Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/0u2sQt8PK_0-FMApdIithVvyQ4I.roa
File: 0u2sQt8PK_0-FMApdIithVvyQ4I.roa (raw, json)
Hash identifier: qne0t8Jt7NcQqUmJxqzwxwD+svtQjOqPRkh9+LLEyQc=
Subject key identifier: D2:ED:AC:42:DF:0F:2B:FD:3E:14:C0:29:74:88:AD:85:5B:F2:43:82
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 018CC795337517B5138433C121A4DF6AAAF1
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/0u2sQt8PK_0-FMApdIithVvyQ4I.roa
Signing time: Tue 02 Jan 2024 00:31:33 +0000
ROA not before: Tue 02 Jan 2024 00:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47377
IP address blocks: 212.124.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:33:75:17:b5:13:84:33:c1:21:a4:df:6a:aa:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Jan 2 00:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2edac42df0f2bfd3e14c0297488ad855bf24382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:34:a7:3e:12:d3:b6:7b:b7:41:0b:1c:bf:
67:09:28:2b:cb:da:f5:cf:75:df:6f:97:38:4e:5e:
df:a2:2c:1a:54:90:b3:0d:e4:f3:7f:b6:c7:d6:58:
8e:ff:a6:8e:97:47:cd:a5:55:89:02:2b:80:03:51:
33:03:f2:16:3b:78:e5:b5:39:bf:28:b6:29:90:08:
ca:2a:41:a5:c3:91:ae:dc:b9:46:15:3d:b0:ff:b6:
80:f3:20:20:b3:b0:a4:8c:19:17:c3:99:d8:e6:09:
25:fd:ea:69:1e:f0:f4:6d:33:32:6b:59:be:c2:7f:
fc:a3:f7:61:94:e3:9d:e4:26:98:b1:c6:cf:39:3f:
9e:7b:f0:3e:74:4b:06:97:2a:88:6e:b9:4c:02:0d:
8e:90:a6:0a:c7:36:f3:2b:f8:85:ef:6f:bc:84:de:
7c:db:1d:ca:88:af:72:34:4a:57:b1:9d:e5:3a:84:
1f:10:37:bb:82:af:88:47:3d:17:9c:e8:c8:b7:79:
2a:69:5a:8e:15:8b:1d:d5:78:f0:c2:44:aa:28:10:
81:a0:32:c6:b0:fc:15:48:be:e8:5a:7c:69:c7:9e:
70:4f:41:8b:97:5f:a7:97:06:7c:de:cb:6b:73:61:
71:15:9c:3e:70:30:51:96:49:55:cd:c6:98:66:02:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:ED:AC:42:DF:0F:2B:FD:3E:14:C0:29:74:88:AD:85:5B:F2:43:82
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/0u2sQt8PK_0-FMApdIithVvyQ4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.94.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:2b:c9:d8:37:16:f7:02:e5:bb:cf:81:e1:ac:28:16:30:df:
43:a5:0a:29:df:de:98:a4:21:1c:6c:93:4d:48:ec:18:40:11:
42:05:2c:01:81:a4:f0:52:56:08:47:4d:20:28:84:b3:15:63:
e2:ce:21:04:d0:1a:10:9b:62:63:29:b0:27:31:28:8e:ab:e9:
07:57:85:9a:0e:73:d1:04:05:1c:ba:b2:93:a5:42:31:2b:8a:
02:14:a2:1c:e1:96:4a:48:3a:78:df:7f:97:32:e4:58:7e:44:
49:24:9d:15:c1:0b:bb:ca:f1:f8:75:91:b5:42:2d:35:23:0a:
cf:c5:25:41:32:f2:fc:dc:ee:7a:1b:f6:32:56:bb:5f:be:57:
99:60:f6:99:75:a0:da:24:2e:b8:dd:20:a5:0e:89:01:f7:af:
18:5b:45:2a:a4:5a:f2:01:9a:2c:53:bc:fb:98:a3:aa:5b:92:
c0:c0:a8:cf:3f:d5:46:41:1a:21:9e:d3:4f:02:c5:5f:3c:e3:
d3:71:99:ed:fe:34:f6:3e:38:29:c7:b0:98:06:21:cb:84:9b:
7c:b9:3b:60:2c:53:91:8b:90:a6:7c:0f:e9:f7:93:43:4f:06:
02:7c:f1:32:ed:c1:29:47:f0:09:2d:5a:38:fa:22:b7:ec:0c:
7b:5f:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 17:05:03 2024 by rpki-client on console-fra.rpki-client.org