Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/U4YNxBXiO6_-utYOU9YT2PIMMS4.roa
File: U4YNxBXiO6_-utYOU9YT2PIMMS4.roa (raw, json)
Hash identifier: RE+sg68W25rX5Mz9/BRnw6d1Ge+YufabyBQnotqMajU=
Subject key identifier: 53:86:0D:C4:15:E2:3B:AF:FE:BA:D6:0E:53:D6:13:D8:F2:0C:31:2E
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018DDB85B0EDDB7A984869E8ED9229D28AEB
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/U4YNxBXiO6_-utYOU9YT2PIMMS4.roa
Signing time: Sat 24 Feb 2024 14:29:48 +0000
ROA not before: Sat 24 Feb 2024 14:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204104
IP address blocks: 212.80.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:db:85:b0:ed:db:7a:98:48:69:e8:ed:92:29:d2:8a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 24 14:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53860dc415e23baffebad60e53d613d8f20c312e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:47:3b:5d:9e:58:bb:71:db:da:4a:89:88:
d3:53:17:03:6f:0d:6a:30:2d:9f:54:3d:af:37:0a:
9d:7a:32:a8:30:a6:8c:1f:2f:5d:ff:61:ed:27:22:
d7:9c:67:28:4b:5a:b8:13:a1:da:19:14:31:82:4b:
7a:94:c5:4f:4b:b3:24:73:43:25:c0:66:60:d9:55:
95:06:55:94:76:d9:15:67:7d:59:09:7b:86:41:27:
4c:5d:3c:05:c1:6d:c3:eb:b5:91:80:f8:ad:89:24:
bd:f9:6b:7a:10:1d:b9:fd:cb:fa:25:6d:26:4c:8d:
de:6c:ac:a0:9e:cf:c1:5e:47:7c:6c:ff:43:da:6b:
c1:50:60:d4:4f:a8:ea:65:ef:25:02:48:cf:51:38:
b9:1a:ae:d4:3b:5a:31:9f:cb:5f:36:7b:15:24:2b:
a6:cd:b6:82:8a:9e:9d:f0:4b:52:4f:44:b5:91:0f:
8e:5e:06:fe:6e:70:67:d3:88:ce:d0:1a:7a:a3:70:
71:e5:53:28:db:0c:cf:55:8b:0f:d6:e8:61:23:4f:
11:ff:18:1e:00:a9:5c:fe:ff:88:52:8a:38:d5:22:
8c:a7:0d:5d:47:55:34:97:86:2f:c8:86:41:e1:d4:
31:ce:2a:6b:b0:88:43:57:a5:d7:dc:a2:76:0a:3c:
aa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:86:0D:C4:15:E2:3B:AF:FE:BA:D6:0E:53:D6:13:D8:F2:0C:31:2E
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/U4YNxBXiO6_-utYOU9YT2PIMMS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.8.0/24
Signature Algorithm: sha256WithRSAEncryption
05:0b:66:bb:0e:17:a4:80:d2:6c:71:1c:ec:aa:df:df:e4:26:
4f:e4:97:7f:d1:89:19:39:a4:33:f7:b7:c8:01:01:bb:14:25:
10:26:ba:11:7b:df:33:d8:50:7a:55:d3:6b:ca:53:a3:2e:9f:
aa:dc:97:a5:97:be:14:77:63:c3:76:eb:7e:0c:75:78:d7:15:
21:f9:8f:2b:b2:2d:f5:74:5f:00:8c:ce:ba:33:23:73:be:c1:
60:e4:11:40:1d:b4:11:14:1f:6a:cf:64:4f:32:86:ea:ae:07:
35:b1:4b:d9:25:c2:d4:39:44:bc:e8:b2:90:91:ef:f1:62:e4:
92:1f:56:e1:2e:17:8c:dc:c5:23:b2:20:bb:15:b1:a7:82:3e:
6d:5d:d5:8a:f5:b7:d9:a1:fe:e7:b3:09:f9:5f:d2:89:4b:40:
c3:cf:c6:9d:9b:4a:3a:70:50:36:bf:9d:60:20:f0:29:8d:75:
92:3a:46:53:44:99:e2:98:eb:8d:0c:50:61:19:47:5c:e4:f9:
e6:f4:14:dc:b7:e6:a7:04:ee:a5:a9:37:62:b1:4d:d8:6a:10:
c2:bb:4a:7d:62:e3:4c:e9:27:78:42:6d:9c:a8:ff:6f:db:54:
13:3e:dd:f7:4a:83:49:f1:b0:38:de:87:ec:d2:18:ac:4d:61:
19:93:c0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:51:14 2024 by rpki-client on console-ams.rpki-client.org