Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/dRK-a_9SSk-WTT8ueZl-utOUfXc.roa
File: dRK-a_9SSk-WTT8ueZl-utOUfXc.roa (raw, json)
Hash identifier: RLojpCeaDVQGFrsJ5NqKfrcV9lXjCDxYRgSKu4UbcRc=
Subject key identifier: 75:12:BE:6B:FF:52:4A:4F:96:4D:3F:2E:79:99:7E:BA:D3:94:7D:77
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 01931F11A4256FF86DB7FE1C1103C1FD3328
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/dRK-a_9SSk-WTT8ueZl-utOUfXc.roa
Signing time: Tue 12 Nov 2024 06:31:10 +0000
ROA not before: Tue 12 Nov 2024 06:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3758
IP address blocks: 212.124.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1f:11:a4:25:6f:f8:6d:b7:fe:1c:11:03:c1:fd:33:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Nov 12 06:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7512be6bff524a4f964d3f2e79997ebad3947d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:0a:b6:2a:c9:d8:19:a7:84:2c:3a:6c:4a:
ff:e4:58:7c:70:da:fd:6a:50:e9:32:f4:6e:35:f6:
92:81:2e:aa:26:da:60:1d:b4:b7:07:47:cb:eb:0d:
ce:f9:52:17:25:19:93:f3:a6:c8:b2:ac:43:9d:c3:
d5:97:27:a8:f7:61:47:a1:30:80:7d:1a:2c:12:72:
91:a3:88:3f:23:3f:4f:3c:66:d2:33:40:a7:3d:e6:
3a:65:d5:b1:e8:a1:73:eb:84:37:ee:cc:04:1f:1d:
69:df:2e:66:46:65:9f:55:f4:cc:35:62:47:ae:79:
34:32:6f:6f:12:f7:30:ec:d9:44:eb:d6:9d:4e:5c:
59:9f:32:05:9b:6a:42:50:3b:42:d7:19:bd:68:58:
65:9e:ce:73:98:a2:58:bb:27:fc:73:2b:8b:40:34:
e6:c9:2c:52:fd:21:4e:ae:93:4b:4f:fa:c0:9a:af:
72:30:8a:97:7f:fa:aa:0e:f5:c9:ab:4f:ca:0e:c3:
19:f3:b5:8d:cf:d7:51:57:51:14:56:c5:34:96:23:
9f:2f:92:a6:f7:00:7d:7d:8e:4a:cf:9d:11:5f:54:
24:6c:d3:78:b2:24:37:f1:40:3b:75:fd:23:55:d3:
28:95:fe:89:d2:c6:a1:33:be:90:85:bb:74:ef:43:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:12:BE:6B:FF:52:4A:4F:96:4D:3F:2E:79:99:7E:BA:D3:94:7D:77
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/dRK-a_9SSk-WTT8ueZl-utOUfXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.93.0/24
Signature Algorithm: sha256WithRSAEncryption
38:02:e0:e3:f8:a6:cd:0d:82:82:31:1a:d7:d8:bc:6b:0b:8d:
7d:18:5d:b7:c9:d1:f8:4b:20:9c:5d:be:6d:d6:ca:b2:c6:aa:
da:77:f0:cb:c2:b4:34:e1:b9:50:33:97:5e:6d:82:02:23:50:
f2:3f:ec:73:9a:2d:0d:b6:60:db:0f:93:ae:12:8f:fd:92:b8:
35:f1:5d:bf:f0:09:da:e0:50:1d:35:79:18:08:d7:b6:c5:0c:
95:da:4f:6a:41:54:87:d4:33:05:6d:ae:47:19:0d:0e:46:f5:
f9:7e:ab:29:35:b5:b9:5d:23:9d:69:5b:71:6c:40:7c:18:bc:
44:64:91:15:9a:24:2e:b9:09:b0:e0:c9:92:9b:f8:16:fc:f5:
a2:fd:86:e1:40:17:28:57:b2:c1:8c:1b:65:92:f2:b7:ef:76:
5a:91:f6:e7:af:be:e8:ad:ec:85:12:60:29:a1:31:01:50:f9:
9b:d5:7b:f1:5e:ae:fc:c2:be:c3:2f:3a:9b:be:3b:83:54:bd:
8e:42:44:16:c7:93:3e:0c:85:04:25:89:5a:09:d3:6f:46:22:
31:98:9b:df:68:d8:56:53:9a:38:2b:77:88:e8:1f:4d:69:9f:
69:1d:fc:76:b4:ae:e6:0a:fd:df:2b:91:c2:d6:7b:2d:bc:c2:
97:59:e9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:44:08 2024 by rpki-client on console-fra.rpki-client.org