Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2SXyNHVdj3i4OYexR-Wr6F3KcXY.roa
File: 2SXyNHVdj3i4OYexR-Wr6F3KcXY.roa (raw, json)
Hash identifier: W/fgL8/js/ruQnNstCVnbdfBWeo8Nt+4a6vdcynVe+o=
Subject key identifier: D9:25:F2:34:75:5D:8F:78:B8:39:87:B1:47:E5:AB:E8:5D:CA:71:76
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF8EE124CAFC86CE8EC6F7093A1F9B
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2SXyNHVdj3i4OYexR-Wr6F3KcXY.roa
Signing time: Tue 02 Jan 2024 06:32:23 +0000
ROA not before: Tue 02 Jan 2024 06:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212219
IP address blocks: 212.68.34.0/24 maxlen: 24
188.132.198.0/24 maxlen: 24
188.132.197.0/24 maxlen: 24
78.135.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 13:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:8e:e1:24:ca:fc:86:ce:8e:c6:f7:09:3a:1f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d925f234755d8f78b83987b147e5abe85dca7176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:e8:09:ea:97:27:dc:34:af:0a:bc:86:ba:
92:8d:ce:37:fb:ee:6f:5e:bd:85:3b:42:67:73:1b:
77:58:5b:fd:76:cc:ef:5a:d6:06:30:9e:50:0d:20:
69:fe:d6:f2:4c:36:97:b5:ba:c1:06:96:05:59:6b:
1f:f9:a4:99:61:fc:66:d4:cb:fc:ca:f9:9e:39:c1:
ae:1f:b4:93:5a:2b:68:3a:2e:28:42:a9:bd:8e:9b:
00:23:30:c6:30:4f:98:28:1e:98:4e:b8:f6:39:1b:
b8:5f:3d:44:7a:98:fe:8a:50:de:2b:9c:0d:19:c5:
62:f8:0b:6e:38:7a:93:dd:8c:f9:0b:db:a5:7f:7b:
00:c1:54:fc:3d:3c:23:9f:5b:3a:06:cd:1c:56:18:
5c:80:86:db:1e:3e:96:a1:7b:66:88:1f:46:ce:71:
0d:1b:aa:1e:7c:ff:7b:6a:bf:01:21:54:a5:d9:23:
39:9f:d6:9f:49:5f:15:28:eb:5a:e6:53:ce:16:48:
9b:dd:4c:d8:f4:b9:e5:94:19:eb:67:59:2d:bb:c3:
5e:1c:05:24:1d:dd:3d:a3:2b:d1:31:7a:8d:40:be:
3d:ca:15:29:f2:ea:30:db:ea:e9:49:65:4b:5a:73:
d8:51:4d:9d:7c:ec:aa:f8:ff:ce:25:09:fa:38:53:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:25:F2:34:75:5D:8F:78:B8:39:87:B1:47:E5:AB:E8:5D:CA:71:76
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2SXyNHVdj3i4OYexR-Wr6F3KcXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.85.0/24
188.132.197.0-188.132.198.255
212.68.34.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:5c:87:fb:6d:d2:87:1b:96:bb:4f:7e:c6:e3:e1:40:40:4b:
ec:42:3a:5d:81:b4:61:b6:02:b9:d6:59:dc:44:74:d3:ff:cd:
9e:51:18:d0:59:59:b6:47:c1:e7:3b:49:fa:5d:62:10:26:be:
64:97:2e:16:12:6b:07:4a:f6:68:3a:c5:5d:e3:9d:69:af:1e:
7a:24:2f:3d:8a:2f:ff:59:91:7d:de:12:11:53:62:90:42:d8:
15:8e:16:11:52:da:f2:af:c7:b1:47:9b:2f:74:27:fb:be:1a:
1e:15:17:31:be:2f:f1:b2:a5:75:99:cc:3b:69:ad:ce:1b:89:
f3:04:f8:db:8f:12:63:be:55:57:3b:40:b0:4a:25:4e:0a:d0:
3c:ea:d5:5a:41:85:7d:b8:3e:6e:50:a8:1d:db:39:7a:01:b8:
c5:fc:7f:8a:76:50:53:4e:ce:0c:49:12:07:e9:6f:74:2e:f5:
dd:99:51:29:55:10:54:79:f2:f3:26:f3:6a:21:e3:30:83:90:
39:f2:ca:9b:49:df:ec:a3:8d:5a:a4:4b:68:48:39:6b:95:f1:
13:5d:52:1a:a2:7c:7d:6c:9c:d8:3f:b5:b8:82:a2:58:a3:98:
ea:e4:ad:59:15:7a:98:99:f1:73:8a:fe:f0:23:10:0a:7a:59:
1b:14:a0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 18:06:00 2024 by rpki-client on console-ams.rpki-client.org