Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/laN9fAI54uKEgXiclySC4U5bPJE.roa
File: laN9fAI54uKEgXiclySC4U5bPJE.roa (raw, json)
Hash identifier: 6C0fwRXHJnOf0i/lYAsmr5HzbBYLJWo8IfBTrCPj7BA=
Subject key identifier: 95:A3:7D:7C:02:39:E2:E2:84:81:78:9C:97:24:82:E1:4E:5B:3C:91
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 018F13EB262CE516942CBFFC83137615EAA9
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/laN9fAI54uKEgXiclySC4U5bPJE.roa
Signing time: Thu 25 Apr 2024 06:22:08 +0000
ROA not before: Thu 25 Apr 2024 06:22:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199740
IP address blocks: 212.52.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:13:eb:26:2c:e5:16:94:2c:bf:fc:83:13:76:15:ea:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Apr 25 06:22:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95a37d7c0239e2e28481789c972482e14e5b3c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0d:9a:63:8b:e1:7d:9c:93:24:39:2f:5e:e8:
98:50:69:6a:b7:ba:f2:b9:aa:70:87:7c:48:30:ff:
c8:09:17:49:8a:dc:2f:ea:3a:1e:a2:89:fb:37:5b:
8a:83:7f:35:fa:02:65:fa:d9:dc:af:5e:ad:f9:0f:
bd:57:ec:72:8d:a7:63:21:c9:d6:bb:2c:aa:a0:e2:
54:c7:1b:44:19:a7:9c:6f:b7:bf:17:d7:ea:23:1b:
61:51:49:e0:71:e6:b5:c9:1d:0c:9d:e8:7d:1a:0f:
86:4e:63:3d:77:4d:3f:4d:67:d7:5c:93:92:fb:bb:
49:0a:00:ab:25:c8:cf:cb:b1:a9:63:e3:f0:fc:b8:
df:49:2d:44:d8:03:93:d9:56:a0:35:6f:da:ef:e6:
f4:d3:02:f7:da:11:5c:14:e4:86:a3:e8:00:43:28:
21:69:52:85:f4:c5:e5:30:a7:54:2f:65:da:ad:8a:
61:96:25:27:6d:ff:16:70:a1:e3:8a:b5:bc:29:74:
bd:0c:6b:38:67:ef:ce:01:39:d6:86:65:43:9c:88:
c9:a1:47:a9:c9:3d:db:cf:25:0a:7d:68:dd:6e:ed:
5e:5d:b6:f6:45:1d:8c:4f:e5:61:1c:87:52:60:63:
90:90:d1:a6:df:33:64:79:6e:46:66:58:8c:66:2b:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A3:7D:7C:02:39:E2:E2:84:81:78:9C:97:24:82:E1:4E:5B:3C:91
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/laN9fAI54uKEgXiclySC4U5bPJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.12.0/24
Signature Algorithm: sha256WithRSAEncryption
87:11:83:de:ee:50:97:8c:77:92:08:e8:19:bc:a9:00:85:92:
1a:86:6d:1b:7b:f3:62:9c:f7:7f:9b:b8:04:36:0a:45:fa:31:
4f:1b:be:19:4d:c3:88:db:b3:80:36:6b:8e:cc:df:59:f8:8b:
46:be:73:1b:e7:df:8b:0b:b7:c7:ae:d1:ee:cd:ea:9f:0c:2a:
72:c0:12:f9:01:08:8a:ff:92:43:db:3b:8f:bd:97:42:8d:6c:
5f:a3:d7:e1:ac:db:e4:d0:23:cd:38:5d:36:d5:fe:ef:38:05:
c4:60:e4:cc:01:bb:b8:6f:ec:90:2d:9b:9c:b5:1e:ee:2c:e1:
52:b6:7e:1b:55:cc:dd:58:67:65:c2:d2:1c:5d:cb:22:0b:77:
80:b6:ad:71:44:45:ec:74:1c:f4:fb:6f:f2:f1:8a:b5:79:a1:
c8:5c:bb:39:2b:bf:d2:4b:f5:27:8a:c9:6f:20:20:28:42:fc:
44:3e:22:28:90:4a:de:8e:8e:35:1b:f9:68:62:1f:fa:20:fa:
3d:6b:c9:9d:88:36:29:2b:cd:c3:25:b8:f9:20:f8:56:d0:30:
c2:c4:20:be:2c:06:86:98:55:10:68:52:d3:bb:1b:83:eb:91:
3c:aa:20:15:ed:3e:dd:50:7b:c9:de:10:0f:bf:81:ec:bf:82:
cb:7e:73:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:14:20 2024 by rpki-client on console-fra.rpki-client.org