Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wU45uqUioVYgiuwwK4D0sVPAvLo.roa
File: wU45uqUioVYgiuwwK4D0sVPAvLo.roa (raw, json)
Hash identifier: HJgVSSuiZOLt9WxvGicWUom4YTISC3Iy1m90akIOmcY=
Subject key identifier: C1:4E:39:BA:A5:22:A1:56:20:8A:EC:30:2B:80:F4:B1:53:C0:BC:BA
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018ECCAD1FBFF227F1BA2C3A95F51F0140D9
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wU45uqUioVYgiuwwK4D0sVPAvLo.roa
Signing time: Thu 11 Apr 2024 10:21:21 +0000
ROA not before: Thu 11 Apr 2024 10:21:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215186
IP address blocks: 212.38.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:ad:1f:bf:f2:27:f1:ba:2c:3a:95:f5:1f:01:40:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 11 10:21:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c14e39baa522a156208aec302b80f4b153c0bcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:1a:33:26:67:20:fd:cf:c6:17:03:0b:7b:
6a:f6:a7:c9:82:9b:72:19:b6:49:8c:58:3d:eb:fb:
0a:a0:a5:c4:e6:b6:b7:4e:74:28:d2:32:a0:62:70:
99:a8:e7:2f:25:ba:e3:e2:d4:01:70:c9:6e:d8:a5:
ad:ce:f9:85:23:e1:ad:76:45:78:ab:99:1c:e3:52:
6a:ce:de:8f:cb:00:4e:fe:db:8d:a2:6a:dc:0d:98:
c2:a3:ba:da:bb:f7:e5:dc:2a:75:c0:72:37:ce:33:
88:4c:7f:65:4a:1e:7a:a6:59:d5:90:46:3d:6a:e4:
be:a8:a5:d8:d0:a7:41:43:ac:7f:43:89:66:44:e0:
ba:c0:b6:b9:1d:dc:69:92:10:09:0e:43:d0:fb:4f:
1a:e5:cd:eb:83:ac:49:ed:10:3e:23:71:17:27:40:
4e:ac:19:90:97:31:60:81:ef:eb:f6:11:64:b0:4e:
cd:fa:78:9f:cc:7b:f6:b9:cb:a9:5c:0c:a2:54:06:
58:aa:b7:04:0a:a5:de:9d:ba:7f:91:5a:d9:42:31:
44:d1:29:30:74:87:e5:47:f0:23:2b:57:36:36:38:
c0:72:8c:a6:ce:18:6e:6e:86:35:0c:d7:11:17:a5:
b8:f1:f6:a8:a7:82:a9:a8:ab:4f:bb:7b:72:70:e1:
e4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4E:39:BA:A5:22:A1:56:20:8A:EC:30:2B:80:F4:B1:53:C0:BC:BA
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wU45uqUioVYgiuwwK4D0sVPAvLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.38.83.0/24
Signature Algorithm: sha256WithRSAEncryption
20:8a:03:f6:a3:ef:fc:0d:a8:ed:71:d6:67:ca:dd:77:ed:34:
72:49:2a:77:dc:38:11:6a:98:c3:48:f4:fe:6e:71:90:91:79:
ac:0d:64:e0:ff:22:15:71:c9:c2:71:72:6e:e5:13:be:f6:b3:
ca:08:c7:12:57:69:13:74:f4:c5:da:8d:70:2f:14:79:ea:90:
c9:b2:2a:61:1c:02:75:7c:53:b6:ac:ae:33:61:4b:94:13:01:
a9:34:73:f9:7d:5d:2e:9c:23:8e:36:bf:7e:6e:35:8d:50:a3:
ba:77:40:72:8d:fb:49:37:bc:27:83:24:b8:9b:2b:5c:69:c1:
e4:8a:13:1c:e4:79:4a:ba:c9:e9:07:e6:bd:fe:73:64:c0:51:
bf:ac:97:98:7a:b3:3e:fc:a6:98:23:fd:f2:c7:de:ea:dd:f2:
66:28:c7:64:79:14:b7:13:e1:bb:d2:04:ae:62:35:17:9d:0f:
b3:12:67:4d:ad:bb:ca:d8:29:7d:12:ee:60:a8:43:01:30:4a:
9a:0a:d7:a3:4d:fa:ac:25:b7:72:ff:7a:24:e8:12:44:f0:25:
b1:ff:95:c3:f1:a6:5c:eb:d9:02:c3:12:2c:0e:37:2f:3f:95:
7c:92:a4:8d:83:3f:49:4d:12:72:ed:72:21:26:4e:2f:d2:de:
48:96:93:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:24 2024 by rpki-client on console-ams.rpki-client.org