:8c:b9:12:
bd:b6:bf:6d:c7:32:20:82:64:b3:f3:57:1e:4d:52:
7f:69:b6:3c:c0:fa:82:64:39:9f:b8:03:99:f9:c0:
cf:00:f8:cf:bf:ec:13:67:dd:5a:a1:4f:76:b7:e6:
2a:93:08:65:9b:9b:b8:e4:80:76:7e:cc:e9:23:03:
4e:77:e1:a7:e2:0b:f7:88:e3:ba:92:77:78:f5:13:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:37:3E:A8:95:98:88:93:A5:E1:55:E6:46:1A:B8:E3:65:06:25:AF
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/CTc-qJWYiJOl4VXmRhq442UGJa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.141.0/24
212.116.131.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:4b:f2:da:48:a6:0f:f3:c6:68:fc:9f:0a:01:9b:a6:11:cf:
78:d7:77:d5:0d:e8:f9:fc:0c:39:9c:42:ab:ce:b5:b8:18:02:
75:78:b7:79:38:67:14:c3:8c:29:56:10:f4:34:cb:6a:b1:81:
97:a3:2a:a4:a0:83:17:f6:5d:6d:7e:06:93:21:92:42:93:33:
11:74:dd:1a:fc:7b:00:27:bc:f7:13:fc:8a:d9:a7:24:85:82:
54:e2:7a:b0:43:1b:d0:da:eb:e1:e0:a2:d2:38:8f:94:d7:9c:
00:ce:bf:46:95:bd:96:eb:0c:bd:a5:90:51:1a:fd:5e:23:5d:
f7:08:c2:f7:09:78:71:8c:f4:44:b3:66:a5:55:a1:63:b6:bb:
ed:3b:f8:a9:66:62:6e:90:ff:6a:a5:91:7b:2c:6a:37:59:a1:
0a:b1:6a:ae:59:bb:19:78:b9:08:63:7f:ec:cf:32:b3:ad:89:
3e:48:cb:ed:94:4d:68:21:80:13:7d:e1:56:39:1f:9b:7f:3e:
29:00:79:a1:c0:e7:1b:04:30:52:f7:73:98:b6:e3:34:cd:0e:
c0:1e:11:41:85:9d:c1:46:27:d0:42:d8:0b:76:fe:7a:b9:8c:
5b:4a:11:23:23:c5:68:02:0e:1e:cf:ef:a4:ec:7f:0e:28:97:
c9:f6:08:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:55:54 2024 by rpki-client on console-fra.rpki-client.org