Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/0QtZZ3q___k2VAGd2mjbVqSAzj0.roa
File: 0QtZZ3q___k2VAGd2mjbVqSAzj0.roa (raw, json)
Hash identifier: RluxHyo/n3rdUeJJ24UIhirM6sWLcxulRGZH1XlHeh4=
Subject key identifier: D1:0B:59:67:7A:BF:FF:F9:36:54:01:9D:DA:68:DB:56:A4:80:CE:3D
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 018CC26D1E2A929D3E0DADC0965E6F3CC494
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/0QtZZ3q___k2VAGd2mjbVqSAzj0.roa
Signing time: Mon 01 Jan 2024 00:29:40 +0000
ROA not before: Mon 01 Jan 2024 00:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204582
IP address blocks: 212.193.123.0/24 maxlen: 24
62.76.251.0/24 maxlen: 24
212.193.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 04:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1e:2a:92:9d:3e:0d:ad:c0:96:5e:6f:3c:c4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 00:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d10b59677abffff93654019dda68db56a480ce3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:e9:d4:11:96:02:24:6f:b1:73:5e:a9:b4:
44:6f:ef:09:67:96:79:bb:c9:a6:47:6a:e5:7f:c7:
d1:87:85:35:03:30:8f:f5:cb:f0:0b:bd:da:55:3b:
a3:4d:c9:43:2d:99:0f:5e:37:2b:ad:7c:34:29:51:
c6:38:80:52:72:db:6e:6c:dc:85:24:f8:ac:f8:cb:
a0:6f:69:0d:41:71:2e:a9:a0:a4:b9:03:5e:45:3d:
53:a0:9b:36:bd:69:1f:c8:ea:71:b5:c8:03:6f:8f:
5f:51:bb:79:7c:a9:1f:a7:1a:13:7b:18:59:66:e3:
90:55:03:68:bd:70:ca:ce:b6:31:80:75:d6:db:8a:
38:04:31:4e:1b:69:0b:69:ce:e8:c6:81:10:a3:55:
e8:02:45:ec:3d:c9:5e:34:e1:92:05:b4:87:dd:31:
5c:11:db:43:63:94:9e:f5:cf:5f:39:6e:21:5b:38:
f5:72:8d:41:52:c0:3e:89:f3:59:05:73:f8:30:7e:
b5:4d:60:a0:6a:43:11:f1:fa:9b:52:bd:eb:06:11:
eb:e4:18:4c:3b:04:17:c9:d0:a3:14:eb:f3:b6:8a:
03:6a:71:93:73:17:54:4d:4a:24:26:b0:a0:1d:02:
52:2f:01:b4:28:40:85:81:c9:76:fd:a2:f9:49:87:
af:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0B:59:67:7A:BF:FF:F9:36:54:01:9D:DA:68:DB:56:A4:80:CE:3D
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/0QtZZ3q___k2VAGd2mjbVqSAzj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.251.0/24
212.193.118.0/24
212.193.123.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:89:25:b2:b2:40:7a:30:e3:d7:d1:f9:0f:2d:57:67:87:46:
60:8e:a6:eb:21:20:62:de:8c:2a:d3:28:b3:b6:5c:fc:0c:9a:
34:42:84:e5:53:75:64:22:af:99:53:71:6b:8d:45:4e:50:7c:
c2:a2:86:42:e9:8b:6c:29:53:a8:89:85:36:36:bf:e2:94:74:
9d:36:7d:d9:53:fd:6e:67:de:01:56:02:b7:23:4c:19:cd:23:
78:ee:ca:8e:55:48:db:fc:e4:2e:11:d9:88:a1:62:cd:9d:68:
ba:41:cb:af:a0:e9:f3:12:16:2a:70:26:76:35:85:fd:85:c6:
e9:5c:4b:6b:c1:1d:0e:f4:89:e3:ea:b9:0e:92:d8:60:f0:75:
9b:8b:e9:89:b4:41:fd:a3:f3:aa:53:fa:00:74:9c:50:ad:9f:
ee:a1:80:0f:70:dc:67:7b:91:66:c9:2f:73:d9:0d:1b:6b:fe:
d1:55:e2:df:a8:75:cd:ed:a6:2e:d5:38:e8:66:05:b9:af:ba:
f7:69:41:c9:49:44:d3:54:0c:b3:a0:84:18:b0:67:4c:be:91:
a2:6b:be:24:9f:36:66:58:67:12:19:6e:3b:a1:7c:73:90:a7:
c3:53:73:8c:39:8b:54:91:db:6d:26:be:28:de:91:c7:36:f0:
44:92:47:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 13:08:43 2024 by rpki-client on console-fra.rpki-client.org