Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/sLDDaW5VGVxEPE4WIWcG2bcHRvw.roa
File: sLDDaW5VGVxEPE4WIWcG2bcHRvw.roa (raw, json)
Hash identifier: Bt5d/0juJE/e5JjWu6+B0+9ToF0cGiCLjkgF3yMD09o=
Subject key identifier: B0:B0:C3:69:6E:55:19:5C:44:3C:4E:16:21:67:06:D9:B7:07:46:FC
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FEB87D011BAF36FA0EA9A3B2AC859
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/sLDDaW5VGVxEPE4WIWcG2bcHRvw.roa
Signing time: Tue 02 Jan 2024 04:30:27 +0000
ROA not before: Tue 02 Jan 2024 04:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33960
IP address blocks: 212.252.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:eb:87:d0:11:ba:f3:6f:a0:ea:9a:3b:2a:c8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0b0c3696e55195c443c4e16216706d9b70746fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0b:a1:6b:b1:48:49:7a:6b:ac:45:c9:40:ff:
a6:e9:45:42:95:f0:ef:c1:5e:e5:ee:10:3c:ad:ab:
3b:13:87:4a:d0:a7:59:3f:20:3b:c0:0f:f0:50:52:
d8:75:8d:c8:a7:8e:6e:f0:e9:bb:62:2d:d5:46:90:
1a:38:d9:8e:83:3e:c7:eb:1a:91:2d:32:43:99:42:
c8:53:21:d0:86:2a:54:96:37:98:30:9c:44:f8:66:
93:29:fa:df:31:45:6f:a9:15:49:96:02:1e:af:54:
89:38:aa:33:83:ef:30:f1:6f:8f:61:73:99:de:ce:
d1:d0:9a:6f:0e:2e:29:17:f0:26:4a:97:a1:a5:ca:
a8:88:63:04:89:80:f0:f4:38:85:ae:58:5c:20:14:
83:5c:c7:99:15:ed:16:0f:fe:07:6e:f9:45:8e:f5:
a1:a3:6a:87:c2:d3:b7:4b:62:4c:4d:1f:92:29:ae:
b6:e8:d1:e1:e2:b0:50:4b:14:7d:33:d7:51:67:b6:
49:04:81:b3:95:74:d4:04:71:bc:3b:36:34:69:89:
77:66:00:53:ed:7a:a4:55:60:e8:8e:0c:a9:2b:e3:
20:28:df:23:b8:14:82:d1:b8:55:e2:49:8e:64:6d:
cf:46:93:86:ce:aa:81:75:c7:db:15:21:e5:ee:9b:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B0:C3:69:6E:55:19:5C:44:3C:4E:16:21:67:06:D9:B7:07:46:FC
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/sLDDaW5VGVxEPE4WIWcG2bcHRvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.252.202.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:5f:93:f5:bb:ea:4d:9a:74:bb:58:57:3a:fc:c1:14:fc:a9:
01:96:2c:c8:8f:8b:ef:f4:82:9c:27:99:e2:65:c5:25:9e:2b:
8d:ff:e5:e5:15:df:f1:61:8d:11:45:aa:38:34:b8:91:42:cf:
ee:08:e4:f9:36:96:72:67:e3:c6:a1:df:25:56:dd:8e:30:5e:
92:16:b7:46:f9:3d:91:5a:2b:00:2b:9f:4d:b3:9d:e4:61:fc:
5d:27:c6:1f:46:75:ea:92:10:23:ec:9c:c6:ff:ca:fa:1e:d8:
4b:87:5c:40:7e:69:8e:0c:35:4d:0f:68:22:5f:46:51:55:10:
d8:20:fe:42:e3:c3:a5:bb:83:a3:d8:df:37:2d:ab:4d:83:fe:
6c:80:93:58:2a:a1:51:72:29:51:ac:92:74:dc:74:25:f2:ac:
f2:11:5d:07:61:b6:12:16:52:ba:9e:dd:d1:f2:d2:d1:31:93:
27:50:b7:c2:b5:8c:0d:71:e0:e1:7d:30:55:6f:50:99:81:b5:
ae:ed:80:c2:dd:56:bb:a1:68:56:bb:5f:c3:1b:17:9e:48:d9:
d9:8c:04:b1:06:ed:f7:da:a7:dc:1d:25:7c:ba:59:65:6b:5b:
5b:20:fb:a3:da:d1:54:be:01:79:5b:10:c9:a4:97:d9:10:2b:
19:d6:db:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:31:26 2024 by rpki-client on console-ams.rpki-client.org