Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/K0P5wqqKWXQf4_FlQB6fUeMx0n8.roa
File: K0P5wqqKWXQf4_FlQB6fUeMx0n8.roa (raw, json)
Hash identifier: 9ZnbQSU7oESWQV93xi0eKjC1Ihy8uql2EPb0mIzf/w4=
Subject key identifier: 2B:43:F9:C2:AA:8A:59:74:1F:E3:F1:65:40:1E:9F:51:E3:31:D2:7F
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 018CC795329DA94F5798DECF2406F969F586
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/K0P5wqqKWXQf4_FlQB6fUeMx0n8.roa
Signing time: Tue 02 Jan 2024 00:31:32 +0000
ROA not before: Tue 02 Jan 2024 00:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 212.124.68.0/22 maxlen: 24
212.124.72.0/22 maxlen: 24
212.124.76.0/22 maxlen: 24
212.124.86.0/24 maxlen: 24
212.124.88.0/22 maxlen: 24
212.124.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:32:9d:a9:4f:57:98:de:cf:24:06:f9:69:f5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Jan 2 00:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b43f9c2aa8a59741fe3f165401e9f51e331d27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:92:c5:8b:33:f1:eb:fa:7c:f4:14:66:ee:
99:7d:6a:fe:25:81:57:3e:64:4b:d9:fa:0e:45:4d:
05:d7:11:15:79:41:5d:e9:21:c3:fa:17:a2:13:14:
c2:9c:33:5d:a5:c2:d7:42:16:1a:fe:b0:12:d1:53:
ec:11:dc:9b:33:c8:40:a3:d2:b6:3e:30:6f:a1:c0:
8c:11:76:97:0f:1f:ff:92:6e:4c:a8:19:26:71:6c:
1c:40:19:95:d2:32:74:89:44:4c:3e:bf:42:9e:01:
c5:78:30:57:54:b1:16:36:ef:b8:80:ad:e5:ed:0b:
39:c3:90:ae:1a:a7:48:9a:3d:1e:50:b2:29:61:f5:
48:7d:0e:54:34:7e:d4:ce:c9:ca:6d:0a:eb:da:49:
d0:97:88:b8:3c:6f:02:96:d8:3b:24:45:fa:70:cb:
6c:78:20:7b:6c:ed:3b:bb:c4:eb:c1:2f:1b:65:40:
8a:95:e7:0d:ff:70:91:11:77:9f:32:3f:dd:dc:22:
38:4b:c8:70:a4:d0:0a:59:c5:27:e3:6c:c1:00:12:
bc:20:96:cc:aa:28:da:93:3a:f4:88:94:7c:61:15:
a3:a9:92:f1:a5:39:95:77:a3:a2:e3:ef:b8:83:fa:
21:03:6f:3a:d2:81:9c:28:cf:10:d4:fb:87:b4:52:
c5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:43:F9:C2:AA:8A:59:74:1F:E3:F1:65:40:1E:9F:51:E3:31:D2:7F
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/K0P5wqqKWXQf4_FlQB6fUeMx0n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.68.0-212.124.79.255
212.124.86.0/24
212.124.88.0-212.124.92.255
Signature Algorithm: sha256WithRSAEncryption
7b:6b:b1:7e:3b:bd:f6:df:29:c7:e9:ce:80:98:26:3c:c7:55:
a3:08:60:f2:53:bf:48:2c:4d:62:3c:39:70:a3:c2:42:47:28:
a2:87:9a:72:10:1a:31:5d:d3:ad:e3:0d:61:86:d5:cc:c9:29:
a4:54:af:32:f0:60:fa:cd:30:41:55:fa:3f:71:ef:48:b3:46:
d4:cb:49:fe:4d:d6:0b:a9:59:cd:bf:39:9a:c7:17:2d:ff:2f:
9f:b3:5c:a8:93:be:3e:33:48:68:af:1a:6f:42:1a:38:de:90:
5c:cf:c6:42:8e:03:93:d9:c0:6a:f1:3a:39:a9:92:15:26:4b:
ae:5f:ea:91:7a:84:71:58:d1:14:13:2a:00:de:4e:a2:38:ce:
39:ed:25:79:cc:a3:02:41:75:4b:10:5a:8f:fa:89:8f:06:90:
e9:a9:4e:a3:d0:29:fa:0d:ac:98:7c:37:a3:23:5d:ca:d0:10:
f0:8e:af:80:56:24:cd:ca:25:0d:4a:77:23:98:b3:ca:38:ea:
af:3e:c0:1d:f5:2f:ab:ce:b3:b0:83:06:aa:39:b0:bb:20:71:
aa:7c:55:5e:20:dc:66:42:55:21:40:39:5b:6f:28:70:17:50:
89:c9:d7:9b:5b:96:17:7d:38:a4:ce:2a:66:b1:f4:99:f0:5f:
64:ac:f6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 01:04:27 2024 by rpki-client on console-fra.rpki-client.org