Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/O2nsO_zBTWwDn-2vm4XK9sP4KCE.roa
File: O2nsO_zBTWwDn-2vm4XK9sP4KCE.roa (raw, json)
Hash identifier: nLg4kyNKM+4Qshfky2sOfNYg5aLUHgU0usxtk9d/KzM=
Subject key identifier: 3B:69:EC:3B:FC:C1:4D:6C:03:9F:ED:AF:9B:85:CA:F6:C3:F8:28:21
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 018CC56EF799F41736A39AAEBBE339B2897A
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/O2nsO_zBTWwDn-2vm4XK9sP4KCE.roa
Signing time: Mon 01 Jan 2024 14:30:33 +0000
ROA not before: Mon 01 Jan 2024 14:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197289
IP address blocks: 212.107.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f7:99:f4:17:36:a3:9a:ae:bb:e3:39:b2:89:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Jan 1 14:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b69ec3bfcc14d6c039fedaf9b85caf6c3f82821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:a0:46:56:ca:b0:dd:d0:bb:a8:f9:21:d0:
52:62:be:71:df:57:af:f8:d8:ee:e6:93:70:4d:b8:
ce:85:00:e2:1f:9b:2f:8b:5c:18:2e:04:65:17:1e:
f1:f2:70:4c:6f:3c:08:1d:e6:2d:83:e8:f9:91:f6:
8c:7e:f6:54:2b:d4:47:cc:ce:f6:67:b5:5a:12:71:
d8:9d:d9:5e:9a:02:e6:47:1a:02:ed:80:74:8e:b5:
fe:27:fc:d0:5d:13:f1:b0:1c:63:ed:33:5a:c7:3f:
87:72:7e:15:84:77:5b:69:27:69:b0:79:34:c1:ad:
a7:d5:df:8f:47:56:c3:47:3e:f1:52:ce:8d:85:59:
f0:e4:ee:d9:e9:08:87:bd:45:22:e3:8b:b5:05:b1:
fb:47:a6:c5:e5:16:c7:14:94:58:59:aa:dc:b2:9e:
63:aa:13:ea:df:b8:fa:13:df:00:94:eb:92:e5:f5:
e2:6f:aa:a1:6e:c2:98:24:12:36:52:02:90:56:49:
9a:e9:85:b2:d2:ff:70:e9:b6:52:4d:52:8e:ec:88:
8e:9c:8f:cd:92:f4:3d:6d:b4:5c:a3:d1:9c:68:f5:
71:52:32:1f:ff:21:fd:1c:94:5f:93:c6:78:60:2f:
45:cc:33:d9:4e:b8:a5:a4:09:05:b4:d9:c2:df:a8:
ff:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:69:EC:3B:FC:C1:4D:6C:03:9F:ED:AF:9B:85:CA:F6:C3:F8:28:21
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/O2nsO_zBTWwDn-2vm4XK9sP4KCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.52.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:a6:34:dd:e6:80:0f:65:d0:f3:a7:01:ca:7a:49:df:a4:2a:
5b:77:32:ca:00:02:0f:a2:9a:bb:f8:44:55:77:6e:50:22:c8:
86:a0:ca:e1:fa:5b:d9:27:34:85:3e:38:d8:7f:dc:d6:04:95:
db:99:21:0f:fb:2b:96:ed:0d:00:c5:2f:9d:43:60:ed:1b:13:
6c:38:6f:9a:5b:31:eb:a7:15:21:d3:26:bd:37:0a:3a:0f:97:
17:35:d0:c8:1e:81:dc:4f:20:3c:22:e5:5c:68:47:8c:b0:04:
86:12:06:6f:7e:96:4b:87:72:1c:6c:b7:7e:cf:b5:80:32:46:
76:28:3f:c4:01:5a:aa:b6:28:f2:1b:b2:19:17:9f:f0:90:d6:
76:e8:2f:6a:ab:29:90:31:2a:c0:c5:ba:ec:ea:35:05:54:b7:
ca:91:34:3c:5e:52:a5:42:ee:92:2b:f0:a5:60:74:2a:24:b3:
50:45:7c:79:82:b3:64:e6:97:98:3e:82:d0:d9:16:4a:35:fb:
86:33:ee:7a:6e:42:0a:63:fd:40:b6:c4:49:08:4f:e7:5b:43:
b8:06:aa:f3:9a:d6:56:cf:95:3d:17:6c:d0:f0:42:5b:da:ba:
ad:ab:4a:1d:45:c8:c9:6e:4b:f6:16:e8:2d:ed:d7:6a:20:e1:
bb:70:19:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:56:56 2024 by rpki-client on console-ams.rpki-client.org