Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/Y8FSVPxR9JTwhB8dk2pmXzQFP_8.roa
File: Y8FSVPxR9JTwhB8dk2pmXzQFP_8.roa (raw, json)
Hash identifier: 7BhOhiu7GZGe5oGI8gnQp707atsIIudfaVJFI0wn268=
Subject key identifier: 63:C1:52:54:FC:51:F4:94:F0:84:1F:1D:93:6A:66:5F:34:05:3F:FF
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 01931CC2366DB0749B77C175101B13F65FD2
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/Y8FSVPxR9JTwhB8dk2pmXzQFP_8.roa
Signing time: Mon 11 Nov 2024 19:45:10 +0000
ROA not before: Mon 11 Nov 2024 19:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57900
IP address blocks: 212.24.246.0/24 maxlen: 24
212.24.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1c:c2:36:6d:b0:74:9b:77:c1:75:10:1b:13:f6:5f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: Nov 11 19:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63c15254fc51f494f0841f1d936a665f34053fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:79:d7:63:da:47:93:5e:8a:f3:8b:2f:37:
38:7e:2c:30:88:d6:df:9f:c3:a3:aa:d6:d4:7f:de:
b4:0d:d3:70:97:85:37:82:5c:73:24:82:d5:6b:f2:
cd:ec:b4:26:cc:64:bb:07:36:7e:fd:9c:9d:82:15:
aa:78:39:7d:15:9d:ca:ef:dc:5c:20:17:f7:c6:70:
30:83:38:e8:d0:27:4f:0a:58:60:ff:11:43:61:df:
c8:90:2d:16:3b:58:d0:5b:d4:db:58:82:a5:6f:15:
4b:f6:6c:89:cf:b7:bc:86:f6:ef:3f:28:0c:71:29:
ed:a2:42:3b:fc:4d:80:a3:dd:3e:ee:c9:8c:39:55:
2f:4e:d3:ed:7a:cd:8b:0c:33:14:63:10:3e:45:d3:
9b:6a:da:38:22:2e:0f:2c:f6:80:bc:a5:5e:f7:6c:
8d:a3:db:2a:96:16:0d:c7:99:b1:ec:df:a4:eb:c1:
5b:d4:c6:5f:25:71:f7:05:38:c7:5f:1f:06:28:aa:
2e:9f:fb:a1:7d:a8:5d:e5:0f:1a:c2:8d:3f:a9:db:
1f:4a:d6:ac:b6:00:83:03:1a:27:a1:c8:cc:04:1f:
97:a5:fd:59:13:f5:8f:0d:62:e4:e7:9d:fe:41:42:
17:b2:ce:ba:0a:74:ec:8e:63:cb:5d:f9:4d:5a:36:
72:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C1:52:54:FC:51:F4:94:F0:84:1F:1D:93:6A:66:5F:34:05:3F:FF
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/Y8FSVPxR9JTwhB8dk2pmXzQFP_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.246.0/23
Signature Algorithm: sha256WithRSAEncryption
28:de:b4:ab:5b:1d:9e:7f:aa:7f:5b:ec:ea:4c:d6:cd:0e:f5:
c1:fb:b0:d3:30:1b:62:d3:27:f5:45:59:eb:71:1e:6b:cc:46:
bf:56:99:10:03:c7:3c:c9:30:34:78:89:22:47:25:7f:0c:43:
1f:db:bd:6a:ef:e0:74:c2:76:35:5d:d9:85:47:76:4f:d0:a9:
2e:81:af:57:e6:0d:ca:70:31:94:2a:55:88:e1:97:cd:17:d6:
eb:7f:b4:7a:2e:c1:85:ee:e8:6b:eb:e4:15:65:85:2d:cd:f4:
f8:b7:f2:ff:e7:1e:d9:88:df:79:6c:97:e3:3f:4d:13:ec:c1:
32:16:f1:ff:f8:39:7b:11:78:a2:21:88:3f:7c:76:5d:89:60:
e8:05:0f:58:68:56:62:69:70:80:ba:fb:d0:89:4e:c0:e1:aa:
5f:cd:e8:e1:b8:47:e0:69:53:19:80:14:82:1a:49:5a:fe:99:
9a:7e:62:c3:e8:e5:fc:fb:6b:d6:9c:97:7c:ab:96:99:06:3c:
0a:6e:94:76:59:64:c0:28:e9:98:23:bc:c8:04:f8:89:ee:7e:
7c:95:b1:18:2f:ae:a8:8c:b9:cb:0d:53:3b:51:c9:7d:e6:bd:
eb:4e:9a:97:2e:06:7e:bc:09:ab:3c:99:1e:65:d2:9e:21:fe:
5f:5d:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:29:37 2024 by rpki-client on console-ams.rpki-client.org