Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/dZ9McYkd7xtfT5OK8itfoLx_aKk.roa
File: dZ9McYkd7xtfT5OK8itfoLx_aKk.roa (raw, json)
Hash identifier: JAjXwKI1Oh/qzgGnK44XPDJpgJ9Pv1IGhMDWq3KvmvQ=
Subject key identifier: 75:9F:4C:71:89:1D:EF:1B:5F:4F:93:8A:F2:2B:5F:A0:BC:7F:68:A9
Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial: 018E9E526A9A513325627B4E6EF60E697206
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/dZ9McYkd7xtfT5OK8itfoLx_aKk.roa
Signing time: Tue 02 Apr 2024 10:19:45 +0000
ROA not before: Tue 02 Apr 2024 10:19:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8903
IP address blocks: 212.31.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:52:6a:9a:51:33:25:62:7b:4e:6e:f6:0e:69:72:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Validity
Not Before: Apr 2 10:19:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=759f4c71891def1b5f4f938af22b5fa0bc7f68a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:a2:8b:be:42:18:6e:98:d6:88:72:30:bd:
c6:15:d2:50:8b:22:bb:5f:4a:da:f6:1a:74:3b:d5:
a0:1e:0e:de:30:ab:08:b5:97:f7:11:da:3e:e7:af:
db:45:8b:94:4c:66:af:1d:a0:87:97:11:6f:a7:06:
26:30:f4:05:60:4e:b3:c4:1a:92:2f:05:d0:bf:84:
ea:78:fd:65:a2:d6:84:33:4a:b2:4f:58:03:4b:69:
49:8e:8d:3c:d3:35:f2:59:e3:71:62:af:90:fe:df:
5e:38:5f:98:72:ba:77:0e:38:1f:e6:0f:77:d7:ed:
46:69:86:bc:a2:39:90:8b:c1:2c:6b:7c:7e:9c:35:
c4:07:21:8b:f7:fb:07:2d:b7:44:48:a7:00:ce:fc:
b3:7f:d2:9c:44:77:a4:08:55:30:6b:2c:32:2d:32:
2b:f5:a0:e5:33:bc:89:41:46:32:27:07:3f:8e:4b:
af:4c:5f:26:05:6e:41:79:de:46:12:c6:6e:62:24:
84:8d:ae:e9:9c:70:16:20:15:84:9e:7e:19:d1:ae:
80:ed:13:dd:26:51:28:ef:8e:10:5f:5e:63:84:35:
5e:35:00:63:7a:c1:71:19:b2:fa:b1:9b:83:60:83:
fb:d7:2a:f6:8f:98:c3:0c:da:04:8d:81:65:63:09:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9F:4C:71:89:1D:EF:1B:5F:4F:93:8A:F2:2B:5F:A0:BC:7F:68:A9
X509v3 Authority Key Identifier:
keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/dZ9McYkd7xtfT5OK8itfoLx_aKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.31.198.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:46:1e:84:24:b8:3d:31:fa:78:81:c8:d7:ad:c5:48:18:47:
5d:11:1d:34:9f:86:7e:d6:e6:d0:30:dc:26:b3:66:d6:76:f6:
fa:88:0f:c0:63:0d:85:e4:38:c7:73:9b:f9:ca:4f:b3:70:a0:
fc:8b:d1:b0:93:15:b8:7a:81:8d:ef:07:da:86:c4:87:3a:84:
4d:6f:78:b7:8a:c2:29:5b:db:c0:cd:d8:24:78:ef:9f:8b:71:
76:1f:51:c0:7f:88:83:e4:fd:6d:b7:19:17:78:07:2c:44:69:
22:ee:c5:39:ff:e8:42:68:39:83:19:2a:05:35:5e:71:87:41:
12:80:1f:0f:d1:7b:24:d3:b7:01:3f:8e:4b:6e:a1:44:2c:42:
41:2e:fb:89:74:eb:ae:ae:c3:e9:b9:6a:b3:dc:97:29:d4:71:
d0:a8:8b:9b:a0:cb:8d:b4:92:d1:5d:d6:9c:69:52:88:bd:39:
d7:bf:a3:83:be:7e:d0:44:7f:cc:ef:0c:9e:9b:19:cd:2b:59:
eb:aa:eb:45:fc:d4:48:50:d9:d8:d9:cf:27:c5:c2:1b:c5:97:
c7:de:ac:90:b1:d6:df:5b:49:ae:90:4c:60:39:a0:c3:54:18:
60:5b:62:b9:ea:9b:7a:bc:c1:a3:ce:10:7a:8a:54:5d:f7:0a:
10:bf:3e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:14:52 2024 by rpki-client on console-fra.rpki-client.org