Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/c9CefuZKv2gKpsdNzHFw8YgMSiU.roa
File: c9CefuZKv2gKpsdNzHFw8YgMSiU.roa (raw, json)
Hash identifier: zy3IIalav8vexHepBRndQl2O7JfinV/2BmNULSVOc1I=
Subject key identifier: 73:D0:9E:7E:E6:4A:BF:68:0A:A6:C7:4D:CC:71:70:F1:88:0C:4A:25
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 018CC5DC2187CB9703551AFA078D8BD5E8BF
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/c9CefuZKv2gKpsdNzHFw8YgMSiU.roa
Signing time: Mon 01 Jan 2024 16:29:47 +0000
ROA not before: Mon 01 Jan 2024 16:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205302
IP address blocks: 212.183.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:21:87:cb:97:03:55:1a:fa:07:8d:8b:d5:e8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 16:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73d09e7ee64abf680aa6c74dcc7170f1880c4a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:27:ba:40:87:20:9a:68:fa:b3:65:36:a0:
c5:e8:df:6f:c3:e1:1a:56:80:21:c5:ad:2c:4f:dc:
74:05:49:ba:3a:fa:c8:d2:2a:76:08:b0:9a:c3:5d:
39:b0:59:a6:e9:9c:a0:34:4e:e2:6e:de:0c:43:72:
7b:98:51:7b:3a:e3:2d:7a:fb:59:66:34:b8:2c:d9:
e2:0e:b7:d8:47:45:6f:2f:c2:33:02:67:13:ba:b0:
6b:96:68:77:c4:41:e3:75:01:58:19:03:21:fa:70:
12:e6:0c:33:7e:c1:bb:f8:3a:d9:af:92:98:63:e7:
24:ab:9a:92:d9:72:2a:da:d6:18:42:e6:0a:25:52:
3c:e6:29:fd:42:64:0e:4e:9d:6d:a4:66:d8:b3:b7:
c7:ba:f3:ef:67:2f:f9:c5:86:4e:5b:45:0f:05:24:
aa:cf:fa:07:f2:ac:5a:12:4b:7e:bf:ec:bf:66:c5:
ed:68:44:41:c9:64:e5:b6:f5:5e:ae:a4:94:bc:24:
a9:8e:97:ea:ca:48:23:52:ef:e7:e7:43:a9:e9:40:
0e:9d:11:32:ed:44:9d:00:c0:b5:1b:5e:a2:ca:84:
45:3f:3f:47:0b:45:c3:18:75:b2:83:c4:43:3b:12:
6c:7f:be:4e:8c:64:b5:b8:1e:51:59:31:fc:6f:1f:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D0:9E:7E:E6:4A:BF:68:0A:A6:C7:4D:CC:71:70:F1:88:0C:4A:25
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/c9CefuZKv2gKpsdNzHFw8YgMSiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.183.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:2b:25:d4:64:2c:a2:23:9c:15:98:1c:31:28:4e:10:b1:2e:
0c:a9:70:3c:7f:49:db:4a:c3:31:b0:f9:da:a1:a5:3b:e3:84:
6f:a6:2e:15:3a:1c:b1:3c:8e:95:08:fc:d7:f9:be:0b:19:79:
71:d3:6a:cc:7d:90:06:3a:80:6f:7b:4b:26:8a:f6:74:8e:5a:
e0:d6:ef:b9:70:96:15:5c:01:18:33:2e:b0:6f:ed:02:1a:bf:
5c:ae:9b:b2:f4:65:02:53:67:b1:3f:29:fd:b4:07:a7:f7:98:
7c:c9:21:8f:bb:f7:56:50:4c:34:24:aa:bb:50:08:cf:f4:be:
4a:f3:02:9b:49:b5:9c:09:19:db:d9:37:82:25:c2:7f:03:1a:
62:fe:4b:8c:e6:7a:2c:f4:fa:0e:0e:a0:e6:c4:08:e4:27:92:
fe:85:b9:a1:d0:b0:4d:c9:4f:fa:32:c7:2f:f6:7b:a8:d7:dd:
f3:d0:c9:2d:48:91:00:be:0a:54:eb:ee:ab:d1:e2:94:d9:49:
4b:31:0e:62:21:ea:58:e0:0a:a1:96:ce:e4:ee:d1:0a:8f:67:
b2:4b:82:09:b2:70:07:03:19:cf:67:dd:40:1e:51:3d:63:6d:
e1:d6:7a:9b:ca:02:f3:91:70:1f:6e:eb:e1:68:4a:da:9f:d4:
83:0b:08:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:23:41 2024 by rpki-client on console-ams.rpki-client.org