Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/U2IKRDdEj4poFCXSltKSdfesDtc.roa
File: U2IKRDdEj4poFCXSltKSdfesDtc.roa (raw, json)
Hash identifier: 3WW2GYyc07zbzLSVatsOSewUIy63iTvwvmd0upQ+SeA=
Subject key identifier: 53:62:0A:44:37:44:8F:8A:68:14:25:D2:96:D2:92:75:F7:AC:0E:D7
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 018CC793428CD3B0EA8744D296A2C2B1AC2E
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/U2IKRDdEj4poFCXSltKSdfesDtc.roa
Signing time: Tue 02 Jan 2024 00:29:25 +0000
ROA not before: Tue 02 Jan 2024 00:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208787
IP address blocks: 212.103.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:42:8c:d3:b0:ea:87:44:d2:96:a2:c2:b1:ac:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 2 00:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53620a4437448f8a681425d296d29275f7ac0ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:cc:69:2c:87:73:8f:ac:95:11:0e:00:b9:
cd:f1:c7:13:79:d1:22:8d:d8:eb:ce:74:c1:a1:b2:
fa:18:df:4d:88:e0:47:af:46:e1:db:09:23:be:6a:
b5:1d:fc:52:c8:9c:e1:42:a3:19:28:7b:f7:ab:85:
e1:03:3a:89:b4:8e:20:60:53:46:f8:7f:a7:19:30:
1a:a6:4c:f2:af:ba:c2:35:40:e7:d2:7f:c4:a7:53:
8b:8b:07:94:d1:2a:77:33:01:f7:1b:a7:70:f9:2b:
29:46:64:f5:18:cb:38:bf:a8:14:58:75:11:27:aa:
86:33:f5:fc:0b:05:e7:f8:be:53:ca:3e:f5:96:af:
e0:56:13:53:58:3b:f3:8b:77:f7:ba:a5:f7:e5:98:
17:fc:07:a7:f2:45:5b:fd:f7:c0:c7:dc:55:51:ce:
93:38:67:30:96:bf:06:ed:41:8f:49:0e:36:a5:c6:
b1:53:51:4e:8d:9d:9b:2b:78:b3:63:96:41:97:aa:
de:c7:6a:19:80:63:24:94:46:3b:74:cd:55:32:f3:
1d:60:50:a2:c2:e9:26:96:89:66:43:24:db:26:f7:
19:f3:7f:3d:4a:d7:56:4d:36:b8:ea:0d:6d:1f:36:
41:18:eb:09:9b:24:ab:dd:17:5b:2c:1d:22:7b:18:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:62:0A:44:37:44:8F:8A:68:14:25:D2:96:D2:92:75:F7:AC:0E:D7
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/U2IKRDdEj4poFCXSltKSdfesDtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.41.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d0:6b:af:ca:03:99:ff:60:09:47:9e:5b:17:6c:06:dc:79:
b4:88:e7:3d:47:2b:a4:1e:f7:45:73:52:41:f7:62:43:db:c4:
3c:87:3c:79:1f:ff:7e:0b:2f:ea:2c:84:dc:24:6a:21:d6:78:
3d:56:f7:8a:16:2b:0c:21:52:94:97:06:fd:26:93:f4:f7:ac:
c8:88:87:64:26:c6:0b:b8:cf:e9:67:7c:94:9a:2c:2f:7b:e8:
63:46:9a:6b:18:3e:30:08:8b:bc:0d:a2:cd:48:1a:23:06:04:
cf:0b:c2:b9:60:4e:96:59:73:a8:f4:13:ce:96:9b:59:6d:c5:
44:c4:8a:ad:fa:0b:9d:00:f8:50:3a:6f:82:0a:4d:52:95:77:
06:32:ac:a2:a8:8f:7d:ae:88:90:57:46:b3:21:d3:43:f1:60:
81:3d:c2:02:2b:ec:d2:08:3f:6d:43:7a:47:7e:55:be:27:ac:
79:3d:27:12:45:17:76:cf:89:e3:3d:5e:3c:44:3d:4b:b7:ad:
dc:5d:3c:a1:87:83:24:35:e4:55:0f:43:d7:22:fe:55:40:b5:
65:f4:07:a0:2f:bc:2e:3e:c6:2a:b5:40:0b:e0:b9:f8:b1:94:
ff:e2:19:1b:f0:21:1e:2f:d1:a0:fe:34:e8:8c:c7:b2:44:09:
1e:22:5c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 02:56:19 2024 by rpki-client on console-ams.rpki-client.org