Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/pjG67mzLUoh9tvF4CfxfO8AfFHQ.roa
File: pjG67mzLUoh9tvF4CfxfO8AfFHQ.roa (raw, json)
Hash identifier: geC5r58YylwaCRtGoWeOTvFsdzYUmynEN8mpGmAzbI4=
Subject key identifier: A6:31:BA:EE:6C:CB:52:88:7D:B6:F1:78:09:FC:5F:3B:C0:1F:14:74
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 018CC26D554B27C6FBBEA09D24C2F965B907
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/pjG67mzLUoh9tvF4CfxfO8AfFHQ.roa
Signing time: Mon 01 Jan 2024 00:29:54 +0000
ROA not before: Mon 01 Jan 2024 00:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212179
IP address blocks: 212.172.0.0/16 maxlen: 24
212.172.20.0/24 maxlen: 32
212.172.165.128/27 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jul 2024 10:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:55:4b:27:c6:fb:be:a0:9d:24:c2:f9:65:b9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a631baee6ccb52887db6f17809fc5f3bc01f1474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:77:0e:47:58:d7:10:19:81:90:fc:b9:20:b5:
08:cd:05:a4:64:c2:b5:4d:7c:d9:f6:f2:21:14:ee:
79:9e:e2:36:30:6c:e0:28:48:67:97:19:eb:2f:ad:
53:e5:bf:eb:5c:27:51:ad:6d:17:bb:33:90:3f:cd:
72:3f:1a:f9:ab:0e:89:0c:79:aa:df:92:d6:36:ab:
ac:c9:5b:16:ef:8c:41:5d:61:59:02:45:d9:5b:93:
af:d3:87:60:15:48:b5:7c:f8:33:f3:7e:b3:f0:44:
7e:7b:3d:d4:4a:b7:3d:95:76:e1:c2:10:41:d9:50:
3b:f1:a9:b5:85:b0:e8:02:91:2c:44:75:df:f8:0b:
60:c1:6b:c0:b1:f2:cc:a2:85:c6:85:bc:16:f1:35:
99:4b:2b:81:c8:b5:13:b6:e8:4b:cb:b1:23:d0:ab:
a1:a6:3c:e6:ec:23:26:83:95:7e:de:7b:77:47:f3:
f4:99:fb:12:4a:a5:f9:ba:15:e4:a9:58:08:2d:1c:
b2:98:7d:b8:86:4f:16:18:4f:b3:91:e7:35:99:f6:
6e:a5:3c:60:78:97:e2:2f:93:85:e3:38:95:a9:86:
c6:df:a7:36:38:28:80:2c:ad:48:dd:e7:5e:ab:b1:
83:67:1b:e4:64:6f:41:07:fb:33:dc:71:a9:20:65:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:31:BA:EE:6C:CB:52:88:7D:B6:F1:78:09:FC:5F:3B:C0:1F:14:74
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/pjG67mzLUoh9tvF4CfxfO8AfFHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.172.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b2:48:07:6b:20:1e:43:78:e3:30:6d:ff:39:fb:33:3d:9e:92:
20:78:ca:7b:57:5a:6e:66:3a:02:9c:b0:9d:26:07:1c:e8:f5:
26:c1:b3:2b:f6:84:2e:e5:fb:ea:8c:14:f0:ed:82:f5:55:9e:
48:13:e8:e8:2b:8c:9b:59:97:cb:b5:b6:ef:e5:0e:17:2d:84:
46:35:1e:d5:f9:43:dc:22:51:63:93:27:d8:46:53:1c:64:5f:
bc:83:6f:dd:0e:f1:06:58:eb:4f:42:52:3b:e1:c1:39:d4:a9:
6a:e2:a8:a9:5c:90:4f:54:64:0b:af:96:93:6c:66:69:d4:5e:
d2:31:9c:83:3a:b8:87:c6:13:5a:10:3a:2d:87:9e:44:9c:1f:
75:dd:c7:57:6b:a1:cc:61:ef:78:68:be:14:cd:61:45:1d:95:
1f:b3:62:56:b8:91:c9:c8:e9:0e:bc:04:3b:88:ce:fd:08:7e:
61:31:b4:e7:25:39:22:a3:92:2f:cc:3e:8a:f2:60:4f:f3:e5:
73:07:a7:a1:6f:bb:53:ab:8d:b4:31:13:15:63:a1:be:3f:07:
e0:4d:d5:15:db:1c:6c:08:25:b7:69:cd:ae:12:2c:18:39:89:
09:aa:fc:6f:63:cf:74:a0:8d:ef:81:d5:dc:03:1d:bc:d0:64:
3e:33:c7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 14:37:45 2024 by rpki-client on console-fra.rpki-client.org