Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/PjbT4l8vBGSO-Ehkdg0CoTthO2c.roa
File: PjbT4l8vBGSO-Ehkdg0CoTthO2c.roa (raw, json)
Hash identifier: aqkyW4Rv+6ZTF5V2ZKhEtWJVnMuuo/8xR+5anG3ZvcQ=
Subject key identifier: 3E:36:D3:E2:5F:2F:04:64:8E:F8:48:64:76:0D:02:A1:3B:61:3B:67
Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial: 018CC500FC2C346DEEDEA35F32371E8041AE
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/PjbT4l8vBGSO-Ehkdg0CoTthO2c.roa
Signing time: Mon 01 Jan 2024 12:30:25 +0000
ROA not before: Mon 01 Jan 2024 12:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 212.104.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:fc:2c:34:6d:ee:de:a3:5f:32:37:1e:80:41:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Validity
Not Before: Jan 1 12:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e36d3e25f2f04648ef84864760d02a13b613b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:0f:4e:53:dd:40:4e:18:e5:1d:79:b6:6c:
52:3d:da:3a:53:db:df:58:54:ee:1e:77:c9:95:3d:
f2:b9:78:aa:a8:64:6a:8a:72:dc:92:b2:0f:f9:d1:
0a:79:68:42:72:7c:9e:68:5c:13:a9:c5:f4:01:2d:
f9:74:54:00:72:fe:25:3f:95:4c:be:09:94:0e:59:
d4:7e:52:60:82:4a:0f:d3:37:28:f7:18:f4:55:d3:
0f:7b:37:14:ac:42:cb:91:72:e7:26:a0:3f:f6:00:
c9:e2:67:c2:1a:e7:69:2a:ae:7a:9c:f0:71:90:22:
96:29:a0:ad:b3:e6:a9:8e:13:91:e6:4e:51:df:60:
29:25:83:a8:fe:7d:a5:45:9c:af:19:42:16:66:3d:
33:ee:97:98:74:dc:13:7e:37:71:e3:e5:c8:66:6c:
58:56:9d:cd:91:de:24:13:f0:44:36:76:a8:6c:9d:
71:5d:85:d6:06:cc:6a:38:46:0c:8a:2e:91:c7:50:
d3:2b:45:a8:21:0b:55:4c:b5:41:80:c2:72:5b:53:
e8:6b:62:6f:d2:62:5a:97:14:d8:bd:e8:a5:b3:19:
c6:d5:ee:cd:1d:91:cb:a9:b3:4e:d1:63:2b:b9:a2:
47:14:ed:18:a9:97:dd:c3:ab:7d:39:f6:bc:21:ff:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:36:D3:E2:5F:2F:04:64:8E:F8:48:64:76:0D:02:A1:3B:61:3B:67
X509v3 Authority Key Identifier:
keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/PjbT4l8vBGSO-Ehkdg0CoTthO2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.209.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e3:0a:84:26:db:b1:a2:4d:38:a3:9a:c5:52:6e:b3:55:e5:
74:c7:df:53:30:84:e3:77:a4:4d:b2:c4:dc:12:e6:85:58:55:
15:6c:31:e1:40:df:83:f4:e1:62:ad:84:6e:d5:c4:2b:77:8a:
ae:da:a1:f6:d3:c8:ee:c6:cc:ca:fa:d6:80:9a:fb:2d:42:7e:
80:d9:6a:33:f8:61:1e:8e:43:b8:68:ac:a5:be:66:39:6c:ba:
39:31:53:fb:aa:6b:9b:24:56:18:2c:23:b5:e3:63:98:1c:07:
53:57:5d:5b:40:40:a6:b3:e7:b1:6d:bd:a3:66:0a:90:b2:04:
92:65:d7:54:75:c6:a0:88:bc:8e:85:43:50:1b:1b:28:71:3f:
5c:0a:f2:e6:67:36:5d:fa:6b:35:f3:37:48:e2:9b:03:e0:04:
fd:70:99:af:15:1a:ed:14:03:f6:f8:c7:00:36:f2:ce:6e:86:
f7:2f:d2:74:f3:af:ed:7c:db:6a:8b:c8:ff:b2:f3:41:d5:88:
bb:ff:ad:92:de:33:a6:28:31:67:90:78:ba:54:30:2f:7e:f8:
e1:48:09:c4:22:4d:38:c6:7d:ad:0e:0a:37:18:e1:f2:ab:06:
09:63:09:de:f2:ad:83:0b:4a:e8:0f:65:e4:94:cf:0f:31:6f:
85:c6:ae:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:07:25 2024 by rpki-client on console-fra.rpki-client.org