Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/D9CawjfrWMhY-f4izg4HVGjz20I.roa
File: D9CawjfrWMhY-f4izg4HVGjz20I.roa (raw, json)
Hash identifier: qQ3Fv5/AyfR7//e/BU8wbl3pCPZnn5k5fL0tS2totxQ=
Subject key identifier: 0F:D0:9A:C2:37:EB:58:C8:58:F9:FE:22:CE:0E:07:54:68:F3:DB:42
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B73A477C531B4C4B771D40C0296B57
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/D9CawjfrWMhY-f4izg4HVGjz20I.roa
Signing time: Mon 01 Jan 2024 06:30:14 +0000
ROA not before: Mon 01 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47127
IP address blocks: 212.234.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3a:47:7c:53:1b:4c:4b:77:1d:40:c0:29:6b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fd09ac237eb58c858f9fe22ce0e075468f3db42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3d:3c:6e:80:ed:24:b8:6d:27:5c:d6:67:74:
ca:d3:8f:0d:89:d1:1a:3c:7e:26:47:76:57:a7:4e:
21:81:75:7b:45:fd:ff:9c:07:ce:48:c6:e9:fc:e4:
1a:af:c6:1a:d9:8e:97:1b:5e:16:96:3b:23:8c:02:
ba:f4:b3:d2:87:e2:0f:7b:67:31:81:c2:9a:3b:1a:
00:c0:4d:43:9c:3f:5b:17:e2:0c:7f:a1:a1:ed:36:
fa:3c:8f:d1:81:ea:c0:24:db:0a:12:f1:47:df:bf:
54:05:62:8b:4d:18:6d:17:6e:cf:48:e2:b2:c9:00:
86:39:8d:7c:3f:6b:8c:56:07:e4:b4:0c:4e:ab:40:
cc:3a:87:04:14:42:31:4a:bd:88:fc:21:9a:4e:e7:
06:bb:f2:60:72:73:30:9e:93:15:d3:7a:df:4a:31:
b4:4e:82:62:5a:d7:8b:cb:21:f2:e6:96:c8:ba:f7:
9e:4b:cd:54:1b:49:72:37:75:d8:be:19:44:5a:31:
41:b7:ac:2e:e0:e3:32:55:ec:2a:18:70:69:56:b3:
e2:f8:de:29:ee:96:a0:2a:f5:d6:a9:2f:ae:85:6f:
74:bb:68:90:fb:ed:ae:71:b8:6d:2a:bf:0a:b0:d2:
ce:51:87:95:97:58:6b:a9:f8:96:83:b2:b3:29:20:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D0:9A:C2:37:EB:58:C8:58:F9:FE:22:CE:0E:07:54:68:F3:DB:42
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/D9CawjfrWMhY-f4izg4HVGjz20I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.234.169.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c2:21:06:94:07:f2:ca:5c:6c:cf:35:5b:9d:51:91:67:8e:
28:b4:50:09:e1:2e:8c:c3:02:db:fe:b6:6f:2e:5c:66:e8:6c:
7e:af:5c:0c:f6:57:63:e3:19:fb:f5:6d:a0:b5:e4:2c:a0:9f:
b4:37:6b:14:00:49:aa:38:fa:bb:7f:11:53:51:dd:e0:7b:52:
85:6c:df:23:ae:c1:4d:01:38:3f:9f:b0:05:3e:7f:df:ac:9e:
9c:d6:94:5d:10:53:12:59:fe:d4:e1:4b:b5:33:b2:99:13:00:
3b:35:1f:ca:1f:c5:21:1b:95:d5:4d:20:98:e8:80:fd:93:ea:
15:1e:89:95:36:86:bc:c5:7e:fd:8a:c6:7e:f9:71:6e:af:cc:
5f:67:4e:8e:fc:b6:91:77:38:44:34:99:16:43:b4:3e:65:64:
87:15:53:5f:46:03:a3:58:f6:3e:52:58:5c:67:e8:3a:1f:9b:
60:4a:18:94:8b:c6:2a:ac:15:2e:25:0a:35:49:fa:d2:c7:c1:
71:5e:b0:af:4d:ec:71:05:68:bc:fb:da:c6:b0:c7:21:97:e4:
7b:6c:d9:08:fc:a2:ce:cc:79:a2:e5:3c:fe:87:53:fe:c5:1f:
05:2d:b6:c3:37:b5:ad:9f:36:74:bd:0f:cc:15:ae:c5:81:a6:
7a:3e:76:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:27:39 2024 by rpki-client on console-ams.rpki-client.org