Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/CPzhMPg4KqjlNqqZ284gCHEOnpc.roa
File: CPzhMPg4KqjlNqqZ284gCHEOnpc.roa (raw, json)
Hash identifier: MEulMPfyYWYw2yW7y2gijStH0rdYBh1fIiD1yH/l4Sk=
Subject key identifier: 08:FC:E1:30:F8:38:2A:A8:E5:36:AA:99:DB:CE:20:08:71:0E:9E:97
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018CC5DCBB82A3176C9BEBCAE11FAF463319
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/CPzhMPg4KqjlNqqZ284gCHEOnpc.roa
Signing time: Mon 01 Jan 2024 16:30:26 +0000
ROA not before: Mon 01 Jan 2024 16:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29182
IP address blocks: 212.22.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:bb:82:a3:17:6c:9b:eb:ca:e1:1f:af:46:33:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 16:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08fce130f8382aa8e536aa99dbce2008710e9e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4a:82:85:5d:8b:af:1b:3f:d4:32:2a:ac:ba:
28:03:74:50:d5:09:b6:a3:fc:6e:84:00:85:3e:de:
1d:ea:72:35:d4:78:ca:86:ec:5c:7d:08:96:c9:a5:
94:02:dd:11:65:9f:02:de:83:f4:ac:43:cc:ab:ac:
79:c7:d0:61:63:80:3e:f8:21:12:c7:a0:24:d7:9b:
dc:94:9d:3f:a4:a2:e1:05:ab:94:a6:56:e1:6c:3a:
ce:3c:cd:61:3f:43:43:2b:88:4c:80:94:d6:16:94:
20:3a:18:6b:64:5e:60:25:2b:40:a9:67:f4:2d:b2:
1e:a2:36:8c:ef:63:03:66:ea:a3:c0:99:e2:98:67:
88:0b:87:37:af:f7:30:39:06:81:91:27:fa:18:4b:
92:98:10:04:c4:84:c5:0d:6d:c0:4c:a2:d9:d2:f2:
96:d9:13:9b:30:df:17:af:ef:01:79:1f:aa:f1:86:
79:c8:7f:42:eb:02:12:d5:bf:c3:ef:8b:4f:4e:08:
4c:f3:2d:d3:e3:59:6a:80:34:b4:1f:04:b0:ca:54:
a5:47:f5:7f:c3:54:43:41:60:21:d2:51:f9:bf:91:
e3:33:30:7e:21:45:84:19:17:82:de:b4:99:5c:93:
15:3c:8d:f4:46:e9:a4:2a:5b:b0:0e:1c:84:8d:1d:
60:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FC:E1:30:F8:38:2A:A8:E5:36:AA:99:DB:CE:20:08:71:0E:9E:97
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/CPzhMPg4KqjlNqqZ284gCHEOnpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.83.0/24
Signature Algorithm: sha256WithRSAEncryption
79:92:6c:7e:fd:1b:ae:8a:18:85:01:e0:77:f3:46:b6:72:53:
84:cc:67:24:aa:d7:68:cc:95:31:fd:74:7d:f8:f8:bb:2d:a3:
3c:ab:4a:17:5d:2e:23:a6:3c:67:de:7f:39:3f:98:07:a5:f3:
9e:62:c5:35:b1:b9:19:82:fc:d2:43:54:51:f3:a1:dd:c1:32:
08:30:ea:37:7d:dc:85:98:70:5b:86:52:51:4d:22:ba:54:4b:
5d:1a:1c:20:66:11:cd:50:6a:29:c1:25:20:5d:5b:c0:56:a6:
4b:2e:c0:51:b8:22:64:70:57:41:c0:1c:ab:e2:0c:9b:3e:12:
11:bf:a6:a5:ab:7e:9c:14:a5:27:4c:40:d6:ef:c4:4a:39:6d:
71:81:ff:ea:d1:7e:04:54:b8:39:5f:ef:46:f5:f5:6d:88:12:
b7:a4:2a:49:e0:05:5f:52:64:d3:c0:8a:4a:32:75:02:9d:63:
12:78:66:27:3d:63:00:37:cd:09:ec:b3:17:02:d5:41:bc:27:
f5:92:6a:0f:16:36:ce:01:c5:6e:2f:e0:9d:1f:0c:47:89:91:
a0:4b:a9:e2:a4:62:7e:50:21:53:a1:7b:b2:80:29:f0:56:6e:
3c:c5:ab:a9:d9:56:c9:20:87:48:5c:93:33:5f:65:92:9c:04:
ac:24:93:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:26:46 2024 by rpki-client on console-ams.rpki-client.org