Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/v9oF4IgUMu6jUM85rNh8MoYA5o8.roa
File: v9oF4IgUMu6jUM85rNh8MoYA5o8.roa (raw, json)
Hash identifier: r+xJuc3nir0ukF3G5WxiG9mTxeQsZwLtc8sRE9YB430=
Subject key identifier: BF:DA:05:E0:88:14:32:EE:A3:50:CF:39:AC:D8:7C:32:86:00:E6:8F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018DD4EBA1244202EE81D050FCFC8C37F3D3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/v9oF4IgUMu6jUM85rNh8MoYA5o8.roa
Signing time: Fri 23 Feb 2024 07:43:48 +0000
ROA not before: Fri 23 Feb 2024 07:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 212.192.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d4:eb:a1:24:42:02:ee:81:d0:50:fc:fc:8c:37:f3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 23 07:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfda05e0881432eea350cf39acd87c328600e68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:38:54:cb:45:91:46:f0:f7:12:85:95:08:b1:
75:84:9a:b3:02:ec:2d:1e:25:a0:47:07:4b:1d:f6:
fc:cc:95:f7:be:2a:b4:d4:57:6d:be:ca:c2:2c:0a:
75:13:63:7b:00:e6:47:eb:70:ba:ba:1b:9e:2b:51:
3d:f8:7d:f6:52:0e:f2:d5:37:25:68:2a:fa:2c:3f:
d2:2f:34:c7:8f:03:5c:48:57:e6:66:a0:72:bb:f2:
99:2e:a6:79:7f:e5:a5:f9:56:40:50:ff:90:3f:54:
e1:fe:50:e8:0d:90:61:11:48:67:55:aa:60:42:c3:
81:dc:6c:05:c4:df:e1:f2:20:48:b5:9d:2a:d6:96:
d7:02:e9:b7:3c:70:ed:be:42:9f:06:78:ca:91:66:
54:cd:f4:39:a2:58:73:c4:af:e4:8e:ab:f9:b9:fa:
25:27:e4:cf:f9:b3:c2:68:a4:b5:88:e1:0f:2e:7f:
f8:73:e2:b5:03:46:21:89:46:fe:af:ae:c6:e0:14:
7c:5e:d9:d6:58:e6:b3:6c:07:b3:40:4d:e5:63:d0:
1c:de:9e:1f:3b:88:48:b2:55:ff:03:78:48:ac:cb:
34:72:9a:7b:40:bc:ad:55:c0:aa:4f:76:5d:48:e0:
0d:a4:b4:9e:db:40:05:6d:07:5a:2e:ba:74:9b:60:
2d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DA:05:E0:88:14:32:EE:A3:50:CF:39:AC:D8:7C:32:86:00:E6:8F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/v9oF4IgUMu6jUM85rNh8MoYA5o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.213.0/24
Signature Algorithm: sha256WithRSAEncryption
42:41:07:6f:e4:c5:23:9b:e1:dc:1c:34:11:3e:55:c4:8e:59:
74:b2:aa:d3:9b:66:4c:97:67:b0:a2:65:71:7e:f0:c1:6f:61:
6a:9c:f0:75:3c:46:69:0e:0d:5c:61:fd:86:bf:25:9c:6d:dc:
97:6b:ba:f9:4c:10:7a:a2:92:ed:be:20:33:a5:fc:9d:cf:07:
67:65:c6:3a:f1:cb:70:56:cc:c4:9c:2d:43:d8:7e:bf:65:0d:
c1:34:c0:73:5d:b8:bd:3b:59:bf:ed:28:80:e8:b3:b6:f4:5c:
6b:82:d3:f9:a1:21:0c:3e:a3:e4:48:46:bb:a2:c7:f7:57:e4:
ce:3d:ca:f5:a7:a2:f9:d3:0a:b9:c4:cd:3a:59:28:9f:cb:94:
ec:3b:d2:10:13:3b:9f:1e:b4:ae:d4:f2:44:11:09:60:d9:2b:
57:9b:7a:ec:4c:19:36:0f:98:82:d6:23:a3:5f:9d:05:22:06:
ac:67:2c:0d:3d:96:26:f8:a6:b5:a0:cb:80:2a:b9:47:84:99:
ee:b8:6c:0d:8c:fc:27:d7:4b:68:7e:67:7c:eb:87:0e:b2:8e:
be:e3:ba:b7:60:68:00:48:70:6c:54:82:8f:a4:9d:58:5e:4a:
f3:65:5b:9b:0e:70:e3:70:4c:e5:8c:fa:9b:41:af:a8:1a:f5:
c7:d6:5b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-fra.rpki-client.org