Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/dknemS1W5YVbnJVmKJJZkqZoN-g.roa
File: dknemS1W5YVbnJVmKJJZkqZoN-g.roa (raw, json)
Hash identifier: HbUwLpdg4re6nL/Z8d69b8L5jGKw65OPyvqACbzhplg=
Subject key identifier: 76:49:DE:99:2D:56:E5:85:5B:9C:95:66:28:92:59:92:A6:68:37:E8
Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial: 018CC64B318161DDB0C5A8BF13450BDA5FD3
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/dknemS1W5YVbnJVmKJJZkqZoN-g.roa
Signing time: Mon 01 Jan 2024 18:31:05 +0000
ROA not before: Mon 01 Jan 2024 18:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210973
IP address blocks: 212.236.10.0/24 maxlen: 24
212.236.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:31:81:61:dd:b0:c5:a8:bf:13:45:0b:da:5f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Validity
Not Before: Jan 1 18:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7649de992d56e5855b9c956628925992a66837e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:6e:6b:4b:fa:da:40:ae:26:49:cb:e7:1d:
79:b8:d1:cc:24:21:ba:b1:b9:65:02:0f:a6:21:43:
9a:09:90:15:f1:7c:8b:d7:77:fd:6a:0a:de:aa:74:
a0:20:4c:a4:fb:4a:0f:a6:22:bf:a0:3b:7d:c1:d2:
36:74:6a:ac:89:a8:9b:34:ea:26:11:ff:30:79:5f:
ea:f4:6b:28:ff:2f:6a:5d:08:ba:91:2d:0c:e2:7e:
8a:dc:c5:5e:7d:12:10:3e:e3:c0:bf:23:01:26:ee:
a6:c6:ea:63:e5:0e:98:1e:2a:d1:34:22:cf:9b:b5:
1e:b0:33:e4:27:71:9c:69:67:98:a6:5e:89:2f:f3:
cc:77:6d:6e:61:b8:2c:76:f2:79:88:a4:d8:a8:71:
67:cf:21:4c:73:95:44:8b:0a:13:fe:f0:f1:ae:96:
7d:66:15:98:a1:75:a6:56:3a:fc:e6:83:f3:ff:dd:
ea:9a:02:89:9c:16:61:21:70:6d:66:b7:0d:18:0a:
a6:3e:8c:bc:46:3a:33:68:83:33:8c:db:42:54:78:
f5:dc:6f:70:3d:95:aa:4b:f5:97:3e:23:fe:63:ca:
91:61:88:78:f2:c5:52:15:08:6b:85:83:d5:7e:74:
0a:80:18:61:bb:a5:ac:d0:a7:f3:88:61:1e:a7:97:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:49:DE:99:2D:56:E5:85:5B:9C:95:66:28:92:59:92:A6:68:37:E8
X509v3 Authority Key Identifier:
keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/dknemS1W5YVbnJVmKJJZkqZoN-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.236.9.0-212.236.10.255
Signature Algorithm: sha256WithRSAEncryption
48:9c:87:85:b1:72:18:91:83:45:d1:8d:9d:0d:e2:99:ec:32:
e2:7c:dc:1c:4c:f2:a2:0f:1d:38:4e:4a:eb:5d:e1:06:ec:70:
ef:03:bd:45:cf:aa:a0:95:c9:1d:c2:00:44:84:37:c0:b9:04:
76:0c:99:0a:60:4d:54:12:7d:71:d8:31:a0:ce:4a:2c:bd:e1:
18:45:ad:18:7e:8f:3f:f5:93:72:20:fe:29:8d:62:ca:2e:14:
da:3d:cf:38:30:19:b6:9a:fc:7c:e3:b2:bf:e7:fe:13:29:0b:
87:e3:56:ea:16:6b:d0:24:25:7f:6c:b4:58:2c:2c:6c:e7:fc:
30:b9:2c:16:68:a0:62:5c:f1:85:3d:c5:7e:40:33:6f:4c:04:
f1:87:09:ed:c6:c6:74:20:20:df:25:35:3c:9b:82:5f:33:0f:
4a:fb:c8:05:87:c5:b4:73:6f:6f:77:0a:ec:17:10:45:5f:cb:
22:7e:f1:15:33:39:de:c0:45:4f:76:46:28:1a:5f:71:2d:10:
61:1c:12:68:cb:7d:a7:4f:e5:ea:a0:04:a5:6b:78:c1:8c:2f:
05:7a:65:53:fa:ee:a5:7e:3e:7b:7c:80:3c:59:59:ab:ea:b9:
f2:bb:8d:c1:03:c1:c7:38:d6:0b:02:5f:25:65:42:0e:e8:a8:
b4:b7:e4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:51:59 2024 by rpki-client on console-fra.rpki-client.org