Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/4sZuKvsvvxjzleEO9yXEU4Z6yuQ.roa
File: 4sZuKvsvvxjzleEO9yXEU4Z6yuQ.roa (raw, json)
Hash identifier: r2QHq9/gRTPzooZirN3q/k5s/t8zI8wnoDqgBOXBDYo=
Subject key identifier: E2:C6:6E:2A:FB:2F:BF:18:F3:95:E1:0E:F7:25:C4:53:86:7A:CA:E4
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FEC5220B753FB85F8C8BF7F2A46C9
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/4sZuKvsvvxjzleEO9yXEU4Z6yuQ.roa
Signing time: Tue 02 Jan 2024 04:30:27 +0000
ROA not before: Tue 02 Jan 2024 04:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34684
IP address blocks: 212.252.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:ec:52:20:b7:53:fb:85:f8:c8:bf:7f:2a:46:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2c66e2afb2fbf18f395e10ef725c453867acae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:ab:5e:93:ff:74:4e:e3:14:48:f1:7a:2a:
cf:6a:07:a0:ce:2a:2e:c8:9e:8b:4a:9e:a2:a7:ed:
0f:30:d4:aa:c3:1c:e4:41:a8:2a:ec:9d:4a:9c:22:
bf:d3:20:05:c4:e2:af:ef:c8:11:38:e4:0e:06:59:
fe:c4:56:5d:12:6a:a3:72:ad:6c:9f:4b:10:50:c7:
1f:3a:64:77:1e:40:1b:62:2a:6e:bf:f2:0c:cb:ec:
c9:4a:95:1c:a4:65:67:ce:3a:20:21:d3:6e:07:5c:
0f:8f:f4:b5:f8:15:7b:ec:b8:79:d0:fa:94:ed:f5:
d6:6c:96:e8:2e:18:b6:bf:79:bd:cf:06:92:34:11:
fd:93:9e:aa:70:81:25:f0:d9:39:17:db:fe:79:2e:
06:8d:22:b8:39:1f:52:b4:d6:a1:33:44:a3:aa:ff:
7f:ea:e9:ac:c3:e5:97:2f:b3:57:b7:8f:1d:36:05:
56:fe:b7:e1:1c:85:d9:59:30:0a:2d:7b:0b:9b:88:
c5:13:99:d7:07:28:6a:fa:16:74:06:42:67:f6:2e:
e8:0b:16:da:ce:31:06:70:4f:23:2b:c3:af:6e:8f:
fd:32:26:48:aa:52:35:b2:86:a7:02:d9:93:15:14:
e9:b1:80:31:a2:b4:5a:33:b5:d7:8f:8f:4f:6a:a3:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C6:6E:2A:FB:2F:BF:18:F3:95:E1:0E:F7:25:C4:53:86:7A:CA:E4
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/4sZuKvsvvxjzleEO9yXEU4Z6yuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.252.135.0/24
Signature Algorithm: sha256WithRSAEncryption
42:9f:ca:08:cd:1a:e2:ea:73:ac:7e:44:51:3a:6f:9f:39:f3:
43:77:81:b7:ec:97:7c:3c:05:7a:f0:7a:c3:7b:36:5b:fa:3f:
14:7c:02:51:70:c0:40:c4:e6:fa:54:cc:f1:06:52:ea:c6:66:
1f:72:df:66:0b:15:a4:ed:05:61:bf:88:e2:99:4b:1b:b5:f7:
af:ed:5d:39:8a:8b:07:2d:c3:fb:0e:73:cb:b8:16:95:8e:7f:
11:e5:bc:e8:dc:fd:18:70:a5:03:3a:67:3f:52:f0:f6:15:e0:
91:1b:c6:9b:25:26:bd:9d:03:74:a7:98:05:e5:fc:6f:00:f8:
55:4e:4b:01:87:2b:69:e6:83:72:0d:2a:70:f1:d3:ee:b1:42:
47:d8:cc:07:5c:54:55:48:98:bb:74:e7:dc:8d:25:d6:42:9d:
4e:41:74:10:34:f0:25:ca:89:1e:ed:7d:14:20:3a:3c:19:10:
03:82:5c:28:e0:7f:3d:bd:7e:4f:2a:af:e2:90:35:e0:a4:4f:
d4:f9:18:00:2d:20:bf:4c:68:56:9d:db:dd:9a:0e:6b:8c:29:
f7:f5:b9:42:65:4d:cc:92:ef:6a:c4:14:e9:72:17:ac:55:5a:
e1:22:9d:70:5a:3b:49:2f:da:58:b5:83:ab:06:79:42:4e:f4:
26:cb:2d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 05:02:49 2024 by rpki-client on console-ams.rpki-client.org