Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/prnIzC8lXOBfZI7rEL_m96cU768.roa
File: prnIzC8lXOBfZI7rEL_m96cU768.roa (raw, json)
Hash identifier: XB5+O9aaCy/PgQsgbbOy/MRLGcnUBc6Qs7IzMXSo/P8=
Subject key identifier: A6:B9:C8:CC:2F:25:5C:E0:5F:64:8E:EB:10:BF:E6:F7:A7:14:EF:AF
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FE928FC76E17951803CC4261C2F07
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/prnIzC8lXOBfZI7rEL_m96cU768.roa
Signing time: Tue 02 Jan 2024 04:30:26 +0000
ROA not before: Tue 02 Jan 2024 04:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31085
IP address blocks: 212.252.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:e9:28:fc:76:e1:79:51:80:3c:c4:26:1c:2f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6b9c8cc2f255ce05f648eeb10bfe6f7a714efaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:c8:c0:3b:5f:bd:98:a7:d4:46:52:e2:72:
45:07:dd:61:69:1e:01:7f:35:ca:3a:6d:ae:7b:b1:
11:4e:9c:b6:3b:e6:57:b8:42:2f:ee:4f:07:ea:98:
69:77:8c:9e:44:45:e4:2f:1f:3a:5f:a7:6e:70:f6:
68:49:14:2e:c3:ba:dd:3f:27:9e:4b:91:14:42:89:
d7:a0:b1:bd:c2:34:51:6f:e6:12:cb:62:53:de:0e:
37:bb:67:7f:d2:60:4f:5e:59:c9:05:1c:0e:08:64:
6e:d1:20:62:ad:d4:18:ff:a9:88:1a:97:96:3b:0e:
8e:8a:6d:b1:3a:39:1b:1d:88:23:79:52:2e:98:42:
3d:2f:7c:23:fc:26:d1:22:df:54:f2:cc:5f:9d:a5:
c8:8f:b3:d1:80:de:22:fb:8f:44:1c:d1:e0:90:74:
b8:ca:00:73:ef:b7:56:1d:1e:ad:d4:88:58:9d:53:
7e:79:8c:d9:ef:db:90:f0:c1:90:ad:e7:07:0b:54:
90:33:32:80:8e:55:50:97:c0:8f:29:57:27:78:8b:
aa:32:d4:bc:21:13:5e:08:31:3b:07:4d:97:56:d0:
b6:8b:61:af:37:0e:1b:34:90:8b:36:c9:1f:bf:4b:
4c:7f:de:55:86:79:95:c4:45:0b:dd:cc:77:9a:f4:
9f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B9:C8:CC:2F:25:5C:E0:5F:64:8E:EB:10:BF:E6:F7:A7:14:EF:AF
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/prnIzC8lXOBfZI7rEL_m96cU768.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.252.192.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e9:2d:38:bd:d4:e4:8b:05:dd:c8:a9:37:56:39:9a:ce:ae:
42:7a:bd:53:b3:12:8d:01:2e:4d:9d:5f:13:a6:d8:52:a9:ad:
1c:fc:51:d5:2b:4c:6a:a8:de:e5:27:83:58:8c:42:c1:0c:44:
67:40:ec:90:e8:24:ac:75:4c:50:d8:84:fd:b1:bc:07:93:0a:
be:ec:86:f7:13:36:df:1a:b4:b7:82:ae:a5:70:57:bb:5c:cc:
56:d6:e5:d5:14:44:ab:dd:7b:09:a0:9f:5a:f2:9b:3b:9b:98:
84:28:bb:07:8b:a1:e5:d9:24:2a:b6:10:16:7b:5a:95:54:0b:
8a:fe:96:b5:64:eb:57:c2:a4:6a:68:8d:8f:ab:ad:86:24:2c:
8a:bb:be:89:f7:15:74:65:1a:35:16:e3:7d:27:42:1c:9e:bb:
fc:aa:58:4d:e5:8e:15:78:74:09:6c:c1:0b:2a:64:27:0f:77:
40:e7:be:2f:89:13:1e:61:4e:a4:04:01:e3:5b:d0:8c:9c:ad:
35:11:88:fb:7d:ae:1f:19:7a:45:b2:32:2a:85:bf:64:7a:63:
a6:ca:5c:c0:da:55:2c:88:ff:74:66:8c:d3:af:9a:06:94:35:
ea:c4:bd:55:0e:64:7d:1c:a0:46:d6:21:59:73:c5:f9:cc:9c:
eb:0b:8d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:47:33 2024 by rpki-client on console-fra.rpki-client.org