Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D3OZtDD9V9qXT-GLPGnB3wPNZp4.roa
File: D3OZtDD9V9qXT-GLPGnB3wPNZp4.roa (raw, json)
Hash identifier: bHKYfAW+bXloN0syIdjcl3mBIlEQJhNb34qowk2mEOE=
Subject key identifier: 0F:73:99:B4:30:FD:57:DA:97:4F:E1:8B:3C:69:C1:DF:03:CD:66:9E
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348E0A1E69E6DE133A98E98E36C22C2
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D3OZtDD9V9qXT-GLPGnB3wPNZp4.roa
Signing time: Mon 01 Jan 2024 04:29:42 +0000
ROA not before: Mon 01 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202855
IP address blocks: 212.243.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e0:a1:e6:9e:6d:e1:33:a9:8e:98:e3:6c:22:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f7399b430fd57da974fe18b3c69c1df03cd669e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c5:37:cc:58:f8:a4:7e:20:ba:81:e0:64:3f:
2e:9d:b0:3b:7e:71:9c:c6:00:53:2f:5a:0b:13:81:
0e:d9:67:0a:11:b5:ae:2c:13:b4:17:38:e3:e1:d8:
93:f4:c1:63:25:11:5c:97:54:27:83:68:c9:e9:74:
e3:25:9e:02:10:ff:c0:51:80:c2:99:72:ea:d9:ea:
d9:87:22:42:7d:f1:28:06:68:91:df:d3:fe:21:14:
41:3b:28:98:79:5f:5a:e9:da:7e:cc:99:95:2c:46:
0f:f4:46:14:0f:46:9c:29:f6:e0:f8:74:47:69:f0:
97:13:a2:f7:6a:d8:9e:0d:ab:8b:33:27:4e:13:9b:
14:07:cd:76:fb:32:f0:e7:a5:af:11:7e:e0:c5:5c:
e1:94:f5:61:3a:3d:fc:98:84:26:32:64:d2:32:72:
e5:cb:66:f8:f9:1f:72:7a:b8:a2:66:cd:e4:a1:cc:
43:41:74:81:60:05:db:a0:df:bb:a6:8f:63:45:a3:
cc:24:58:42:f7:cf:3d:26:29:80:0a:d6:cf:83:63:
5a:ea:f2:b4:98:3e:39:cc:f0:2a:53:fd:d8:14:cf:
2d:21:6b:46:63:f7:ca:7a:8f:6d:ed:f5:fc:d7:89:
70:d4:5c:89:d2:10:e6:96:ba:19:73:83:e2:83:f5:
71:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:73:99:B4:30:FD:57:DA:97:4F:E1:8B:3C:69:C1:DF:03:CD:66:9E
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/D3OZtDD9V9qXT-GLPGnB3wPNZp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.122.0/24
Signature Algorithm: sha256WithRSAEncryption
26:de:c0:42:55:e1:b7:fa:a6:d6:d5:46:9a:53:42:59:02:4c:
cb:5a:2d:a3:e6:d5:60:02:44:ec:20:d7:6f:01:4a:a2:fc:f3:
23:e9:a9:fa:17:d3:d1:e2:00:56:1b:40:22:31:73:f6:9b:3e:
95:84:7f:34:80:d8:4c:ad:a9:9c:8f:b4:91:53:35:3c:c7:92:
2e:7b:9f:ab:58:a4:23:70:2b:24:b8:03:65:88:08:c4:22:ab:
ea:69:ec:0f:54:3c:a2:83:a0:9a:69:d2:dc:90:0e:6d:51:f8:
c1:f4:d4:23:16:b0:4a:74:e5:06:2d:af:34:48:52:ca:b5:3b:
79:89:bb:36:42:93:ea:2a:41:dc:f2:4b:90:26:18:3e:6b:f2:
01:23:30:64:08:68:14:c2:42:58:55:d5:1e:70:af:09:c5:ef:
1d:73:7b:42:9d:8f:dd:6a:0e:a6:a5:9c:77:16:26:fa:a5:1b:
3e:a2:7b:66:81:41:3f:aa:b3:f4:44:01:16:da:cb:13:cb:3b:
56:cd:3f:f8:8d:f9:29:ff:08:b7:42:ea:11:7d:fe:d0:fd:ca:
b1:fe:54:b7:b0:45:c3:ca:4c:3a:34:0d:72:c6:67:98:00:10:
93:d1:69:06:61:00:a1:09:82:1f:86:d7:67:d1:cd:25:82:36:
cc:4a:3b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:29:58 2024 by rpki-client on console-ams.rpki-client.org