Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/9jOqmYXOswyEfu-3B7TCy-jC0Kg.roa
File: 9jOqmYXOswyEfu-3B7TCy-jC0Kg.roa (raw, json)
Hash identifier: 3yzb1bTAGcgcs/CrqrJPpwGo873g8IucmOvfoaAo35g=
Subject key identifier: F6:33:AA:99:85:CE:B3:0C:84:7E:EF:B7:07:B4:C2:CB:E8:C2:D0:A8
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018F719A8FD229EA3BBFF5E91DAD5B45CDE3
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/9jOqmYXOswyEfu-3B7TCy-jC0Kg.roa
Signing time: Mon 13 May 2024 10:58:25 +0000
ROA not before: Mon 13 May 2024 10:58:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 212.16.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:71:9a:8f:d2:29:ea:3b:bf:f5:e9:1d:ad:5b:45:cd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 13 10:58:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f633aa9985ceb30c847eefb707b4c2cbe8c2d0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d9:4e:a5:02:a3:e1:fc:39:8a:1e:73:cb:1d:
03:8e:01:8e:f0:de:a8:24:dd:d2:e2:32:28:ea:52:
cc:43:13:f5:b0:aa:7b:14:a1:fd:b4:af:dd:a8:e6:
7e:72:3e:5d:b7:11:4a:e3:fa:fe:38:b3:53:68:15:
fc:1e:06:52:c4:b8:f8:11:57:de:ca:58:ea:bb:1d:
2f:92:68:63:32:29:be:12:ba:9f:32:07:fe:b7:bd:
2c:ef:cb:c7:b5:04:bd:16:ce:50:37:62:dc:3c:17:
5c:aa:1c:66:24:8d:61:60:25:b3:f0:2c:21:cf:42:
0c:b7:a6:ae:25:03:e9:6d:07:b7:be:ea:d3:ff:b2:
47:47:61:7d:b1:79:f9:b5:c7:e8:42:ac:87:56:6b:
20:ab:e4:b4:f4:f9:19:61:bc:ce:60:2b:b6:54:ea:
e4:5b:ce:e1:e7:72:b2:21:b4:8c:d4:e5:28:96:77:
ed:91:5f:98:50:53:c0:b4:01:33:88:07:71:a1:24:
28:b3:11:19:c9:f1:f9:c3:b9:e4:97:23:ba:9c:b1:
d2:65:4e:00:f8:ef:21:ac:14:2d:12:cb:f8:04:5e:
56:1d:f8:80:77:32:8c:f7:a2:08:55:7a:fc:bd:c9:
55:68:b9:d8:a0:bc:09:ee:05:81:d9:b5:30:3b:e6:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:33:AA:99:85:CE:B3:0C:84:7E:EF:B7:07:B4:C2:CB:E8:C2:D0:A8
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/9jOqmYXOswyEfu-3B7TCy-jC0Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.81.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ec:95:94:a8:93:6b:e9:46:66:2f:48:5d:68:09:97:98:1a:
3b:76:df:b3:5f:d1:2c:26:30:f1:79:ca:94:4b:32:28:d3:a2:
9c:ac:05:b6:71:44:97:b3:64:a2:fe:e0:21:dd:76:dc:d8:01:
11:15:03:77:96:4a:e7:f5:cc:5f:08:09:8c:a4:b3:f1:31:35:
7f:11:04:7a:17:2f:a2:40:1d:f7:0b:cf:64:8f:40:db:57:80:
a3:17:ba:38:99:5e:55:a5:03:18:bf:38:40:cf:f2:b1:b3:53:
9a:23:fc:11:74:5a:da:55:87:1c:62:72:21:c6:6e:90:d9:5c:
86:03:b3:ad:fa:6a:1c:87:1c:e7:3b:22:75:4e:3b:df:a8:07:
34:76:e0:a5:4f:03:1f:a6:68:3c:51:0e:d4:12:c3:d2:a0:eb:
ce:87:33:35:95:17:c2:7f:62:3e:c1:a6:1e:6d:f9:fb:9c:58:
c2:73:75:7d:84:f6:f0:a7:f8:01:52:2a:0b:1f:7d:f6:59:de:
1c:1d:38:a6:b5:4d:fb:16:19:01:3a:d0:87:2b:4f:42:15:77:
ad:db:1d:cd:a7:b9:b0:6f:2d:12:5a:76:11:fd:0d:4a:be:a9:
03:27:de:43:28:1b:51:ae:20:69:85:bb:24:c1:94:ce:90:19:
b6:26:1e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 11:17:57 2024 by rpki-client on console-fra.rpki-client.org