Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/n6uXky1fV8RHYSH2LSSfS7R-PpE.roa
File: n6uXky1fV8RHYSH2LSSfS7R-PpE.roa (raw, json)
Hash identifier: 1N80ZYdKZbS3tAZtkFV5C0AbFj7zkxvnobHKmacyc5g=
Subject key identifier: 9F:AB:97:93:2D:5F:57:C4:47:61:21:F6:2D:24:9F:4B:B4:7E:3E:91
Certificate issuer: /CN=68cfe1aacb278c13231b310e45ee576932fe9b4e
Certificate serial: 018F6BF73F3334EC5F18D298608A999D9875
Authority key identifier: 68:CF:E1:AA:CB:27:8C:13:23:1B:31:0E:45:EE:57:69:32:FE:9B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM_hqssnjBMjGzEORe5XaTL-m04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/n6uXky1fV8RHYSH2LSSfS7R-PpE.roa
Signing time: Sun 12 May 2024 08:41:56 +0000
ROA not before: Sun 12 May 2024 08:41:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12840
IP address blocks: 212.109.96.0/20 maxlen: 20
212.109.96.0/24 maxlen: 24
212.109.98.0/24 maxlen: 24
212.109.103.0/24 maxlen: 24
212.109.107.0/24 maxlen: 24
212.109.112.0/22 maxlen: 22
212.109.112.0/24 maxlen: 24
212.109.113.0/24 maxlen: 24
212.109.114.0/24 maxlen: 24
212.109.115.0/24 maxlen: 24
212.109.120.0/23 maxlen: 23
212.109.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/aM_hqssnjBMjGzEORe5XaTL-m04.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/aM_hqssnjBMjGzEORe5XaTL-m04.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM_hqssnjBMjGzEORe5XaTL-m04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6b:f7:3f:33:34:ec:5f:18:d2:98:60:8a:99:9d:98:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cfe1aacb278c13231b310e45ee576932fe9b4e
Validity
Not Before: May 12 08:41:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fab97932d5f57c4476121f62d249f4bb47e3e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:db:1b:7d:fb:0b:b2:16:d4:a7:6b:2f:11:
d8:5f:d2:a0:7e:f0:8d:05:a7:6e:cd:04:c5:8a:41:
8f:49:51:62:73:de:a1:81:0f:ab:5c:0e:fb:6d:3a:
00:89:74:3a:0d:12:3e:be:97:ba:35:d2:d6:17:92:
ac:69:b4:04:e5:5d:d6:c3:d5:72:00:e3:39:85:95:
f9:ff:b4:f7:99:c6:74:c0:f7:46:a8:0c:c1:6a:b7:
5c:9e:e6:8a:01:99:59:7c:81:f8:b8:cd:3d:5d:ef:
6d:d1:9d:f1:87:68:bc:7b:b0:ca:d4:b2:50:b0:eb:
c2:fc:58:bb:1e:61:b2:70:fa:9b:4c:f7:e8:63:47:
e5:df:97:fd:08:1a:b2:af:24:2d:37:9a:66:40:96:
23:f4:3b:8b:bd:97:7b:a0:d6:9a:63:0e:9a:51:6f:
35:fd:ac:fd:88:0d:d7:bd:33:21:62:15:34:09:53:
ef:3f:71:cd:bb:c1:1c:a8:e5:79:31:42:ea:0d:06:
fb:53:af:84:1d:61:5d:7d:9c:14:e7:2d:54:35:fa:
45:c0:d7:4a:71:a0:93:94:56:b7:9e:62:da:57:7c:
cb:2a:c9:be:e0:6e:86:c9:d8:86:3c:25:f7:ad:a6:
f9:a1:cd:63:19:f3:ff:66:9d:40:e5:dd:9c:98:87:
54:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AB:97:93:2D:5F:57:C4:47:61:21:F6:2D:24:9F:4B:B4:7E:3E:91
X509v3 Authority Key Identifier:
keyid:68:CF:E1:AA:CB:27:8C:13:23:1B:31:0E:45:EE:57:69:32:FE:9B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM_hqssnjBMjGzEORe5XaTL-m04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/n6uXky1fV8RHYSH2LSSfS7R-PpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/be9e88-512f-4b06-b196-89c2f666e905/1/aM_hqssnjBMjGzEORe5XaTL-m04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.109.96.0-212.109.115.255
212.109.120.0/23
212.109.123.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:84:dc:38:2f:03:e9:6e:16:aa:b4:5d:ee:3d:de:a0:8f:4f:
3a:5e:90:d1:8b:f9:45:59:3d:b1:e0:46:4f:94:7e:72:e8:bd:
e6:7c:4a:43:38:b9:23:46:2a:d8:9a:e8:0a:56:f5:0e:2b:fc:
e9:26:a2:df:6e:d3:61:23:06:c1:88:0c:c0:57:f8:bd:73:da:
f7:2d:05:9a:69:2d:d1:e0:13:01:54:35:ca:ec:f6:19:19:c5:
45:31:bd:12:c0:7e:3a:74:74:c9:e2:2d:3b:29:64:d8:3b:f0:
2b:30:18:db:cb:db:60:ba:28:b2:f9:47:81:5e:a4:26:65:73:
cc:11:b6:a0:36:d9:8e:f0:88:e7:0d:08:dc:93:c3:05:32:75:
2b:c6:47:82:ad:96:f2:03:55:d0:2d:43:21:13:00:ae:fc:d9:
a6:e9:90:b7:be:ef:dc:28:68:a9:10:af:99:6f:1b:d5:fc:16:
7a:53:2a:69:d9:de:4d:71:ad:33:82:23:d0:ba:95:d0:a8:95:
2d:43:c4:a4:90:a6:bf:ec:9b:ac:41:07:8e:34:bd:4f:74:9e:
4c:10:60:db:d1:e6:37:f6:34:cb:b3:4b:33:95:ce:b4:bd:73:
e8:04:30:2f:10:10:2d:76:36:7e:1a:b9:f0:de:81:60:00:3f:
90:6e:81:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:52:37 2024 by rpki-client on console-ams.rpki-client.org