Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/EUUz0Q_0qiqbQjY_ugNT1G14jBY.roa
File: EUUz0Q_0qiqbQjY_ugNT1G14jBY.roa (raw, json)
Hash identifier: MW4r1h1cJ7JdYWFwTnU9W1w3viCsjmc+ZSRNohnkY7g=
Subject key identifier: 11:45:33:D1:0F:F4:AA:2A:9B:42:36:3F:BA:03:53:D4:6D:78:8C:16
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 018CC6B77FA3495E360592758FDB3B528B66
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/EUUz0Q_0qiqbQjY_ugNT1G14jBY.roa
Signing time: Mon 01 Jan 2024 20:29:23 +0000
ROA not before: Mon 01 Jan 2024 20:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12693
IP address blocks: 212.110.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7f:a3:49:5e:36:05:92:75:8f:db:3b:52:8b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Jan 1 20:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=114533d10ff4aa2a9b42363fba0353d46d788c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:22:88:34:b6:0e:88:ac:79:2e:41:96:ba:
cf:0b:dc:3c:59:9d:c5:0b:ff:54:5b:8b:68:2f:02:
7c:61:47:d7:9c:ee:3a:57:95:1b:0f:bc:ff:c1:76:
59:ea:27:5e:44:a8:87:13:12:9b:53:4b:b0:ef:b0:
a1:cd:85:42:74:68:e0:bf:3d:e5:97:6f:cb:7f:78:
21:5a:d8:ca:ea:37:ae:20:74:37:5e:1e:e4:ba:f9:
8b:aa:91:76:80:d0:39:fb:3a:5f:d6:0d:f6:2f:ce:
e1:5a:96:5b:20:2b:f6:40:a4:31:ab:51:3f:76:59:
eb:4b:6e:1e:63:3b:2f:db:45:e3:b3:42:64:2c:d0:
f1:f9:20:ea:26:80:6d:b1:55:a8:d9:3a:2d:10:83:
a2:3b:22:7f:b0:30:e8:eb:a7:46:a4:2a:28:f1:83:
3c:a9:0e:2e:56:aa:b3:0c:d0:24:7c:dc:1a:59:24:
02:12:c3:52:c6:a4:45:4b:47:bb:c6:af:18:bd:fe:
42:8c:4e:0c:67:02:79:17:8b:37:de:de:84:58:59:
17:76:a2:60:1c:2e:0e:cf:9d:b1:1a:3e:9b:fd:9e:
33:5e:90:ad:fa:23:2b:a2:58:89:b7:05:9f:bb:5a:
6e:59:b8:e5:02:15:39:1e:df:57:2a:16:87:3a:5c:
43:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:45:33:D1:0F:F4:AA:2A:9B:42:36:3F:BA:03:53:D4:6D:78:8C:16
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/EUUz0Q_0qiqbQjY_ugNT1G14jBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.110.224.0/19
Signature Algorithm: sha256WithRSAEncryption
78:cb:a4:21:3b:58:c0:6a:91:8b:e5:74:93:b4:5b:49:75:c1:
aa:5e:32:c2:cd:fa:e8:7a:09:a6:0f:a1:73:04:c1:f7:08:c7:
93:fd:0d:1f:88:bd:76:74:c4:44:49:18:96:14:d9:05:78:2f:
13:a3:01:45:d9:d5:35:b5:82:a0:06:01:c5:24:62:1e:f6:05:
f7:6f:d3:7d:e0:4b:c5:81:68:02:6b:f3:24:2a:40:c7:60:de:
68:75:27:bb:08:59:b5:f2:6d:af:da:6f:77:fc:d8:a4:a0:34:
73:ce:13:58:ca:30:0d:67:ce:07:e3:fa:33:55:14:5a:4a:92:
de:c3:b8:dc:d7:4e:66:86:65:f1:2c:81:ae:98:2d:79:d1:de:
82:aa:e8:0f:ec:93:8e:d5:b9:8e:3c:c3:09:27:49:a7:f2:66:
57:45:68:48:47:9a:a2:77:3e:73:b6:d3:b4:b3:bf:7c:59:c2:
1e:68:40:8f:0d:2f:a4:cf:50:98:c3:26:23:47:f0:c5:0f:7e:
61:53:5a:36:16:f8:ab:be:4e:26:30:7e:11:15:3c:24:70:7a:
16:ad:9a:eb:23:10:97:ed:aa:9c:77:17:40:21:a3:5a:eb:ad:
c8:c0:5d:3d:d3:8c:0f:7a:06:e6:b9:f8:aa:e3:8b:3f:8c:6e:
55:c7:e7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:33:17 2024 by rpki-client on console-ams.rpki-client.org