Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7hcq6pU3ICp3WJlP6iozA1N5aUo.roa
File: 7hcq6pU3ICp3WJlP6iozA1N5aUo.roa (raw, json)
Hash identifier: f1y8yzPSgZTwcmaLh3MVcIE6fL4EBQv0SYHHRF8X9Gs=
Subject key identifier: EE:17:2A:EA:95:37:20:2A:77:58:99:4F:EA:2A:33:03:53:79:69:4A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CE7A60CBB6A50C09416146D23EB98BD38
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7hcq6pU3ICp3WJlP6iozA1N5aUo.roa
Signing time: Mon 08 Jan 2024 05:57:48 +0000
ROA not before: Mon 08 Jan 2024 05:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206216
IP address blocks: 212.193.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e7:a6:0c:bb:6a:50:c0:94:16:14:6d:23:eb:98:bd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 8 05:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee172aea9537202a7758994fea2a33035379694a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:d0:d1:2c:ae:02:91:7f:39:e1:d5:ff:5a:
93:bc:93:e1:64:1a:0b:c0:3f:04:51:15:89:ce:ae:
7f:b2:b6:5c:d0:42:f1:ef:c1:7e:2b:e3:b6:9d:ea:
30:aa:29:05:36:35:7a:d8:d4:c2:39:ca:49:6c:8e:
9c:35:4d:18:b2:02:d1:8c:f2:6a:c3:25:fc:52:35:
8e:14:97:7f:aa:2f:c8:f4:f5:ba:2d:37:31:4c:01:
20:23:b0:7e:f2:de:75:1c:1a:d6:38:b6:bd:0e:e0:
53:82:48:f8:d6:0c:b0:f0:2f:d8:a6:b2:5a:b5:ab:
a9:6a:2d:20:e2:e1:5e:a5:26:e3:61:a8:7f:94:36:
9a:ef:92:6f:48:95:d9:39:8c:f2:fb:c1:a9:36:a0:
32:13:87:f3:bb:f8:54:cb:e1:ca:c0:af:20:f9:d8:
25:8f:f8:cc:c4:d1:32:e2:ba:f9:9b:27:9a:f5:0b:
de:7e:62:63:b0:de:80:0b:9c:30:95:0d:74:88:5a:
57:1f:78:40:44:5f:77:8f:ae:8d:d9:ad:ff:d1:a8:
aa:df:80:19:be:d5:bb:b8:9a:44:3e:f4:b3:1f:26:
14:61:a6:6e:09:6d:87:d6:8c:e6:48:9c:e4:2d:b8:
21:1b:1c:24:08:b5:20:26:af:9a:06:f2:67:9e:2d:
09:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:17:2A:EA:95:37:20:2A:77:58:99:4F:EA:2A:33:03:53:79:69:4A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7hcq6pU3ICp3WJlP6iozA1N5aUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.193.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:eb:1e:2c:f0:89:02:ea:75:a2:90:2a:7a:cc:4e:4e:85:59:
d6:05:c3:ac:e9:31:7a:78:35:ec:9f:f4:2a:c0:27:04:5b:c7:
a4:65:b8:a8:52:44:2e:c4:3f:47:10:24:a1:45:be:bc:7a:d2:
ba:6e:a9:3a:c0:83:44:49:ce:0e:dd:ab:ee:88:1b:44:38:ae:
dc:78:d4:bf:34:6e:70:c7:8d:fe:58:da:78:0a:6d:93:a1:35:
65:78:57:02:48:1f:8e:85:f1:c2:e8:39:f7:7b:85:6e:3b:9f:
d5:6c:79:7b:b0:5a:c5:39:f7:ad:e9:71:8f:c7:ec:f6:bd:ac:
20:41:af:9f:4e:5a:51:17:8b:2d:29:c3:6c:d4:7c:1e:fc:9d:
6e:3f:af:52:7c:a0:f8:43:3c:3e:30:d3:4c:22:46:f7:bf:3d:
69:47:f6:09:f1:f6:a8:05:06:02:e0:8a:e9:80:22:17:a7:53:
99:06:2f:9f:e4:13:07:38:cf:9a:f8:23:c9:39:38:14:48:87:
93:95:67:59:58:50:c8:b0:7d:86:ba:aa:a0:d8:45:ee:ff:c0:
15:13:fa:33:d4:df:be:42:63:fd:65:ed:eb:e4:68:77:66:0e:
7d:db:20:81:fd:05:16:dd:ff:10:47:93:0f:36:06:3c:6e:f8:
36:e1:cc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:39:04 2024 by rpki-client on console-ams.rpki-client.org