Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/NEKDJIKEhILmzvjaKQwKw1vYGH0.roa
File: NEKDJIKEhILmzvjaKQwKw1vYGH0.roa (raw, json)
Hash identifier: BlpU1Xbu0xIoU+m22HHJ5sPrFQokykAORXCdffwThx4=
Subject key identifier: 34:42:83:24:82:84:84:82:E6:CE:F8:DA:29:0C:0A:C3:5B:D8:18:7D
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018CC5DC4DA44B7F72CF1FE7C05AE379293E
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/NEKDJIKEhILmzvjaKQwKw1vYGH0.roa
Signing time: Mon 01 Jan 2024 16:29:58 +0000
ROA not before: Mon 01 Jan 2024 16:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61265
IP address blocks: 212.192.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4d:a4:4b:7f:72:cf:1f:e7:c0:5a:e3:79:29:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 16:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3442832482848482e6cef8da290c0ac35bd8187d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:9d:c5:fd:6c:da:95:6d:93:95:ac:3e:f4:
2c:d4:e4:9d:fc:24:f7:29:85:72:32:6e:f8:0b:19:
ce:c0:a4:a0:c0:ee:e6:61:76:06:6b:5a:54:60:5c:
d6:43:fa:d4:c0:58:fd:da:17:67:aa:f4:67:f6:86:
a4:29:12:a9:1f:cc:63:a7:97:56:7a:a7:05:7f:39:
e7:50:14:99:40:98:de:55:fc:0d:dc:3b:75:c3:a2:
02:ce:91:ee:a6:f1:81:bd:b3:8d:25:0b:30:04:57:
56:9b:34:74:93:b2:68:e2:2e:2d:24:3e:f7:2f:61:
41:b2:7d:6b:4b:b5:33:92:28:60:c5:c5:8e:b1:3f:
03:fd:bb:00:17:e0:73:ea:37:86:42:89:1d:e8:37:
9f:59:66:90:70:fb:3f:29:b0:63:f0:d5:d2:95:ba:
53:2f:85:99:c1:e4:3d:be:3d:2d:5f:31:9d:16:67:
09:46:9c:5c:38:d5:1e:8c:f7:c8:42:7d:cd:b9:2d:
1d:ab:f9:eb:9a:02:2e:c6:e4:77:3c:5b:82:b2:85:
00:58:02:eb:82:48:77:fa:55:82:5e:5b:7c:f0:74:
91:f9:cf:71:50:e7:de:55:62:42:fa:ee:25:65:a4:
f1:21:46:96:46:3b:02:c5:66:62:21:e5:31:83:c9:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:42:83:24:82:84:84:82:E6:CE:F8:DA:29:0C:0A:C3:5B:D8:18:7D
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/NEKDJIKEhILmzvjaKQwKw1vYGH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.226.0/24
Signature Algorithm: sha256WithRSAEncryption
80:37:4b:03:9c:88:a6:90:86:83:83:5c:02:63:23:b0:d8:07:
9f:b6:32:31:80:8d:12:bb:80:a3:02:4a:1d:18:29:fc:c0:69:
04:16:57:6e:4e:d9:73:93:74:a6:ea:e1:95:ab:d1:2f:12:79:
7b:30:02:c3:d1:31:ba:2b:68:d4:b4:c5:bb:bc:a5:2a:64:7b:
86:bc:5f:e2:3b:01:16:06:d6:75:a7:d8:47:e8:c9:5a:19:88:
1d:94:83:2c:45:c2:65:6f:e3:5f:da:04:24:5c:d1:f1:9a:1b:
90:97:1d:82:9c:86:e1:38:b7:b7:21:5c:74:e2:b5:5b:5e:19:
cb:d3:ae:90:7f:77:5d:5b:3f:36:4f:62:08:85:d0:e7:81:c3:
47:29:59:2c:55:93:a3:c9:b6:72:a3:e8:a2:7d:23:00:1b:d2:
51:d9:20:22:e4:cb:64:08:84:f0:06:84:89:41:79:14:e5:79:
6a:9b:2c:b7:1c:2c:75:f3:6f:22:26:eb:05:32:b1:46:c5:6a:
80:fc:52:03:99:03:43:ec:5c:77:90:cf:07:40:3a:83:d3:5c:
35:08:aa:2b:58:c0:e4:87:fa:22:6c:2e:77:2d:94:67:1b:68:
2e:01:8a:b2:92:53:bf:3f:be:3f:11:11:42:3e:ae:ac:a1:d5:
00:d4:03:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:35:00 2024 by rpki-client on console-ams.rpki-client.org