Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sLEd9gw3Cnc-dP_o0hcvG9TtTvU.roa
File: sLEd9gw3Cnc-dP_o0hcvG9TtTvU.roa (raw, json)
Hash identifier: 6mufQy5yZrCTdP7SwLkLHcojhPAOojkPxUzgvIrfZJo=
Subject key identifier: B0:B1:1D:F6:0C:37:0A:77:3E:74:FF:E8:D2:17:2F:1B:D4:ED:4E:F5
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348DE90DE516D71FBC5E1D41334137A
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sLEd9gw3Cnc-dP_o0hcvG9TtTvU.roa
Signing time: Mon 01 Jan 2024 04:29:41 +0000
ROA not before: Mon 01 Jan 2024 04:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199225
IP address blocks: 212.243.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:de:90:de:51:6d:71:fb:c5:e1:d4:13:34:13:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0b11df60c370a773e74ffe8d2172f1bd4ed4ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:22:38:11:21:04:44:79:73:5b:c9:ac:83:
aa:89:60:86:ea:4c:74:ae:e1:dd:11:e0:0f:02:46:
26:11:65:dd:8c:1d:d1:7a:0b:5e:e9:1d:41:7d:6a:
48:ab:3c:13:fb:5a:91:c7:a6:a7:7f:bc:04:83:9e:
fa:d8:c4:57:27:75:54:ba:76:e3:c0:98:79:0d:36:
99:e1:b6:fe:9c:d9:1e:6b:c3:a8:9c:4e:20:ef:fd:
4b:c8:53:f0:49:fe:2e:45:1d:69:ba:4c:63:dd:4f:
aa:1c:be:cc:31:1b:0f:ba:88:97:1f:f2:e4:bf:18:
98:05:27:f2:f4:85:48:db:03:07:6b:dd:33:ed:c9:
99:8a:71:12:b4:67:e3:8b:6f:7f:96:54:80:d9:ec:
a6:11:66:f8:8b:9f:2c:09:06:b8:02:2f:1d:06:1a:
c6:60:08:91:1a:69:81:18:d0:a5:87:bd:ad:4d:f6:
9b:d8:5a:6c:b1:ea:a1:e9:14:e4:ab:29:24:6a:b5:
9f:10:45:2e:d8:d1:66:39:b2:81:c8:4e:15:c3:cd:
aa:b2:a5:29:38:3e:de:e5:a3:7c:80:73:81:fd:00:
ff:e7:4f:4e:df:48:a9:99:92:fb:2e:32:09:80:f2:
c2:3b:ba:52:38:2c:00:b2:d0:97:a7:7e:40:34:59:
88:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B1:1D:F6:0C:37:0A:77:3E:74:FF:E8:D2:17:2F:1B:D4:ED:4E:F5
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sLEd9gw3Cnc-dP_o0hcvG9TtTvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.123.0/24
Signature Algorithm: sha256WithRSAEncryption
77:36:79:c2:c1:27:18:41:fe:bf:b1:8c:e7:48:74:d9:3c:2e:
74:f8:2c:dd:42:54:8b:a7:2b:f9:99:2e:8b:71:47:d1:88:09:
22:eb:82:72:6a:b3:01:1d:26:83:b4:b1:77:74:e9:fc:fa:a2:
ce:0d:3d:54:95:c9:2b:30:f2:9b:4d:f1:21:5b:85:7c:48:58:
9e:d6:67:42:2e:f1:e5:b8:ff:34:99:82:bf:79:b5:11:bf:e9:
6d:5c:90:cd:59:f7:de:74:83:8e:41:2a:e7:92:56:34:5e:14:
61:c4:82:59:ed:48:fa:8e:4e:19:2a:e3:f1:d2:a3:00:17:dd:
e4:bf:3a:a2:a0:d7:67:c8:a2:c1:22:04:d3:d6:f6:7d:a4:f8:
fb:f2:15:d4:cf:33:be:a7:c9:71:46:22:6a:b4:6b:bf:fe:22:
74:57:c8:77:90:55:f3:c0:62:9a:97:0d:af:dc:ec:a4:98:a3:
39:7e:c9:e8:91:fa:b0:45:a3:a3:59:43:d3:cc:df:ef:ca:04:
12:7e:d7:9e:d9:16:fa:a8:d1:11:6d:a7:ea:38:2a:cb:d4:5d:
83:52:f2:ee:63:0e:0d:0f:d9:a6:c0:09:c5:3a:d8:ce:9f:d2:
c6:fc:d4:ec:c9:e8:c4:5e:83:c9:20:83:73:f0:bd:b7:82:7c:
34:49:e1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:32:35 2024 by rpki-client on console-ams.rpki-client.org