Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/nUQTVRWCswDrmLjR8DGTqthw3DE.roa
File: nUQTVRWCswDrmLjR8DGTqthw3DE.roa (raw, json)
Hash identifier: KgdF0DGt0MlCf75EJopxEtUZjhJP2z474zCZEIM1/uo=
Subject key identifier: 9D:44:13:55:15:82:B3:00:EB:98:B8:D1:F0:31:93:AA:D8:70:DC:31
Certificate issuer: /CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Certificate serial: 018CC493615243F39B4EAED664A047F1E7FC
Authority key identifier: B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/nUQTVRWCswDrmLjR8DGTqthw3DE.roa
Signing time: Mon 01 Jan 2024 10:30:42 +0000
ROA not before: Mon 01 Jan 2024 10:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42008
IP address blocks: 212.8.192.0/19 maxlen: 24
212.15.192.0/19 maxlen: 24
2001:ae0::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:61:52:43:f3:9b:4e:ae:d6:64:a0:47:f1:e7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Validity
Not Before: Jan 1 10:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d4413551582b300eb98b8d1f03193aad870dc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:be:4f:86:9a:97:5b:e4:cb:26:5d:57:37:ca:
01:fe:df:8b:ff:61:17:44:f5:0a:5a:63:e6:33:74:
2b:48:b3:93:21:5a:5e:f1:4b:8c:30:74:cc:a1:e3:
3e:bf:ff:99:51:ae:93:c5:f7:b8:1b:16:95:98:1f:
48:d6:3f:be:29:ac:4e:de:d2:30:4b:16:8e:c9:a8:
1f:e0:30:dd:3f:41:e8:b1:aa:34:9c:e6:11:b7:3d:
84:a3:71:b8:7e:d8:9b:09:99:f3:ab:5b:80:8c:8c:
2f:a8:e1:fc:80:93:25:cd:05:9c:6b:1d:5d:d4:b9:
4e:7d:fa:5f:ff:77:66:34:8e:c9:54:60:8a:82:65:
e5:90:a5:8d:1c:aa:2c:97:57:3f:f7:c7:5b:b0:b7:
ac:ff:ed:12:52:ae:59:26:ad:17:97:c7:f1:13:69:
47:8a:70:27:45:8b:ad:cc:f9:38:40:0e:41:85:2d:
7f:88:77:09:c7:99:c2:f4:9d:39:54:db:c1:4b:f4:
49:6b:e4:8d:c4:30:69:cb:d7:70:25:86:d8:29:26:
b0:8e:eb:fd:03:ae:a2:6e:56:70:f3:9f:d0:fb:73:
57:da:2d:67:94:b8:cc:ce:da:7a:20:59:df:09:15:
e2:55:9d:8e:41:a1:5e:21:f0:d5:65:07:6f:d1:9d:
3c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:44:13:55:15:82:B3:00:EB:98:B8:D1:F0:31:93:AA:D8:70:DC:31
X509v3 Authority Key Identifier:
keyid:B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/nUQTVRWCswDrmLjR8DGTqthw3DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.8.192.0/19
212.15.192.0/19
IPv6:
2001:ae0::/30
Signature Algorithm: sha256WithRSAEncryption
08:97:c8:75:bf:a2:89:04:50:81:38:33:a4:d8:a1:28:27:03:
b9:9e:e7:e7:b4:f7:56:e2:6d:b0:76:34:6d:92:77:b1:1a:75:
cf:93:c1:7e:1f:8c:f3:16:62:80:1f:4e:ba:b7:0b:11:86:c8:
57:77:8d:3e:6a:1c:3d:1b:f9:d0:66:da:cb:51:ab:06:08:57:
49:9d:3d:b7:86:09:64:03:0f:b6:f7:0a:71:a2:dc:07:97:4d:
ea:7b:d7:2e:c5:bd:21:cf:bb:a5:84:fe:91:90:ee:36:30:c0:
6a:b2:90:23:10:6e:29:73:08:5f:ba:fb:af:ed:8d:5b:86:e7:
40:96:e7:b2:40:35:d3:05:60:43:17:47:5f:e4:c7:69:da:f8:
0b:17:58:e6:60:cd:ce:3b:44:0d:c8:37:8e:b7:9a:ff:29:9f:
72:71:c2:35:5c:ba:52:c7:25:d1:4c:8a:72:ea:7b:6a:07:52:
28:28:5e:3f:67:00:87:34:6c:24:fe:61:e2:d3:af:2d:18:b2:
f4:68:74:5a:35:9f:c7:39:fe:8a:f2:e7:94:2b:0b:28:48:87:
98:3c:11:ba:89:3e:74:dc:67:41:61:a0:f6:78:d0:bd:cb:e5:
42:c9:8f:1e:58:35:c3:69:28:a0:16:a8:12:e3:d3:36:74:d3:
17:9e:d9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:31:36 2024 by rpki-client on console-ams.rpki-client.org