Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/S36Ea9dlO8oI7tlniqGYBiL0oLU.roa
File: S36Ea9dlO8oI7tlniqGYBiL0oLU.roa (raw, json)
Hash identifier: KWGjYq3t/IB0pjr3Be0SElGtrxZc/d1VsnrN346ksQA=
Subject key identifier: 4B:7E:84:6B:D7:65:3B:CA:08:EE:D9:67:8A:A1:98:06:22:F4:A0:B5
Certificate issuer: /CN=5f673d2f621ae31407001748bbde638acbd86050
Certificate serial: 018CC5DCD833E4F2592D4C8F1DBCF74A86DC
Authority key identifier: 5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/S36Ea9dlO8oI7tlniqGYBiL0oLU.roa
Signing time: Mon 01 Jan 2024 16:30:33 +0000
ROA not before: Mon 01 Jan 2024 16:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12650
IP address blocks: 212.45.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:d8:33:e4:f2:59:2d:4c:8f:1d:bc:f7:4a:86:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f673d2f621ae31407001748bbde638acbd86050
Validity
Not Before: Jan 1 16:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b7e846bd7653bca08eed9678aa1980622f4a0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a4:ee:79:9a:89:0e:ea:37:05:a7:d6:3c:08:
ad:27:de:35:3a:c4:da:ca:87:78:40:01:6d:1c:9d:
06:3a:53:f3:08:51:0c:4a:a7:55:6f:68:a3:3d:3f:
ad:c2:da:12:46:00:9c:f9:3f:5e:0e:a2:3e:1b:f2:
ae:6b:20:4a:58:ce:28:2c:23:23:1a:45:08:52:10:
7e:2a:33:9a:b5:10:12:b3:a3:f0:eb:9d:26:c0:98:
fa:4a:45:19:f4:08:61:4b:f4:94:ec:de:03:a5:16:
b1:5c:59:78:15:0c:85:65:3b:f4:a2:eb:7c:df:86:
95:69:49:70:a2:82:6e:ca:f4:e6:94:d5:61:c3:7c:
9d:a2:9c:c1:37:80:ce:df:5f:bc:21:60:62:ad:71:
0d:49:f0:ef:89:93:71:6b:3d:9f:68:33:e2:8f:73:
62:51:95:32:31:f6:28:f3:87:6b:8f:75:78:b5:a0:
6f:e7:ed:6a:71:f5:c7:a5:f5:6c:d8:b2:75:35:d8:
af:0e:97:b4:93:d3:54:05:e4:77:28:ca:63:e9:d2:
1c:ec:72:57:a1:2f:15:a4:e9:e0:73:f1:35:c2:41:
38:52:a1:66:41:3e:94:97:7a:89:51:fb:c7:5c:fd:
fd:c3:31:a6:a8:f8:94:de:16:79:e2:60:1a:f7:6c:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7E:84:6B:D7:65:3B:CA:08:EE:D9:67:8A:A1:98:06:22:F4:A0:B5
X509v3 Authority Key Identifier:
keyid:5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/S36Ea9dlO8oI7tlniqGYBiL0oLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.45.96.0/21
Signature Algorithm: sha256WithRSAEncryption
85:82:c5:c1:c9:76:b3:df:06:c1:35:50:c1:d3:d7:8e:cf:62:
0c:f2:e5:2d:40:8d:17:27:ba:f0:c3:a5:a9:2b:93:82:52:d6:
88:49:eb:09:43:d2:ae:ec:79:eb:06:3b:21:81:94:64:19:41:
fc:0b:8c:43:76:d4:2a:c5:dd:32:df:71:89:bf:f4:3e:b0:86:
f8:b7:a8:54:04:08:47:fe:5f:87:02:fe:2e:55:ef:36:ec:ef:
d9:68:7f:77:6a:f9:f8:d5:ea:11:a8:ab:48:aa:1f:7c:2c:0c:
4a:a8:66:b8:fe:34:8d:b2:ed:a6:d4:24:5a:e5:a0:9d:22:0b:
f9:ec:fb:db:d0:31:1c:61:d3:53:ec:78:52:60:e9:5d:ac:ec:
df:ee:ed:06:72:e1:63:39:9c:ce:05:16:de:15:f1:5f:6e:15:
b7:5e:2d:39:4b:78:f3:3e:a9:3d:56:24:fa:b0:b0:b5:34:9d:
b4:30:9f:40:3f:d9:30:4d:5b:e1:9d:75:5a:ad:d5:65:ad:e9:
f3:63:ff:e3:df:c6:e1:2b:28:a8:81:22:8a:ea:7f:ed:24:92:
e9:d5:ec:0f:43:46:cb:75:77:ce:cd:5e:3e:f5:3e:27:af:7b:
80:66:7d:d4:4e:6a:b4:6c:1f:3b:bd:37:2a:d4:5b:a9:a1:cf:
14:57:e3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:40:09 2024 by rpki-client on console-ams.rpki-client.org