Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/POLhW9JrFFsVUDo0zbXWFI78WNQ.roa
File: POLhW9JrFFsVUDo0zbXWFI78WNQ.roa (raw, json)
Hash identifier: AXHnPXKIT12W9uFRCSnflK5bnrQkH2czpFMGpp9hK8g=
Subject key identifier: 3C:E2:E1:5B:D2:6B:14:5B:15:50:3A:34:CD:B5:D6:14:8E:FC:58:D4
Certificate issuer: /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Certificate serial: 018CC801534F22884CA39AD01009AE7E89B2
Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/POLhW9JrFFsVUDo0zbXWFI78WNQ.roa
Signing time: Tue 02 Jan 2024 02:29:39 +0000
ROA not before: Tue 02 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8536
IP address blocks: 212.52.160.0/22 maxlen: 22
212.52.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:53:4f:22:88:4c:a3:9a:d0:10:09:ae:7e:89:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8
Validity
Not Before: Jan 2 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ce2e15bd26b145b15503a34cdb5d6148efc58d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b0:08:34:8a:2a:1a:83:77:8f:0e:6c:6e:73:
7e:9f:69:d3:c1:fe:53:d0:1e:ef:37:21:79:34:dd:
f3:c7:ec:e8:ee:4c:c5:92:8f:e2:af:eb:5d:56:41:
b4:f4:f2:1d:72:4d:18:a8:bb:64:0e:0f:c6:ba:82:
52:dc:94:46:37:c1:bc:81:1e:fe:cc:25:05:31:06:
54:b1:0a:e4:7e:72:ce:7a:a6:59:73:ab:6c:9b:65:
aa:02:ea:59:ef:d9:0b:31:54:ef:39:06:48:13:50:
d2:27:aa:aa:45:60:7b:a4:55:f2:1d:b0:d7:58:98:
e8:83:e3:f6:3d:a5:84:ea:9f:7d:39:bc:b3:64:48:
e8:ec:2b:24:f7:a1:20:f3:43:0c:2c:07:ce:cd:44:
99:ec:dc:70:14:c1:94:f4:74:17:16:99:44:4f:52:
03:4a:b7:26:df:10:5f:cf:69:2c:63:8d:a0:b4:a9:
83:27:ab:46:a6:92:fc:91:f1:7a:56:d2:50:12:e3:
94:8d:45:1b:93:c3:c2:ff:25:50:2e:44:98:eb:3e:
21:30:2d:58:5e:3e:c0:7d:97:3d:dd:f4:14:ad:c7:
b9:db:02:d6:7f:c5:22:5c:86:af:ba:3c:d1:a3:ab:
c4:68:69:65:b3:98:b3:e1:57:20:ab:63:f2:8a:f1:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E2:E1:5B:D2:6B:14:5B:15:50:3A:34:CD:B5:D6:14:8E:FC:58:D4
X509v3 Authority Key Identifier:
keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/POLhW9JrFFsVUDo0zbXWFI78WNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.160.0/22
212.52.168.0/22
Signature Algorithm: sha256WithRSAEncryption
60:e9:9d:d4:15:93:93:f3:21:aa:df:5a:d0:8d:52:ec:39:f8:
09:47:3a:96:cb:9f:b5:c5:fa:39:65:cd:dd:c6:67:6e:d3:ca:
fa:9e:06:76:a5:b0:fb:4e:b7:96:07:58:fd:38:47:38:65:f0:
40:4b:62:a4:65:a9:bf:49:05:a7:c4:ac:c8:cd:1a:3b:3e:3d:
28:0c:0b:83:4c:a5:79:2e:51:1a:69:68:da:ba:fc:62:1a:61:
66:8c:75:50:a6:86:8b:39:13:33:3e:22:12:09:00:1d:9b:ca:
34:46:7d:2e:52:b0:0e:cc:00:a9:96:d3:f0:a7:07:aa:44:2e:
d0:52:51:6a:70:47:1a:c4:9f:07:b6:54:f4:7e:bd:61:01:ec:
7a:f0:db:c0:d6:0b:1c:68:1d:5a:60:f8:16:26:ed:81:60:63:
b0:84:0c:7b:ea:92:d5:f5:1f:bc:08:fc:ba:44:a4:fe:a9:ef:
bd:5b:b3:e4:8b:58:b4:e7:a9:b6:0f:4f:93:fd:ff:ba:db:af:
2e:cc:f9:74:15:82:d6:88:6a:91:5f:56:af:85:f2:56:b6:ae:
c8:3d:43:9b:1a:31:76:ca:1b:3c:2e:31:78:fc:6c:bd:ad:2b:
df:ee:e1:8a:b5:97:eb:80:09:b9:97:34:11:ed:b6:3b:c6:7e:
c2:5e:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 23:06:36 2024 by rpki-client on console-fra.rpki-client.org