Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/12FsXrmH9-bfCTlhv3Qf_3UxmZw.roa
File: 12FsXrmH9-bfCTlhv3Qf_3UxmZw.roa (raw, json)
Hash identifier: cDtomj2BSjjr1Z4pEbSpozAxQ1N5yvEuHQLkPM/6sRk=
Subject key identifier: D7:61:6C:5E:B9:87:F7:E6:DF:09:39:61:BF:74:1F:FF:75:31:99:9C
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 0192BEFF057962B8ADFA08EDF138F4183B26
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/12FsXrmH9-bfCTlhv3Qf_3UxmZw.roa
Signing time: Thu 24 Oct 2024 14:47:16 +0000
ROA not before: Thu 24 Oct 2024 14:47:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57903
IP address blocks: 213.109.52.0/22 maxlen: 22
213.109.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:ff:05:79:62:b8:ad:fa:08:ed:f1:38:f4:18:3b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Oct 24 14:47:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7616c5eb987f7e6df093961bf741fff7531999c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:67:08:97:65:da:02:13:b4:de:81:e9:e3:da:
18:3b:0e:3f:2a:71:d8:ad:0b:5c:46:80:2f:6d:13:
41:49:64:e7:c0:c5:ee:cb:04:04:ce:aa:17:92:72:
00:86:bf:15:db:56:38:23:ec:af:97:26:e5:8c:9a:
86:e0:57:7b:11:49:8a:a0:fc:3a:1d:3a:be:7f:32:
ae:3c:f8:5b:5b:d9:a0:e8:5e:2a:2f:4d:25:ce:36:
70:70:51:1b:2c:d0:cf:4f:06:ba:b6:f0:2f:9b:5e:
b9:ea:a9:2f:03:a8:cf:46:42:fa:d6:ba:82:3a:f0:
b6:3a:75:f7:56:4c:2a:ba:6a:53:fb:75:62:9e:39:
80:52:9c:75:02:9b:6d:ef:36:09:28:5f:f5:8a:b4:
82:01:f1:1a:39:eb:2b:b3:cb:2c:b1:10:52:bf:5e:
3e:1e:4c:ec:9d:64:01:65:af:17:00:af:f0:ee:00:
ab:d1:3e:0d:93:91:94:66:29:c3:dd:7e:09:97:41:
cd:20:5c:f3:99:09:6f:60:7e:a1:e1:3d:7c:aa:62:
7b:6b:dd:9e:8d:8b:71:d3:ff:6e:89:94:aa:f6:29:
21:13:cf:31:ef:2f:d3:4a:03:9a:86:75:41:bb:07:
b0:a0:70:75:95:33:04:5b:44:93:31:43:a0:00:10:
bf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:61:6C:5E:B9:87:F7:E6:DF:09:39:61:BF:74:1F:FF:75:31:99:9C
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/12FsXrmH9-bfCTlhv3Qf_3UxmZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.52.0-213.109.63.255
Signature Algorithm: sha256WithRSAEncryption
a2:1b:0b:8b:5a:c2:5d:9f:19:0c:30:4e:c7:0b:0a:ec:30:d8:
56:fb:03:91:51:5e:07:44:42:fd:da:a3:64:36:0c:1d:cc:80:
87:62:88:d1:a9:9a:b0:d2:ac:38:e1:d9:ae:ec:55:7e:40:bd:
59:a0:66:b2:4b:37:ea:ea:ce:1d:0f:bf:21:d8:46:b0:8b:de:
4c:bd:96:e7:25:85:f2:a2:17:37:f1:40:52:05:92:22:9c:0d:
ab:5e:10:63:a2:b0:e7:ce:49:c5:bd:f3:25:28:20:fa:61:b3:
40:d2:bb:91:45:e6:4f:cf:32:f4:d4:9e:52:88:80:5a:2f:72:
4a:fa:36:27:e0:aa:2c:d7:1a:81:82:41:3b:6c:d6:79:6b:21:
de:bc:07:6f:68:51:20:35:30:e4:ab:66:2d:0c:f3:c7:b4:c7:
5f:c7:69:2d:3b:89:57:78:6e:17:bd:8f:13:70:2d:d7:88:0b:
bf:40:52:de:e5:3c:5f:01:fd:7a:28:84:6f:d3:4d:e9:ff:17:
ef:f6:cf:ed:e9:3b:53:e3:a1:8b:1f:77:57:a1:76:33:04:a1:
5b:bb:d0:e4:72:32:b3:2e:6f:a0:4c:04:54:f6:14:61:09:d0:
c3:1a:1e:77:a3:b2:d9:d5:71:d1:20:5a:63:67:f7:e5:bb:f4:
75:d5:5b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:28:40 2024 by rpki-client on console-ams.rpki-client.org