Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/bh_ZXdFCD_YASY9O0X0zkJ_KmAQ.roa
File: bh_ZXdFCD_YASY9O0X0zkJ_KmAQ.roa (raw, json)
Hash identifier: sj0vzO7MVPQSNynN5vzaltmOyzQZutJgUQYGPBSqqaI=
Subject key identifier: 6E:1F:D9:5D:D1:42:0F:F6:00:49:8F:4E:D1:7D:33:90:9F:CA:98:04
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0192811BBF2EE6181B38BD297C971A12C36A
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/bh_ZXdFCD_YASY9O0X0zkJ_KmAQ.roa
Signing time: Sat 12 Oct 2024 14:22:12 +0000
ROA not before: Sat 12 Oct 2024 14:22:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214677
IP address blocks: 212.115.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:81:1b:bf:2e:e6:18:1b:38:bd:29:7c:97:1a:12:c3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 12 14:22:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e1fd95dd1420ff600498f4ed17d33909fca9804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:f0:77:40:f0:b6:e1:26:39:bf:09:b3:68:
6d:a3:ae:6b:15:89:e0:30:50:71:e7:36:6a:5e:d0:
d4:db:63:5e:94:12:41:29:9a:9d:dc:14:92:4c:9b:
4a:1b:51:99:1b:39:09:09:56:1c:7d:d6:b5:a8:72:
b4:e5:c9:a7:a6:8b:7a:53:71:dd:73:f7:de:72:ea:
6f:5f:12:50:a7:68:5f:57:36:07:bc:be:01:7c:6a:
94:b1:bb:d7:e4:c8:0d:52:71:c9:19:11:d7:6d:ea:
7e:dd:9a:8c:c4:ef:b1:90:bb:0f:8f:7d:7f:64:7e:
5c:87:fe:a3:e9:f5:85:c3:f6:aa:84:1d:e4:99:78:
1d:be:fb:f1:7f:11:24:2a:d9:de:fc:f8:7c:a1:d9:
3d:ac:4a:9a:66:bc:88:3f:d7:8c:a9:ec:07:f0:98:
8b:10:d7:9c:69:a2:ff:15:a5:c4:ec:63:c7:a0:90:
f8:19:03:55:93:1f:3d:8b:ee:d7:d6:93:04:e8:3f:
b7:5f:98:d1:52:b4:ad:0e:46:ce:94:e8:e8:57:39:
41:df:be:bf:af:b3:06:f8:46:99:ab:39:56:42:ec:
21:7f:6c:83:f8:9c:55:98:0f:3e:97:0a:0d:32:f9:
60:0f:e9:97:40:0b:51:ef:f5:5a:08:30:e2:69:b1:
ce:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1F:D9:5D:D1:42:0F:F6:00:49:8F:4E:D1:7D:33:90:9F:CA:98:04
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/bh_ZXdFCD_YASY9O0X0zkJ_KmAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:68:0e:a7:82:79:f4:2f:ce:ea:52:59:fb:2f:e1:60:d0:4b:
94:9e:9d:3c:f1:8d:af:d1:69:c8:d2:d5:d7:4e:58:e8:af:63:
af:72:74:ee:36:77:6c:99:9b:67:09:da:d7:c5:df:6f:f6:b6:
a8:bc:58:fe:48:7b:ba:81:46:63:a4:fd:e5:6c:95:d1:b3:67:
bb:b0:52:70:d9:35:c8:ca:1d:0b:77:ef:94:51:2a:f9:d9:c9:
be:83:b3:12:dc:ff:74:2b:b5:d2:10:d9:95:57:20:7a:15:60:
8e:18:e6:c0:71:35:e6:4d:cf:b1:a4:12:df:34:a7:d1:95:b4:
c0:48:4f:cf:81:4f:d7:23:50:3f:f8:19:41:e9:f9:c8:08:7c:
43:76:08:89:ee:39:2f:15:4b:3a:62:27:62:ea:82:ea:66:ca:
a8:6a:27:3b:5b:bd:dd:c9:8d:ab:81:47:16:e4:96:ab:40:62:
ef:a4:8d:fe:83:85:4e:da:c3:68:3b:0b:ea:8a:85:68:65:f0:
56:d0:55:39:9e:c0:87:e3:d5:c4:6b:40:c9:ea:07:0b:be:59:
dd:2b:2d:0e:da:3f:ab:6d:d9:51:d6:d9:69:f3:87:50:b6:e8:
5d:e2:5f:35:52:16:ab:a5:59:32:71:c9:81:27:02:04:77:c3:
2c:26:5b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:04:45 2024 by rpki-client on console-ams.rpki-client.org