Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/MuDWFTyXhTwMYdKc2jo70tKKO70.roa
File: MuDWFTyXhTwMYdKc2jo70tKKO70.roa (raw, json)
Hash identifier: XPiYNNxlE2q0sWLCph/qCqDk3Z+Wgpb/TUzfR8dWurI=
Subject key identifier: 32:E0:D6:15:3C:97:85:3C:0C:61:D2:9C:DA:3A:3B:D2:D2:8A:3B:BD
Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial: 018CC94D4E4E258FD5CB644C93435A083E2C
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/MuDWFTyXhTwMYdKc2jo70tKKO70.roa
Signing time: Tue 02 Jan 2024 08:32:15 +0000
ROA not before: Tue 02 Jan 2024 08:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202712
IP address blocks: 212.7.214.0/24 maxlen: 24
212.7.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:4e:4e:25:8f:d5:cb:64:4c:93:43:5a:08:3e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Validity
Not Before: Jan 2 08:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32e0d6153c97853c0c61d29cda3a3bd2d28a3bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:de:ae:fa:e5:c5:1f:06:5d:b0:a9:3d:9b:
f9:45:f8:a6:57:69:63:fa:51:cb:d7:c5:e9:1d:6c:
26:d7:c7:29:37:9e:f6:b4:6c:dc:ba:26:9e:e1:72:
3f:3d:f6:61:2b:69:7e:52:36:61:47:bd:60:a7:58:
3f:52:9a:4d:8b:0d:bc:73:75:21:18:87:00:b7:2e:
8f:5d:2a:80:78:b1:f9:45:39:54:8e:18:53:02:68:
85:b3:81:c8:0b:e7:54:b0:72:8c:b4:65:d1:44:5f:
0f:3e:10:ab:6c:db:8b:69:eb:2b:da:bb:59:d8:6c:
40:85:70:a2:ae:34:c1:1f:5a:13:63:64:35:08:6c:
55:3f:e2:c6:b0:0a:3f:2b:4e:55:61:18:dd:ad:c6:
16:e0:22:96:64:f7:51:8d:36:fa:8f:cc:2e:4f:da:
77:bc:d4:69:ad:d5:88:4c:fd:8a:80:c4:58:bb:54:
d0:60:8b:bc:6a:65:d7:c5:7c:81:3c:c5:72:64:c5:
16:76:4e:14:a4:f4:3c:7a:9f:80:85:17:6f:0a:36:
d2:e4:74:86:a3:5b:31:7a:ba:12:74:3e:52:f8:ac:
6a:9b:63:1a:99:49:80:f0:7e:4e:a9:c6:97:f6:07:
0d:ff:50:ed:30:53:fa:77:88:ef:1b:19:28:91:73:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E0:D6:15:3C:97:85:3C:0C:61:D2:9C:DA:3A:3B:D2:D2:8A:3B:BD
X509v3 Authority Key Identifier:
keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/MuDWFTyXhTwMYdKc2jo70tKKO70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.7.214.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:55:41:b1:f9:93:bb:9d:8d:47:25:ec:61:89:53:62:0c:ab:
98:dc:91:13:70:ab:95:8b:11:64:6f:d8:b7:90:25:e8:80:52:
47:a1:00:e4:f4:69:e9:22:ba:1b:17:fd:5e:8d:f5:a3:a7:e8:
a2:8d:31:94:69:38:05:ec:1e:4a:f7:1d:39:91:a5:b9:45:39:
24:0e:08:24:33:41:3a:25:1e:b8:79:1a:32:98:91:2e:95:4d:
72:e0:db:1c:4f:35:81:ef:07:61:cf:b0:44:d4:64:d6:e5:90:
5c:bc:3b:12:9f:55:98:24:01:d5:b0:a2:fe:d6:fc:93:54:b0:
a9:aa:81:d0:cf:d9:f9:62:e2:21:e2:40:0a:7b:b7:74:61:59:
b8:57:bd:50:a2:37:4d:93:e0:25:3c:f6:0e:10:40:34:df:06:
0a:42:65:aa:8d:ca:53:32:a9:f1:9b:fc:91:02:cb:cd:b8:a6:
52:56:6f:4c:b1:e1:6a:83:1a:ed:c0:13:71:59:e3:f3:ed:8d:
4e:f3:27:d6:b5:52:57:be:d2:67:0b:7e:8b:b4:9c:96:a0:d6:
b0:88:49:62:ca:66:77:5c:fa:ed:8e:8e:ee:f6:ef:df:6a:2b:
38:04:c3:77:15:c8:3a:ad:4a:96:68:95:6c:e0:4d:f3:71:b6:
93:2b:d4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:04:39 2024 by rpki-client on console-ams.rpki-client.org