Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/XDWTmj_nnGq11LbhQoM2JOMlanI.roa
File: XDWTmj_nnGq11LbhQoM2JOMlanI.roa (raw, json)
Hash identifier: e90yJhxQLIJbOhU3vHrgPUaD5mL34XVc6165cq0csC8=
Subject key identifier: 5C:35:93:9A:3F:E7:9C:6A:B5:D4:B6:E1:42:83:36:24:E3:25:6A:72
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 018CC56DE63223EEC63967DF6D9706925634
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/XDWTmj_nnGq11LbhQoM2JOMlanI.roa
Signing time: Mon 01 Jan 2024 14:29:23 +0000
ROA not before: Mon 01 Jan 2024 14:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8879
IP address blocks: 212.101.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:e6:32:23:ee:c6:39:67:df:6d:97:06:92:56:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Jan 1 14:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c35939a3fe79c6ab5d4b6e142833624e3256a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:69:2f:8c:ff:8e:38:db:20:20:92:15:d7:15:
8f:33:15:4f:96:23:6d:78:b9:ea:ad:61:90:63:02:
b0:08:e9:54:7a:c9:16:a4:e8:29:87:40:69:41:4a:
34:b8:9c:ab:b2:4d:53:d5:31:ab:73:36:93:98:ca:
67:3b:21:99:7e:17:3a:91:07:f9:a3:41:b0:a6:5c:
aa:29:68:44:9b:db:76:3b:1f:a4:f6:8e:6c:a2:38:
80:35:24:61:bd:ce:fb:74:d8:81:a8:2f:4f:ab:89:
1f:9a:68:c3:6a:01:88:ca:40:a8:c1:ba:62:29:c9:
40:69:b8:a3:0c:e8:ac:1e:38:50:df:89:33:38:d7:
7f:58:d7:e7:ee:fa:aa:35:4e:d5:d5:98:77:78:62:
aa:f7:4a:cc:d0:fd:2f:84:f3:23:9c:d6:4b:a9:d0:
54:d8:11:4f:b5:d9:ce:78:0c:95:ac:97:7f:a3:e4:
ed:42:0e:96:46:2b:b3:48:30:48:e7:d3:1f:7c:29:
74:1e:81:cb:00:3d:e9:55:71:93:c2:f9:00:ec:2a:
2a:ce:c3:4f:3f:bd:41:54:c7:08:02:f0:3f:6e:68:
d8:64:ab:58:ca:cf:33:04:d2:aa:11:b0:2c:a5:db:
ba:05:96:cb:58:0d:87:87:22:78:95:5a:84:e9:e4:
be:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:35:93:9A:3F:E7:9C:6A:B5:D4:B6:E1:42:83:36:24:E3:25:6A:72
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/XDWTmj_nnGq11LbhQoM2JOMlanI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.101.192.0/19
Signature Algorithm: sha256WithRSAEncryption
20:4d:99:f2:88:60:95:fb:43:e5:1d:a2:9e:b7:3c:4b:ce:d6:
be:14:be:65:ce:b1:21:d1:c0:27:05:f7:e2:13:b6:a7:89:2f:
44:73:37:d7:48:88:aa:44:fb:4c:d2:ca:ad:61:32:15:9c:1f:
68:4e:30:78:72:45:9c:9e:09:23:3a:75:69:08:63:66:4d:ed:
8c:c4:e3:74:a9:9b:df:72:19:d2:33:ef:a4:6b:df:9f:a8:6a:
ef:fa:e2:55:fc:1c:28:f9:75:18:1e:c5:5b:69:14:c7:5d:25:
e3:da:be:bd:52:fb:65:bf:a5:75:5d:06:86:18:16:e9:f8:ac:
a0:b6:a1:75:0a:63:7e:89:c5:59:5b:c8:88:02:0c:a4:ad:e5:
d4:5e:2a:51:26:72:27:c6:e4:5f:91:b0:5c:4b:64:a8:52:9f:
28:f4:27:4c:d7:70:78:a6:9e:00:44:a6:c6:d5:e9:66:34:17:
9c:29:e0:3d:e8:ac:22:2c:1e:b9:d1:d7:8e:6a:7f:8c:27:92:
8e:03:44:aa:12:c7:2d:0d:9e:d6:96:1b:09:e3:1b:37:32:f6:
5e:9a:85:4b:a6:df:45:3a:50:da:be:d5:b6:f0:8a:70:dc:6e:
bf:2a:fa:e8:70:a3:f9:71:fa:f4:e8:a3:60:1d:33:f8:a7:0a:
d5:6c:6e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:10:34 2024 by rpki-client on console-ams.rpki-client.org