Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/rBJJgJ0UVs5_RCGxJ6yc3XKBovM.roa
File: rBJJgJ0UVs5_RCGxJ6yc3XKBovM.roa (raw, json)
Hash identifier: BNATMNvNTualHDmgfkpNswKTh5FtAvds0wzFytUEO4w=
Subject key identifier: AC:12:49:80:9D:14:56:CE:7F:44:21:B1:27:AC:9C:DD:72:81:A2:F3
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018CC5DC4EADFCF7F6C853F25C158C808387
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/rBJJgJ0UVs5_RCGxJ6yc3XKBovM.roa
Signing time: Mon 01 Jan 2024 16:29:58 +0000
ROA not before: Mon 01 Jan 2024 16:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200627
IP address blocks: 212.193.98.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4e:ad:fc:f7:f6:c8:53:f2:5c:15:8c:80:83:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 16:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac1249809d1456ce7f4421b127ac9cdd7281a2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:b7:33:09:1e:a6:ce:95:fb:42:6b:0b:45:
72:d8:1e:c0:01:83:a7:56:d0:23:59:ae:b3:40:d6:
94:6e:89:09:21:6d:2b:44:76:a4:a0:93:94:e8:e8:
ed:49:67:3f:7e:61:27:c9:0e:f4:35:7f:10:3b:1d:
f4:e5:c8:80:40:4e:25:1d:31:02:75:94:d2:f8:3a:
b0:49:f9:cb:73:a4:66:7e:67:00:c4:10:2b:af:09:
ce:73:68:51:4c:dd:54:a4:68:9b:11:2a:d3:1d:7e:
a3:f0:10:2e:80:72:e8:c7:cf:09:3f:62:ec:f2:76:
1d:9f:c1:16:16:69:1e:74:fe:e7:93:02:48:58:86:
e8:7c:69:20:de:71:8e:1c:ff:bb:6f:af:0b:16:4f:
68:02:f0:88:f3:f6:af:14:b6:97:2e:4a:57:24:42:
c8:8b:06:84:d3:ca:00:fd:66:df:78:c2:f2:50:f8:
ee:b9:10:3d:1a:51:b7:ac:e2:29:58:35:1d:fa:75:
8b:7a:89:76:38:d4:85:b2:b0:8e:67:c2:d4:1d:e8:
2c:ad:a6:ba:e7:72:94:4f:55:f6:42:f0:7e:5c:19:
23:3c:4c:82:b6:75:cb:fb:7f:a6:09:7a:d8:c8:a1:
be:ae:42:f0:81:cd:a2:0e:15:20:a7:43:6a:6c:b8:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:12:49:80:9D:14:56:CE:7F:44:21:B1:27:AC:9C:DD:72:81:A2:F3
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/rBJJgJ0UVs5_RCGxJ6yc3XKBovM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.98.0/24
Signature Algorithm: sha256WithRSAEncryption
09:16:52:9a:b7:93:3b:b5:d7:d0:f1:24:63:4e:5d:ba:82:c9:
31:48:b4:5b:ad:ce:b1:02:70:8f:f8:71:b0:ce:1b:b4:9b:8a:
f6:6e:4f:92:3c:8c:06:ea:ef:55:d8:9a:ae:40:61:a1:59:db:
96:7a:f8:4b:6e:0b:dc:11:ad:d5:b4:b7:d3:53:de:d9:9e:9f:
66:a6:90:3b:74:76:35:81:7a:b6:27:b5:4e:80:00:b0:3c:1b:
d6:20:be:24:0f:e9:ab:c1:d1:f9:bc:8e:66:06:53:b3:e7:17:
9a:9b:06:0c:9c:4c:88:73:02:52:4b:17:9e:a4:22:22:4b:06:
37:ca:ec:89:c3:16:da:00:b0:8b:b6:52:1d:49:d0:2c:3e:ba:
81:59:72:7c:83:28:13:a9:fc:a8:c9:6c:42:0b:fc:61:25:8b:
ad:9e:e3:77:fd:a8:bf:3c:c6:03:16:13:85:0a:41:55:a4:70:
fb:ae:1f:a1:d0:e4:03:e0:51:17:8f:10:06:15:a8:66:87:cb:
10:ed:3a:e1:79:21:66:83:54:f1:63:ce:8a:48:9a:63:74:41:
0e:10:30:30:97:8c:b0:07:cf:b7:cf:67:8f:20:93:01:2e:c7:
9e:52:06:c9:8b:71:55:61:c9:e9:10:42:43:c2:a4:fc:27:fd:
b0:a9:1a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:52:03 2024 by rpki-client on console-fra.rpki-client.org