Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/I43KaPH9Zxm3899G3Mu-MyQ80Ec.roa
File: I43KaPH9Zxm3899G3Mu-MyQ80Ec.roa (raw, json)
Hash identifier: ogi45r8shqCQrBSR0IoZYDwX9PiUdAaO9oKgMOQOljE=
Subject key identifier: 23:8D:CA:68:F1:FD:67:19:B7:F3:DF:46:DC:CB:BE:33:24:3C:D0:47
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FF2491E565255170014E8BD4AC086CC09
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/I43KaPH9Zxm3899G3Mu-MyQ80Ec.roa
Signing time: Fri 07 Jun 2024 10:40:29 +0000
ROA not before: Fri 07 Jun 2024 10:40:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 267507
IP address blocks: 212.38.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f2:49:1e:56:52:55:17:00:14:e8:bd:4a:c0:86:cc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 7 10:40:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=238dca68f1fd6719b7f3df46dccbbe33243cd047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:5e:36:1c:8e:58:d3:e2:a2:a6:7e:ab:7e:
73:5d:78:2d:6b:99:78:09:91:be:9e:f3:7c:a0:81:
1f:91:dd:c6:3e:6f:2a:f6:18:c4:04:b1:e0:31:9c:
17:16:bf:b6:d5:fb:b7:a2:73:2c:c8:aa:8a:37:75:
e5:99:5c:0e:9e:b5:68:03:c0:4a:44:86:30:5f:9d:
d5:13:aa:1b:15:77:2f:ec:f4:51:9d:f8:93:e5:0f:
15:9b:63:4a:ae:95:58:ec:6c:14:07:a8:a3:1c:8f:
6f:e7:b3:63:3d:52:08:0b:08:9b:67:84:89:28:1e:
fa:e8:45:04:ee:b9:66:b6:6a:07:ba:71:a1:76:b7:
de:2d:35:94:e4:fb:84:a5:00:12:c3:a6:1c:af:16:
fc:bf:43:d0:34:56:be:77:f1:ac:94:94:73:5b:0b:
91:32:2b:5d:95:fa:ae:78:4c:91:2a:bc:2f:80:63:
51:3b:5c:c9:c3:e6:3d:38:dd:d7:ec:db:fd:5b:ba:
78:f0:e7:72:60:84:f5:6d:df:33:ce:95:ac:cd:8c:
60:f7:a4:0e:2a:d1:97:b6:50:4e:c7:3c:c0:17:51:
d1:f9:54:f7:ee:3c:32:c6:69:10:10:a0:dd:ab:8a:
f2:a8:cb:d6:3b:2f:72:85:14:24:59:fe:7e:43:15:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8D:CA:68:F1:FD:67:19:B7:F3:DF:46:DC:CB:BE:33:24:3C:D0:47
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/I43KaPH9Zxm3899G3Mu-MyQ80Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.38.84.0/24
Signature Algorithm: sha256WithRSAEncryption
67:7a:7c:52:fa:93:9a:43:f4:72:0e:e4:97:c0:c7:fb:1b:6e:
55:af:87:f9:26:17:20:e7:d9:cd:19:9a:0d:68:34:98:66:bb:
8e:26:7f:ac:c9:c3:cd:90:e3:a3:33:e5:d6:6d:9e:04:6a:fc:
0b:02:a4:56:8c:0f:59:e5:48:5f:16:01:fc:f5:36:7e:67:89:
99:c1:0a:d9:c8:11:3c:01:c7:1e:f1:a9:a4:f0:d4:f8:3f:ea:
ab:a8:7c:d0:5d:7e:46:e4:a1:65:6d:19:c6:cf:5c:6b:c2:84:
41:34:60:88:8c:89:84:5f:4e:03:80:e2:20:55:74:85:90:af:
53:51:13:2f:03:07:c2:91:e3:31:11:71:ee:67:36:51:c3:c4:
ac:23:7a:42:60:e9:53:92:43:1f:00:03:fa:22:0b:20:27:d7:
65:0e:3b:a7:5d:82:ee:e8:0a:13:75:ba:75:4f:1e:c0:3f:37:
0d:8c:25:3f:ea:03:ca:e7:09:b7:90:65:71:de:94:4d:56:08:
32:7d:ec:8a:9d:d9:5f:74:18:c2:64:d8:80:b5:65:6d:e4:f4:
af:bc:2e:1c:75:eb:fc:90:85:e7:a8:28:ae:71:d2:ae:bf:d3:
c8:4f:f9:c6:16:57:7c:b5:84:10:4b:ec:04:1f:4e:59:10:32:
be:eb:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:05:50 2024 by rpki-client on console-fra.rpki-client.org