Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/6QOuKs0pMLbn-D819bdL94c7DZ0.roa
File: 6QOuKs0pMLbn-D819bdL94c7DZ0.roa (raw, json)
Hash identifier: 5MiCB4ztBfjeiy7KXReIjp1Vkjr2ojZ2YPHAMJ6rzb4=
Subject key identifier: E9:03:AE:2A:CD:29:30:B6:E7:F8:3F:35:F5:B7:4B:F7:87:3B:0D:9D
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018CC9BC620453BE076CCF1DB54E75113956
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/6QOuKs0pMLbn-D819bdL94c7DZ0.roa
Signing time: Tue 02 Jan 2024 10:33:35 +0000
ROA not before: Tue 02 Jan 2024 10:33:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206092
IP address blocks: 212.30.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:62:04:53:be:07:6c:cf:1d:b5:4e:75:11:39:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 2 10:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e903ae2acd2930b6e7f83f35f5b74bf7873b0d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:0e:9c:c2:3e:78:4c:46:c5:eb:03:f6:db:
b9:84:a2:d9:a0:d4:cd:4d:4b:fc:a9:6a:70:46:86:
c3:67:47:ec:3e:e6:b9:5b:8f:81:15:28:79:43:27:
36:ae:24:c4:76:46:ac:9e:7e:7b:4b:d9:a9:a3:38:
43:5d:f7:06:36:94:6d:76:df:eb:b8:2a:3b:f7:8a:
7d:43:a6:62:24:93:4c:93:b6:17:09:90:05:a3:33:
42:18:ea:de:e1:c4:9f:43:6d:72:31:d3:ad:ae:5e:
58:50:83:08:3b:c2:05:bc:1b:5b:0a:93:68:98:59:
e5:47:2b:5c:0f:40:86:1e:88:de:95:3d:0e:0c:45:
65:1a:21:03:d8:63:9f:a1:bc:3d:23:96:a9:37:c6:
da:96:68:70:c3:dd:dd:9b:39:62:15:9f:0d:80:d4:
e5:8d:f3:b9:9c:3d:b8:1c:56:0f:5b:ae:de:d1:a3:
9e:36:79:02:18:6d:23:89:23:70:70:f3:12:ec:e4:
d5:f6:f8:f0:03:7a:c3:b1:df:c4:6a:21:cd:eb:a2:
0d:c9:9b:08:ee:de:22:f3:19:68:9c:89:5b:81:f2:
3a:74:36:75:3b:f3:8d:b5:ac:74:16:f4:97:ed:a7:
ff:66:e0:84:1e:86:8c:9b:31:bd:4a:a9:4e:61:c5:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:03:AE:2A:CD:29:30:B6:E7:F8:3F:35:F5:B7:4B:F7:87:3B:0D:9D
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/6QOuKs0pMLbn-D819bdL94c7DZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.33.0/24
Signature Algorithm: sha256WithRSAEncryption
40:bb:07:b5:4b:00:69:e3:93:6a:6d:05:d2:72:c3:43:82:3c:
7f:a2:d8:2c:83:a8:60:e6:e9:6a:d4:91:53:6c:4a:5e:75:95:
5e:d2:0c:70:82:d9:77:49:7a:fe:c9:b3:70:db:cd:39:30:7c:
a5:bf:70:b9:7e:07:88:51:be:ea:3b:f6:34:40:aa:81:07:dd:
fd:b9:2c:67:e5:f3:42:1b:2f:7b:f2:e7:83:61:7a:ad:67:e6:
d6:be:db:cc:ee:cb:b4:1d:bc:c8:3b:5b:85:0b:da:26:4f:12:
a9:35:b2:7f:bc:ac:51:05:d7:5f:df:8d:ad:55:30:f0:70:24:
5a:2e:31:0c:b5:d0:0d:f2:e0:ac:6c:c0:50:3e:c8:41:a9:74:
da:56:c8:d9:90:23:cb:92:97:5d:3e:c5:26:5b:60:87:1e:ba:
40:9e:5b:46:c4:9c:fa:5e:ac:7a:61:74:93:0a:4c:58:05:24:
ac:cb:d8:aa:ee:43:f1:46:ab:5e:63:bc:2d:67:48:ab:6a:a3:
14:d0:ee:02:60:e0:3c:6e:7c:d2:a8:ab:df:9c:96:4a:49:29:
fa:18:95:2b:85:00:91:54:8d:d1:cd:ef:d7:7a:4e:82:f1:1a:
49:a3:1a:40:93:3a:b0:5e:dd:29:cc:4a:41:0c:fa:f3:ae:8e:
f3:3b:82:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 10:13:38 2024 by rpki-client on console-ams.rpki-client.org