Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/DZCpzPKc-IuyEMHXJrrLdQZmk5A.roa
File: DZCpzPKc-IuyEMHXJrrLdQZmk5A.roa (raw, json)
Hash identifier: AbR3T9z5e+CKOnNvhG+EOOwcjQmJZPzqdctLg99laAk=
Subject key identifier: 0D:90:A9:CC:F2:9C:F8:8B:B2:10:C1:D7:26:BA:CB:75:06:66:93:90
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 018CC2DB37097B2DAEDDC59FBCB0F181BEF8
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/DZCpzPKc-IuyEMHXJrrLdQZmk5A.roa
Signing time: Mon 01 Jan 2024 02:29:55 +0000
ROA not before: Mon 01 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200178
IP address blocks: 212.126.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:37:09:7b:2d:ae:dd:c5:9f:bc:b0:f1:81:be:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d90a9ccf29cf88bb210c1d726bacb7506669390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:56:c1:f7:02:38:e6:14:ad:a9:02:c3:91:4f:
ae:28:5b:57:bc:6f:84:51:c3:81:d7:df:4b:18:31:
6a:dc:ee:ca:e4:b4:44:7e:80:c7:88:fa:cb:36:6c:
33:d0:f6:4d:5b:87:91:00:32:e7:36:f4:d1:e3:df:
a1:b0:68:db:f9:77:5d:a3:87:30:97:ef:18:44:d5:
ec:b5:c6:fc:f6:db:e1:7e:00:7f:65:e4:f7:a3:34:
4d:28:a3:59:5a:e7:6b:48:c9:d0:58:d2:01:e6:7c:
4c:78:02:37:2a:a2:13:13:48:b4:6a:39:7f:7c:4f:
8b:8b:9b:cb:0b:78:dd:34:5a:ff:6c:0b:0b:e6:ad:
81:f9:3f:40:73:85:aa:b5:d2:76:7d:6a:65:39:8a:
f1:0a:fc:e4:e7:08:59:22:78:33:cd:ca:2b:98:d4:
7f:4e:7c:a6:12:39:d5:20:a7:9d:44:3d:8a:db:34:
03:46:ae:22:58:ff:8c:e3:3c:a1:e1:7a:3a:6b:7f:
4b:ff:6b:0f:a5:61:1e:82:78:b7:ee:d7:17:07:fd:
72:bb:2f:69:5c:33:d9:9a:2f:73:94:02:cf:9e:88:
e5:d9:f2:47:5a:d5:c6:b1:9b:c8:61:d3:4a:b0:e2:
e7:b9:72:3e:7b:da:48:3e:fb:72:b6:50:3c:ba:0a:
19:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:90:A9:CC:F2:9C:F8:8B:B2:10:C1:D7:26:BA:CB:75:06:66:93:90
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/DZCpzPKc-IuyEMHXJrrLdQZmk5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.112.0/24
Signature Algorithm: sha256WithRSAEncryption
12:4f:66:ac:07:0e:83:a3:22:ab:c2:fe:d4:2c:15:ad:e4:96:
be:f7:c5:f5:48:7a:eb:23:ec:d7:98:1c:9b:27:a6:2e:90:1b:
c0:24:ce:73:39:be:fc:57:46:23:8d:a5:3a:46:1b:a1:9e:e0:
42:d8:c7:b4:2f:77:bb:83:ce:9b:88:85:9a:4d:a5:2d:51:8e:
64:ef:c7:02:7f:e8:06:05:ac:54:b6:45:f4:57:5e:40:f3:bc:
b3:a4:c3:c9:a8:bd:4e:cd:73:d9:1b:a0:9b:ab:48:95:88:ad:
35:33:fd:8e:ec:5b:43:f4:cd:e1:50:78:ef:c3:ec:bf:43:d2:
99:d2:99:a7:f7:a6:6a:78:8b:64:c3:08:a2:ec:19:26:5a:36:
ae:fb:a1:a2:03:be:95:8d:59:f2:bf:97:af:19:67:cb:f8:68:
af:bc:7c:66:d9:53:4f:2a:7d:b2:65:2c:de:a1:eb:a4:56:2d:
42:e7:3b:58:2c:5f:38:2c:c3:f5:7d:bb:ac:9a:e2:bb:56:b9:
61:99:f5:f4:a4:28:52:c5:be:10:f9:dd:d4:9f:5b:61:f0:c4:
69:f1:4d:b3:fe:1f:e1:60:9d:a6:3c:99:d3:33:e9:f5:43:f4:
a3:5f:ed:e1:b5:63:4d:3e:82:e2:b1:66:12:69:eb:46:48:c3:
78:28:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 10:42:11 2024 by rpki-client on console-ams.rpki-client.org