Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/56NJ6u-_ATOrOljAA4Fv6qZo9xM.roa
File: 56NJ6u-_ATOrOljAA4Fv6qZo9xM.roa (raw, json)
Hash identifier: 53RTejatOWjfjhOC7l3sSKj9RC1SxTKcImx4S9VTgxA=
Subject key identifier: E7:A3:49:EA:EF:BF:01:33:AB:3A:58:C0:03:81:6F:EA:A6:68:F7:13
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 018CC493494CD04BF9673EEF0EAE4E03F8AB
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/56NJ6u-_ATOrOljAA4Fv6qZo9xM.roa
Signing time: Mon 01 Jan 2024 10:30:36 +0000
ROA not before: Mon 01 Jan 2024 10:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12735
IP address blocks: 212.102.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:49:4c:d0:4b:f9:67:3e:ef:0e:ae:4e:03:f8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Jan 1 10:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7a349eaefbf0133ab3a58c003816feaa668f713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:a9:41:0b:38:a0:50:c2:d7:36:19:df:8e:
e6:dd:2b:76:1d:ce:b5:10:30:3e:3f:de:f2:fd:65:
b5:cc:03:48:c7:6e:74:40:3a:be:93:9a:51:6d:50:
cd:10:59:b5:55:28:79:f7:92:55:19:37:2f:b5:61:
df:6e:63:a7:fc:5b:64:70:87:3e:0f:66:06:d7:a8:
e5:90:23:df:01:94:b6:2b:f1:36:d0:22:14:fa:87:
04:cc:b1:c2:bc:ba:4c:d5:9b:ab:08:ea:00:ba:2b:
fd:f3:07:b7:8e:4c:12:85:9f:e9:d3:67:44:d8:fb:
d9:b6:4e:c4:d0:ae:25:48:dd:78:4c:79:b0:bc:09:
f8:50:0f:65:4d:8d:18:21:75:7f:0a:6d:79:08:6f:
8b:67:52:fc:a9:0b:6c:3d:b5:d3:55:80:57:63:97:
b2:ed:07:42:ea:f4:06:52:88:91:52:6f:ed:5f:71:
0b:70:49:d2:e6:35:89:9a:8a:ed:05:f8:ac:b1:0a:
ce:22:03:a7:fd:c3:4d:24:e5:79:6a:92:35:de:ba:
23:cc:06:8a:b7:d8:a8:90:c6:a5:f4:8d:35:be:a5:
56:b8:11:ef:36:ce:91:d3:c5:9e:af:51:7b:fd:49:
9c:f0:35:1b:77:54:c5:a6:b8:8d:49:19:bb:ce:df:
b7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A3:49:EA:EF:BF:01:33:AB:3A:58:C0:03:81:6F:EA:A6:68:F7:13
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/56NJ6u-_ATOrOljAA4Fv6qZo9xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.103.0/24
Signature Algorithm: sha256WithRSAEncryption
97:46:26:43:0f:5c:ff:f6:c2:be:95:4b:fd:e2:94:87:e9:d4:
3e:a3:6a:2f:c9:9f:53:84:d7:16:df:a3:ce:17:52:d4:ac:7d:
2e:a6:4d:ae:75:51:b1:f5:70:62:4b:ef:91:5c:4f:90:11:9e:
e3:c4:63:65:7b:7a:45:16:5c:db:7d:35:1f:38:0f:92:42:a3:
46:1a:4d:4d:88:b4:09:c6:fe:ad:3d:be:30:72:cc:36:12:0b:
a8:55:7e:97:47:8b:b9:ec:56:37:5d:c1:46:21:d2:42:ad:57:
c8:8b:66:cc:5a:ef:8f:33:8b:91:f3:a6:f1:33:09:2a:65:7c:
ad:b2:b1:0b:d0:0a:bb:90:03:6b:49:ab:41:04:64:fc:7d:55:
2d:5a:cd:3a:6c:e3:e9:1b:3c:d5:67:11:c1:94:e8:2d:06:cf:
25:55:a5:62:ff:a8:59:ba:eb:1e:30:af:44:cf:28:ff:0f:ab:
95:8b:59:ee:83:99:58:4f:81:a7:28:35:ee:cc:b5:8b:fe:fa:
99:6a:88:af:bd:36:d2:da:b3:07:27:30:57:b7:6e:56:e5:24:
37:a1:64:67:76:e0:2c:b4:17:7d:3f:bb:64:9a:7b:e9:ad:3d:
92:c8:7a:9f:8c:bd:a5:d8:ce:ed:ae:fd:8a:d2:73:be:9b:ed:
f5:b0:00:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:14:55 2024 by rpki-client on console-fra.rpki-client.org