Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f8f541-7d27-4730-8c58-ab6c6d65ed26/1/kCyDRxi6bBTDTtwAoe_cmv3g9_Y.roa
File: kCyDRxi6bBTDTtwAoe_cmv3g9_Y.roa (raw, json)
Hash identifier: ggu9aekmzWRYn8N6Q/DlCPN95Zr/HabM8WwzTEggqx4=
Subject key identifier: 90:2C:83:47:18:BA:6C:14:C3:4E:DC:00:A1:EF:DC:9A:FD:E0:F7:F6
Certificate issuer: /CN=d1938f365daf336e0f2a2df6dd62dfeaa4bfcc46
Certificate serial: 018DAA1A87EAED3A67560E9289D070A3073A
Authority key identifier: D1:93:8F:36:5D:AF:33:6E:0F:2A:2D:F6:DD:62:DF:EA:A4:BF:CC:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZOPNl2vM24PKi323WLf6qS_zEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/f8f541-7d27-4730-8c58-ab6c6d65ed26/1/kCyDRxi6bBTDTtwAoe_cmv3g9_Y.roa
Signing time: Thu 15 Feb 2024 00:11:21 +0000
ROA not before: Thu 15 Feb 2024 00:11:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216293
IP address blocks: 212.46.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/f8f541-7d27-4730-8c58-ab6c6d65ed26/1/0ZOPNl2vM24PKi323WLf6qS_zEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/f8f541-7d27-4730-8c58-ab6c6d65ed26/1/0ZOPNl2vM24PKi323WLf6qS_zEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZOPNl2vM24PKi323WLf6qS_zEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:aa:1a:87:ea:ed:3a:67:56:0e:92:89:d0:70:a3:07:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1938f365daf336e0f2a2df6dd62dfeaa4bfcc46
Validity
Not Before: Feb 15 00:11:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=902c834718ba6c14c34edc00a1efdc9afde0f7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:71:ca:b1:35:7c:8a:46:c0:dd:8c:c5:6c:
f7:e3:03:4a:7a:9b:85:0d:a6:c6:23:73:c0:09:87:
d2:d9:d3:57:27:a9:9e:47:5b:de:e6:51:c2:a8:8b:
f9:ce:03:34:3d:e2:3d:fa:b6:87:ca:61:b2:e7:b3:
47:5c:08:ce:51:7d:af:c9:db:e7:95:32:f6:4d:0a:
75:20:1d:17:34:95:ab:af:07:c1:51:64:5d:97:d6:
e7:25:da:42:59:a3:4f:37:f5:54:5e:ba:e0:1a:d4:
62:b7:e4:20:55:b9:b7:4d:d6:f3:bb:ea:b9:fa:e2:
41:6e:95:3f:2b:f2:f6:20:5f:23:e5:9e:b3:06:e2:
7f:df:81:28:20:77:20:9e:0a:23:ea:f6:27:c1:25:
78:28:21:61:0a:a8:58:e7:21:f2:9b:9d:ed:8c:94:
bf:83:d2:a6:f3:61:7b:4b:d0:22:07:a3:9c:8a:e4:
f0:69:f8:45:8e:ed:46:40:1b:a8:91:66:4d:b0:92:
d9:ee:dd:a5:50:95:09:26:4a:0a:f1:12:7d:84:00:
be:8e:e1:3b:c0:21:78:de:a7:63:d1:23:5f:28:5d:
e8:69:dc:d4:8b:15:43:dc:54:8d:3a:9a:c0:ac:2f:
44:65:ee:d3:0a:d9:8b:79:71:c8:c2:32:de:b7:2d:
66:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2C:83:47:18:BA:6C:14:C3:4E:DC:00:A1:EF:DC:9A:FD:E0:F7:F6
X509v3 Authority Key Identifier:
keyid:D1:93:8F:36:5D:AF:33:6E:0F:2A:2D:F6:DD:62:DF:EA:A4:BF:CC:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZOPNl2vM24PKi323WLf6qS_zEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f8f541-7d27-4730-8c58-ab6c6d65ed26/1/kCyDRxi6bBTDTtwAoe_cmv3g9_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f8f541-7d27-4730-8c58-ab6c6d65ed26/1/0ZOPNl2vM24PKi323WLf6qS_zEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.60.0/24
Signature Algorithm: sha256WithRSAEncryption
12:5c:4f:67:64:5e:6e:ed:cb:5f:a7:06:7d:9c:92:02:07:a1:
c4:d7:58:93:0a:f2:c3:3e:0b:6d:2b:bb:fb:76:4d:07:11:8f:
2a:19:53:60:58:45:b1:31:76:27:81:37:d8:6d:81:84:1e:bf:
58:3a:8f:d8:95:08:32:b7:7e:ad:b4:bf:ad:b3:c1:6f:e2:6f:
69:48:d1:db:c9:ed:99:76:94:e3:fb:74:eb:db:29:f9:12:ab:
d4:5d:6b:43:1d:6e:43:b7:1b:60:38:f5:cc:cb:db:28:08:cc:
bd:71:9e:60:a6:b4:6b:c4:90:35:ec:03:c8:3d:ca:8c:f2:49:
36:d1:8c:6b:c5:ba:58:cd:e6:d4:a4:50:ab:cf:98:96:75:f1:
e2:10:ec:24:be:a2:59:94:f2:98:2a:83:d5:74:b6:0a:6e:8c:
f0:9b:4d:95:eb:a1:16:54:4d:41:db:6a:52:be:05:5b:fc:5b:
5c:fe:cf:a2:4b:ce:ad:47:b2:83:dc:c4:a4:21:4c:8a:3d:d5:
09:f9:f0:58:40:d2:5a:fe:45:01:80:55:b1:2c:70:c0:8b:2d:
7a:e9:2c:b1:b2:d7:68:75:c0:14:58:3b:b0:86:ee:12:11:ba:
da:8f:0a:78:42:45:53:a0:dd:43:06:6b:03:b2:72:06:1b:4b:
ad:e3:dd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:21 2024 by rpki-client on console-fra.rpki-client.org