Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/k6BSoLeif0h-pw0EVZPjP5ln_is.roa
File: k6BSoLeif0h-pw0EVZPjP5ln_is.roa (raw, json)
Hash identifier: K3+VONp8l7M2CDHzeWYVNMQbg6xeiDi/D+/b38Lzpmo=
Subject key identifier: 93:A0:52:A0:B7:A2:7F:48:7E:A7:0D:04:55:93:E3:3F:99:67:FE:2B
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0192F8B93A3440BD97D39B4E85E465DF2F86
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/k6BSoLeif0h-pw0EVZPjP5ln_is.roa
Signing time: Mon 04 Nov 2024 19:49:01 +0000
ROA not before: Mon 04 Nov 2024 19:49:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207456
IP address blocks: 212.30.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f8:b9:3a:34:40:bd:97:d3:9b:4e:85:e4:65:df:2f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Nov 4 19:49:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93a052a0b7a27f487ea70d045593e33f9967fe2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:2c:12:b8:2d:0d:a5:fd:6d:d5:a1:ad:7f:
a5:4d:cb:af:32:f7:eb:ea:32:c9:84:48:85:a5:3f:
2c:e1:10:e7:e7:08:8a:dc:39:30:6d:c9:e8:43:90:
fd:da:d1:60:e2:32:4f:e0:1b:5a:1f:46:14:08:ee:
8a:d2:fb:48:02:0a:c0:e9:33:9d:d4:fe:bb:5f:df:
54:ad:e1:e7:e0:d7:e3:94:01:81:2d:f7:8b:11:dd:
dd:c0:5c:10:06:24:2f:df:3b:4c:04:fb:ae:fe:38:
71:6f:fd:3e:1c:e7:06:58:78:15:33:1c:14:95:6d:
39:e8:70:2d:93:b8:ec:01:62:9a:95:d9:06:e7:a9:
fa:8d:a8:05:5f:e5:d7:0c:e6:86:76:19:1f:8c:25:
04:8c:55:3b:b6:73:c7:52:b1:e1:58:21:54:6d:69:
88:03:b9:72:07:e3:7f:65:9a:df:a6:f0:e7:da:0f:
fa:b9:84:1d:33:8f:c1:8f:0e:44:7d:de:17:96:1d:
07:1a:65:02:0e:96:41:f6:5c:5b:35:b3:5b:54:75:
c2:ff:00:e4:7a:40:3c:a3:8c:e3:b5:6b:10:7f:59:
c3:c9:b6:25:e6:dd:90:93:a5:f7:b3:d2:f2:ac:31:
68:8c:07:c2:59:48:ea:36:62:c1:73:3e:a1:af:af:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A0:52:A0:B7:A2:7F:48:7E:A7:0D:04:55:93:E3:3F:99:67:FE:2B
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/k6BSoLeif0h-pw0EVZPjP5ln_is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.30.48.0/22
Signature Algorithm: sha256WithRSAEncryption
98:8d:94:0a:8f:55:e7:3c:d7:d5:fe:48:00:8e:c8:4b:2b:b3:
6e:26:a0:63:b7:ca:27:16:1b:97:45:57:bd:eb:8b:5f:98:02:
14:c9:61:25:e8:45:23:bf:4f:35:2c:ca:d4:2e:a8:9b:3a:93:
5f:1e:54:91:48:8f:82:1b:74:f0:8b:e2:7a:dd:89:2c:d1:6c:
66:77:d6:c0:f9:f1:92:c2:49:3f:e9:28:a5:37:b9:82:95:40:
dd:d0:32:ad:de:cf:4a:0f:ce:73:6f:37:7c:39:b7:73:a9:7c:
69:e9:23:f3:a4:26:d0:6e:43:ae:c2:1c:55:b9:70:1c:cb:a8:
b9:04:7a:ca:54:60:75:ac:4a:66:ee:ad:27:a7:9e:ca:a7:3b:
9a:2e:e4:58:77:29:bc:31:08:73:57:39:d8:e3:08:91:f4:f9:
9d:3f:5a:62:15:b3:6f:08:56:84:b3:8b:44:8b:da:35:fd:9b:
c9:8d:c1:6a:d0:6d:5a:3e:56:8a:10:aa:3f:12:cf:b3:39:2d:
41:bc:56:b4:99:1f:ec:76:fb:ac:b1:79:c8:e8:b2:b1:65:2e:
86:2f:90:c8:f9:9f:10:49:1c:d6:ac:07:af:d4:11:fc:74:48:
af:bd:77:06:24:ec:9f:0f:73:fd:c8:c1:1f:fd:ed:2f:15:0a:
5e:d1:64:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:31:07 2024 by rpki-client on console-fra.rpki-client.org