Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/z0AeTCJuR5UFUXvYFU_SH5bbzVQ.roa
File: z0AeTCJuR5UFUXvYFU_SH5bbzVQ.roa (raw, json)
Hash identifier: Wyzw6w79k8ESG86YnIEt2nGSOXZPD+5xGUu0+CAFu4c=
Subject key identifier: CF:40:1E:4C:22:6E:47:95:05:51:7B:D8:15:4F:D2:1F:96:DB:CD:54
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 018CC64B234B24BB54A3D82B2BDEBB56C682
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/z0AeTCJuR5UFUXvYFU_SH5bbzVQ.roa
Signing time: Mon 01 Jan 2024 18:31:02 +0000
ROA not before: Mon 01 Jan 2024 18:31:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63142
IP address blocks: 212.118.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:23:4b:24:bb:54:a3:d8:2b:2b:de:bb:56:c6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jan 1 18:31:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf401e4c226e479505517bd8154fd21f96dbcd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:f3:70:c8:6f:9f:df:92:ee:0d:a9:d1:d5:
21:ec:e0:9e:89:72:58:bb:71:0d:51:57:cd:4b:90:
2a:63:e8:c1:5e:3d:8a:24:16:8d:ec:5a:9d:91:d6:
95:e2:e0:7a:01:87:71:ac:35:f3:ae:b0:dc:07:0a:
7c:9e:83:50:d2:61:42:ec:18:af:ed:c5:c9:97:5c:
63:24:7f:13:8d:1e:78:59:50:fb:f3:e5:c1:d1:70:
7a:f5:f5:58:4e:39:77:dd:cd:f5:c4:49:55:b5:f4:
75:22:f9:d0:46:f3:2e:a0:fd:8e:64:d8:27:72:50:
f4:4a:bd:0b:2e:4b:1a:93:ff:52:c8:c3:7d:8a:d9:
73:79:2d:5a:c5:69:ec:95:9d:4f:9d:34:b5:a0:9e:
98:79:30:81:c9:5b:da:ab:02:71:eb:89:05:94:75:
72:84:0f:ab:d7:27:e6:ac:f5:59:df:3a:02:36:c4:
81:01:5a:04:0d:93:f5:c1:d7:15:00:11:9c:33:aa:
96:5b:6c:ce:58:6e:18:61:46:be:5b:61:24:38:5a:
e8:cd:05:9c:33:54:67:a2:0a:19:62:e1:01:a0:44:
89:22:ce:51:e8:ec:46:f7:a7:be:d4:8c:9b:51:7e:
b0:6e:90:cf:4a:c4:82:d4:02:67:23:ee:e8:93:be:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:40:1E:4C:22:6E:47:95:05:51:7B:D8:15:4F:D2:1F:96:DB:CD:54
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/z0AeTCJuR5UFUXvYFU_SH5bbzVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.118.245.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ed:89:f4:44:0e:4c:36:29:1d:2e:9c:b5:37:52:94:cf:30:
8c:0c:4e:67:3e:28:ae:f7:59:cc:b5:06:95:62:51:b7:a6:7b:
20:bf:85:b7:a0:63:c0:71:86:9e:02:b2:78:6c:1a:08:f8:02:
99:61:c2:15:82:a1:ea:14:c8:b1:1a:01:70:2c:f3:e1:b1:eb:
fc:9d:d9:e5:43:1a:5d:80:43:3c:e0:6b:d3:63:ed:c1:d9:1b:
c5:79:83:cf:0f:b6:92:df:d5:4c:38:d2:fe:0b:d3:b4:4e:5c:
6a:de:dd:df:c9:7a:30:27:98:a7:35:df:b3:44:26:5c:78:ea:
00:7d:51:38:c2:2f:21:6b:6d:b6:7b:46:5f:de:75:98:36:40:
09:d1:d5:cc:7c:cf:b8:2b:eb:98:95:43:7d:82:d4:ae:04:78:
ed:e6:df:7d:e1:d7:91:64:33:63:02:1b:74:48:32:ea:12:c3:
0d:5f:4c:25:00:c6:a9:1e:19:76:25:ac:fd:82:c7:90:40:11:
9a:ba:aa:d9:11:f7:57:14:bd:cd:f0:eb:03:7c:0d:7d:1c:a3:
66:44:22:72:f6:3c:59:30:b1:b5:5c:3d:5b:ea:64:70:1f:7e:
7e:45:bc:de:b1:3b:01:4f:38:c6:26:11:d0:ba:6a:aa:30:eb:
66:73:b7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:01:16 2024 by rpki-client on console-fra.rpki-client.org