Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/KtolpF3Jwpsic9Ab9A4AZVQYjZg.roa
File: KtolpF3Jwpsic9Ab9A4AZVQYjZg.roa (raw, json)
Hash identifier: 5NR2w9qDu7FVpCsMMTMcB8KJgp/Sir1HR9RnAAfDVM0=
Subject key identifier: 2A:DA:25:A4:5D:C9:C2:9B:22:73:D0:1B:F4:0E:00:65:54:18:8D:98
Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial: 018EA3D194DF2F54B2EFCC538F1A396E3F9E
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/KtolpF3Jwpsic9Ab9A4AZVQYjZg.roa
Signing time: Wed 03 Apr 2024 11:56:45 +0000
ROA not before: Wed 03 Apr 2024 11:56:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48932
IP address blocks: 217.12.224.0/24 maxlen: 24
217.12.225.0/24 maxlen: 24
217.12.226.0/24 maxlen: 24
217.12.227.0/24 maxlen: 24
217.12.232.0/23 maxlen: 23
217.12.232.0/24 maxlen: 24
217.12.233.0/24 maxlen: 24
217.12.234.0/23 maxlen: 23
217.12.234.0/24 maxlen: 24
217.12.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:d1:94:df:2f:54:b2:ef:cc:53:8f:1a:39:6e:3f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
Validity
Not Before: Apr 3 11:56:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ada25a45dc9c29b2273d01bf40e006554188d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:59:92:9f:32:16:e5:c5:42:63:54:b9:31:64:
14:79:8c:00:0b:72:ec:9e:86:31:41:2e:6f:5c:90:
0e:e8:6c:58:6b:d8:54:a8:f6:e6:e2:15:c8:87:28:
62:02:fa:41:f5:28:9e:49:f5:29:02:cd:ac:c4:e4:
40:44:a1:06:62:ca:a0:b2:3d:c7:ef:c0:3a:fb:0f:
d6:b7:38:3a:cf:57:1b:15:e0:22:a5:d9:e0:6f:fe:
b2:98:b0:1b:27:17:79:ce:2d:6e:f3:74:c2:02:ca:
3b:f4:f9:c9:28:b1:b9:ba:7c:12:2b:0b:eb:19:29:
d2:69:54:c9:92:d2:69:95:84:c9:69:69:2c:fd:cd:
8d:33:ae:2d:d3:78:2f:4d:43:19:39:e4:ee:43:b0:
37:63:21:e7:f8:6e:eb:01:0b:1f:8c:33:81:cf:46:
89:2f:1d:63:0b:7d:bf:fe:02:88:69:8c:eb:29:5c:
6a:17:d7:33:1e:30:d1:2b:22:30:12:97:41:ab:70:
24:6e:e9:0c:3e:2f:92:87:cb:17:2f:08:1e:51:ef:
4d:e0:b2:c1:11:0c:de:bd:b3:32:df:d1:dd:83:f7:
c9:61:b6:0b:01:1a:2d:8d:ce:2a:c7:15:4c:1c:59:
40:c4:7a:92:36:fd:88:77:27:20:33:e1:8c:3b:ea:
55:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DA:25:A4:5D:C9:C2:9B:22:73:D0:1B:F4:0E:00:65:54:18:8D:98
X509v3 Authority Key Identifier:
keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/KtolpF3Jwpsic9Ab9A4AZVQYjZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.12.224.0/22
217.12.232.0/22
Signature Algorithm: sha256WithRSAEncryption
84:3b:0d:30:06:0d:76:5d:1e:ce:f9:48:01:60:60:81:42:4f:
ab:4f:4c:34:56:f9:fb:e0:dc:ad:06:6c:9d:72:85:d8:93:06:
18:f5:cd:40:a5:55:02:f9:2e:ed:d7:a3:65:c6:92:91:8f:0a:
8e:ae:f5:66:43:72:5e:d7:63:9a:72:1c:62:22:04:7d:8e:21:
09:76:87:bb:81:eb:fd:05:46:46:f7:b6:f4:c6:c8:b1:8b:9a:
20:78:35:e7:2b:6d:e8:d8:7b:04:63:31:9b:c2:64:b1:96:8c:
42:73:af:0d:2e:3d:e5:d8:61:5d:0a:a3:48:41:60:0a:7d:89:
4d:c7:67:8b:11:ad:8b:4e:2a:ca:c2:fd:52:ea:6d:38:17:47:
b8:70:9c:b9:6f:a4:02:14:60:be:80:eb:55:88:7a:1d:31:a4:
05:15:2a:99:e4:b8:87:2a:c9:99:71:8d:49:37:58:4b:e2:e0:
54:f3:2c:d3:b2:64:6d:f5:e3:e2:f4:f1:b1:44:1d:d5:c0:90:
9a:41:b4:1c:a7:a5:9a:7c:da:ac:d7:63:09:e5:72:9f:d6:f4:
b3:a5:97:97:2e:38:d0:46:dc:f3:d5:9a:c5:ea:53:55:fe:63:
b5:db:77:77:64:5d:4a:88:92:d9:13:3a:f2:be:08:d4:d4:1b:
33:47:1b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:27:34 2024 by rpki-client on console-ams.rpki-client.org