Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/GhkuO5PjNen8RpJENCMhFzZ-lqU.roa
File: GhkuO5PjNen8RpJENCMhFzZ-lqU.roa (raw, json)
Hash identifier: 7Wqmuke/aN8iHosZ19rw2EcRk9UKPkFNs55VAJdVNjI=
Subject key identifier: 1A:19:2E:3B:93:E3:35:E9:FC:46:92:44:34:23:21:17:36:7E:96:A5
Certificate issuer: /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial: 018E32DAD1EE19F09E91D427DDD20117EE1E
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/GhkuO5PjNen8RpJENCMhFzZ-lqU.roa
Signing time: Tue 12 Mar 2024 13:29:45 +0000
ROA not before: Tue 12 Mar 2024 13:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30823
IP address blocks: 212.56.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:da:d1:ee:19:f0:9e:91:d4:27:dd:d2:01:17:ee:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Validity
Not Before: Mar 12 13:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a192e3b93e335e9fc46924434232117367e96a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:a8:28:b0:fe:e1:e1:7a:a3:33:b2:68:47:
3a:d4:45:d2:12:c0:56:56:d7:af:c6:3d:4c:25:d7:
91:a2:ec:f5:ca:11:43:84:d3:5c:c2:69:b4:93:bf:
1b:17:08:41:8c:bb:fc:29:21:a6:55:3f:aa:b1:dc:
09:d7:40:04:b8:a6:ae:c6:ec:b0:13:e2:43:50:5b:
34:56:6a:3b:ba:13:e0:53:59:db:e1:08:ed:de:a5:
67:5a:a0:43:82:83:e1:cf:dd:2c:6d:c3:e2:bd:46:
47:78:db:48:3f:59:62:1f:8e:36:8d:3c:79:16:57:
e9:25:ca:8a:4e:f7:84:ce:8d:8d:f2:71:6f:bc:9b:
00:82:5f:e8:3f:c7:f3:09:7f:0f:1d:51:69:8d:c3:
f8:c9:6b:14:c5:32:a9:76:23:52:fd:55:72:20:3a:
b9:1e:81:99:73:71:1e:7a:bf:17:1f:71:ff:ac:14:
a4:c3:70:c8:32:6a:0f:ac:34:b2:f2:93:1a:3d:38:
a2:42:d9:4d:eb:92:91:f5:fe:16:44:49:7b:c6:8a:
a9:4e:b3:b4:15:03:43:7e:ff:e3:4a:c7:19:c2:c1:
05:bc:59:01:2f:ed:4b:12:aa:1d:d5:ef:30:4c:69:
34:09:b8:0d:c0:b5:d7:d2:b0:9a:ce:e9:a2:e8:ed:
a5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:19:2E:3B:93:E3:35:E9:FC:46:92:44:34:23:21:17:36:7E:96:A5
X509v3 Authority Key Identifier:
keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/GhkuO5PjNen8RpJENCMhFzZ-lqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.56.58.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:07:80:98:bd:d3:2f:74:8d:02:91:be:94:a6:ce:54:d5:59:
24:c9:1e:19:de:b5:9e:bb:2f:ad:75:d8:46:ed:3c:4b:9a:bf:
cb:95:c1:d5:6f:08:51:82:dc:ff:ea:05:b1:fd:fd:fb:a5:8f:
64:95:9d:9e:43:15:3d:69:ca:27:07:8f:e4:e8:9c:8a:b1:92:
fb:72:0b:70:79:f0:bc:c8:b5:d5:ba:eb:aa:6d:c3:26:62:9b:
b8:6e:19:d9:65:34:2d:65:c6:53:44:a5:de:b3:f8:9e:bc:25:
a2:af:b5:18:66:cd:6f:29:43:f3:57:c7:7b:0d:e0:bb:e4:3b:
00:ed:42:ce:6a:98:44:83:09:fe:51:29:0f:23:62:3b:18:f7:
06:5c:47:43:9f:b1:1b:ce:6d:19:66:df:41:bf:5c:51:64:ac:
09:ef:26:0c:d8:22:bc:f9:50:7d:34:e2:20:5a:22:c9:94:86:
83:c1:d0:e3:2a:67:b4:9f:bc:b4:f0:0b:1e:2c:a7:cf:bf:22:
60:00:59:69:9e:91:03:c5:19:3a:ed:c7:71:70:b9:2c:20:76:
eb:93:bc:75:13:eb:67:2f:24:b4:44:cc:ca:75:db:0f:1a:d8:
dd:62:39:d8:8f:21:05:f9:e3:cb:32:8c:6c:ad:3a:76:2c:1d:
21:f5:c3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:36:47 2024 by rpki-client on console-ams.rpki-client.org