Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/mR9CvrzInUayy-kZW7IRsVCe6II.roa
File: mR9CvrzInUayy-kZW7IRsVCe6II.roa (raw, json)
Hash identifier: RIN956/NDu1Df568NKt6zWIP7J70lX5hS0wiT34L1Ok=
Subject key identifier: 99:1F:42:BE:BC:C8:9D:46:B2:CB:E9:19:5B:B2:11:B1:50:9E:E8:82
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 01917AA1B146727E1ECCE87989F991A635D6
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/mR9CvrzInUayy-kZW7IRsVCe6II.roa
Signing time: Thu 22 Aug 2024 15:08:22 +0000
ROA not before: Thu 22 Aug 2024 15:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214319
IP address blocks: 212.119.25.0/24 maxlen: 24
213.198.78.0/24 maxlen: 24
213.198.91.0/24 maxlen: 24
2001:728:1010:300::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:a1:b1:46:72:7e:1e:cc:e8:79:89:f9:91:a6:35:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Aug 22 15:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=991f42bebcc89d46b2cbe9195bb211b1509ee882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:e0:b9:8a:a3:c0:c4:78:e0:8b:c0:d6:8e:
1f:77:06:df:ac:7e:5d:8a:93:90:cb:a3:25:80:c2:
5e:c2:2d:ce:de:fa:83:32:8e:bc:dd:de:7c:33:34:
a7:1c:0d:f5:81:75:24:ee:12:3e:8f:33:f4:b0:4b:
e2:88:bc:00:06:12:c6:2c:9e:3d:52:18:5c:ff:5d:
aa:c4:48:9c:d6:11:fc:31:b2:ed:55:00:f2:8e:10:
f0:45:94:f5:e9:5b:5f:b0:51:15:13:d1:8b:80:42:
ef:5b:2e:75:92:79:11:0e:b9:ca:d7:d3:f0:ec:d6:
68:e7:87:ae:c5:a5:bc:44:c5:c5:97:17:a1:ea:e7:
fe:4a:b3:32:0d:32:8f:ea:fe:14:58:5b:d1:85:2a:
f3:7a:5a:71:7a:0e:2f:ec:1b:56:54:67:c6:47:27:
fe:d0:25:4c:5b:f9:60:af:f1:6c:5e:9e:e5:cf:52:
30:51:e5:a9:3c:66:2d:62:16:79:35:ac:27:3f:68:
4f:49:cc:d1:ed:4f:41:7e:24:31:95:26:e7:2b:02:
bf:fa:87:f6:c9:73:28:fe:30:fb:98:ac:a9:9c:c7:
6d:56:c1:b5:aa:a4:8b:0c:dd:2a:d9:33:f1:31:00:
e5:cd:de:ae:83:61:af:6e:a4:b2:a6:01:22:c8:f4:
b8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1F:42:BE:BC:C8:9D:46:B2:CB:E9:19:5B:B2:11:B1:50:9E:E8:82
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/mR9CvrzInUayy-kZW7IRsVCe6II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.119.25.0/24
213.198.78.0/24
213.198.91.0/24
IPv6:
2001:728:1010:300::/56
Signature Algorithm: sha256WithRSAEncryption
60:3e:fb:2c:e8:bd:78:c4:eb:f3:bc:79:71:c5:72:66:ee:c7:
52:d3:3d:a0:fd:05:3c:35:5a:3c:0a:33:ef:43:ab:15:ad:08:
6b:7d:ba:14:c9:6f:93:a3:c9:2f:e4:b8:e5:89:1b:04:69:a0:
35:54:36:83:8c:34:2b:55:63:1f:10:cd:7a:94:ed:22:f0:89:
4c:e1:ce:4c:a6:d5:4b:54:73:7e:e3:7a:55:a8:46:d8:b2:b2:
aa:56:3e:7d:d0:c5:aa:e3:01:c7:fa:d3:7b:c4:04:e9:8c:d7:
8a:48:66:f0:a1:68:50:20:db:4f:32:84:5e:7d:3c:62:22:82:
24:d4:fc:04:0b:fe:69:54:05:c9:35:2e:f1:2d:c7:ac:f7:1d:
9f:49:2c:b8:fe:16:74:f5:52:76:7d:e7:d3:68:1b:56:2c:9a:
99:67:b6:30:20:ce:1d:fa:bd:0d:60:0c:b4:99:f8:b0:2b:0d:
f1:c0:44:67:a5:63:c7:4d:f1:f3:42:bb:65:fa:0a:2d:97:25:
7b:78:2b:9b:b9:cb:8d:d7:5b:8f:07:d1:1e:5f:3c:48:da:51:
16:01:e9:88:f9:9b:e1:bd:e9:df:99:b0:c3:eb:94:0b:00:69:
dc:fa:d3:46:06:40:ee:22:88:22:70:ac:12:06:f1:1b:ec:f5:
26:81:e9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:38:27 2024 by rpki-client on console-fra.rpki-client.org