Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/tOCs5BAmvAZQ30zLPXQHfcHrxv8.roa
File: tOCs5BAmvAZQ30zLPXQHfcHrxv8.roa (raw, json)
Hash identifier: AzqM6wWQlMUtB279kXWNeUT+zpu4/VwNDC8cyaz9zXU=
Subject key identifier: B4:E0:AC:E4:10:26:BC:06:50:DF:4C:CB:3D:74:07:7D:C1:EB:C6:FF
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 019346C7A8350AE9BACBF7C99FEC556E04A6
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/tOCs5BAmvAZQ30zLPXQHfcHrxv8.roa
Signing time: Tue 19 Nov 2024 23:35:10 +0000
ROA not before: Tue 19 Nov 2024 23:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15731
IP address blocks: 212.23.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:46:c7:a8:35:0a:e9:ba:cb:f7:c9:9f:ec:55:6e:04:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Nov 19 23:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4e0ace41026bc0650df4ccb3d74077dc1ebc6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:9d:a4:31:80:06:4d:49:87:33:eb:4a:54:
ff:61:e6:0c:dd:c1:6d:50:17:d9:f1:df:26:39:eb:
7b:86:29:6b:28:c9:48:00:e8:18:3d:0f:b3:6b:d5:
b3:1c:16:58:c9:37:c1:9e:97:0c:92:bb:12:ab:58:
c1:2b:a2:0f:76:97:d9:e3:7e:8f:a3:16:66:e5:16:
e9:40:54:02:3d:3d:38:03:0e:fc:59:8e:ba:93:bb:
09:f2:7a:85:fd:b6:22:75:5e:c1:e3:38:29:d9:99:
57:31:cd:bb:71:3f:1b:9c:a2:d1:4f:a4:ef:71:d7:
27:33:72:99:e6:7e:b6:cd:dd:b8:9f:b3:34:63:07:
0b:ed:1e:50:8e:c7:36:26:db:17:4b:30:53:fa:fe:
b2:ae:87:13:2c:8a:34:70:cf:5d:7f:a9:e3:44:7d:
cd:14:b0:46:eb:53:5b:b7:3a:2b:6e:6b:ef:5e:7f:
bd:ae:af:7f:bc:c7:8d:33:8b:6a:1c:d1:68:b9:e5:
5c:b8:9c:a5:ae:46:ec:19:7a:13:92:0f:ac:b5:d6:
96:e2:5b:58:5a:d8:1d:1b:48:24:c7:f7:8f:be:85:
ea:fa:49:92:97:65:c4:f4:ca:05:cf:0d:57:d2:cd:
4e:f4:66:27:64:ba:b7:df:53:4e:50:a0:74:24:62:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E0:AC:E4:10:26:BC:06:50:DF:4C:CB:3D:74:07:7D:C1:EB:C6:FF
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/tOCs5BAmvAZQ30zLPXQHfcHrxv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.210.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a0:a9:ff:51:1a:af:5b:4a:02:15:b1:a6:30:c4:7e:ae:f0:
72:a7:3b:0c:bd:97:56:cb:cd:e6:f5:97:f7:c7:f2:4c:fe:a5:
72:36:1f:4e:27:5d:de:c9:98:52:fc:53:78:96:07:77:4d:7b:
66:bf:c9:64:e0:51:c6:5a:43:a2:3f:ea:7c:88:82:26:f7:05:
f5:cc:8d:42:f6:ca:d4:0f:d9:00:55:13:3f:79:45:97:d6:2c:
b6:ff:f7:fa:d4:84:58:a4:84:e1:7e:24:cf:f5:61:eb:50:02:
0d:0e:77:5b:5c:76:49:49:8e:72:87:cf:bf:8d:3e:f1:c4:6a:
c2:09:0d:09:21:3d:d0:d0:b6:64:8d:38:eb:7c:20:24:cc:d2:
f4:60:44:01:d6:4f:68:fa:dc:44:40:97:28:0b:ed:ee:fc:79:
b0:c6:ac:c6:1e:2a:d3:ca:16:b6:77:50:22:f3:13:0d:d0:8c:
8f:0d:fc:96:cf:7e:13:7c:cc:c1:82:64:69:3f:8a:8c:76:59:
4a:8d:ae:8c:2d:9d:a1:62:16:c6:04:e4:62:77:e4:67:1b:fd:
47:63:2a:d6:1d:3e:66:16:4e:17:e6:5d:dd:b9:d6:47:e6:5c:
8e:30:99:38:c2:b0:40:b3:f9:08:83:e5:58:4a:9a:d3:13:b8:
3b:d6:df:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:55 2024 by rpki-client on console-ams.rpki-client.org