Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/0PgC0b3y-i_I6rlCGoCG3p7PLGk.roa
File: 0PgC0b3y-i_I6rlCGoCG3p7PLGk.roa (raw, json)
Hash identifier: Jl+KRqXqNF0H9Yc7bbHSJrhzI5MUQLnnbzlxvH9AdS0=
Subject key identifier: D0:F8:02:D1:BD:F2:FA:2F:C8:EA:B9:42:1A:80:86:DE:9E:CF:2C:69
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 018CC5DC1F74373B6D03FBD3BBE8196FC28E
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/0PgC0b3y-i_I6rlCGoCG3p7PLGk.roa
Signing time: Mon 01 Jan 2024 16:29:46 +0000
ROA not before: Mon 01 Jan 2024 16:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57050
IP address blocks: 212.81.56.0/24 maxlen: 24
212.81.57.0/24 maxlen: 24
212.81.58.0/24 maxlen: 24
212.81.59.0/24 maxlen: 24
2a10:fa80:10::/48 maxlen: 48
2a10:fa80:58::/48 maxlen: 48
2a10:fa80:56::/48 maxlen: 48
2a10:fa80:216::/48 maxlen: 48
2a10:fa80:59::/48 maxlen: 48
2a10:fa80:57::/48 maxlen: 48
2a10:fa80:92::/48 maxlen: 48
2a10:fa80:212::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:1f:74:37:3b:6d:03:fb:d3:bb:e8:19:6f:c2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jan 1 16:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0f802d1bdf2fa2fc8eab9421a8086de9ecf2c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:49:13:7b:f9:76:96:6c:8d:b0:66:42:ef:
2a:66:58:01:ab:5d:35:fc:72:a9:62:80:81:e4:9c:
ae:46:45:69:f0:f0:49:7c:0f:50:6d:e6:58:ff:a8:
f4:b1:a4:2a:f4:a6:58:da:04:bc:f8:91:90:f7:8a:
68:20:d6:2a:98:85:45:dd:02:ed:a6:5c:2f:d7:2c:
5f:29:f9:1b:06:d0:64:be:ec:c5:bf:55:91:1a:f8:
d2:fa:c7:ae:37:8b:70:40:28:fe:4c:b3:66:44:76:
5a:14:71:59:20:72:75:5e:c4:b3:9f:9c:ca:06:18:
4e:8c:94:58:7c:8e:d6:12:a0:74:fa:84:11:fd:a1:
bc:67:b3:4b:23:68:a6:78:1c:dc:cd:e7:23:4f:ec:
92:cf:d0:fd:dd:bf:b2:2d:7d:5f:29:0f:03:e2:8c:
ee:d1:e3:d4:8d:97:1d:6d:fa:1f:f7:c7:43:2f:06:
55:b1:00:1d:9e:f6:a6:29:41:56:ec:38:e9:06:56:
ca:b9:34:53:ad:b2:6c:91:38:5d:85:fb:65:c3:99:
c8:2c:7f:d3:55:41:95:40:ec:1e:02:39:a9:a4:d8:
60:05:f7:ba:de:2c:34:b9:9d:fd:0e:b7:7b:a5:a1:
35:dd:8f:84:8b:e7:6e:d1:f7:9d:9e:ea:01:f1:bf:
51:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F8:02:D1:BD:F2:FA:2F:C8:EA:B9:42:1A:80:86:DE:9E:CF:2C:69
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/0PgC0b3y-i_I6rlCGoCG3p7PLGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.56.0/22
IPv6:
2a10:fa80:10::/48
2a10:fa80:56::-2a10:fa80:59:ffff:ffff:ffff:ffff:ffff
2a10:fa80:92::/48
2a10:fa80:212::/48
2a10:fa80:216::/48
Signature Algorithm: sha256WithRSAEncryption
38:5a:8a:6c:56:4b:ab:4d:70:08:a9:f4:1c:d5:3c:10:8f:8d:
99:3a:bb:79:1d:c5:79:88:9e:7c:a5:5d:3a:ec:bc:38:db:3a:
f2:e7:91:42:1b:10:ec:34:b5:cf:a4:8f:d5:02:50:d4:00:6a:
d5:07:c5:ac:a0:a5:fc:3a:9a:3a:03:83:ed:f4:ce:d7:44:0c:
c1:75:a3:0e:f8:39:78:fe:dd:c4:ae:50:7d:d6:ba:67:14:9c:
14:ad:d0:87:af:f0:da:07:f5:41:ec:b6:3b:dc:98:33:e3:d1:
cc:e5:65:c1:7d:14:ce:ca:76:61:0a:77:f6:27:0f:02:1f:a6:
a7:00:61:0c:0e:35:97:94:d4:14:7a:15:d2:4c:0b:0d:36:68:
f5:d2:76:49:be:02:b2:95:eb:6e:c9:e8:c1:b6:10:07:82:96:
2e:d6:38:62:f2:4f:8f:53:01:4e:07:3d:de:dc:48:e5:43:8a:
d1:a5:ff:2f:84:2e:44:25:e7:47:15:f8:5f:02:40:b2:35:fb:
ff:6e:a4:74:bd:b8:44:13:d6:16:1c:e5:30:ae:73:b6:70:0c:
2e:dc:ea:3d:0c:00:1b:6a:f6:1e:a8:a3:7b:7b:80:a1:11:4b:
88:98:af:f0:a0:12:5c:2e:ad:3b:32:69:55:e8:f0:f4:d5:92:
a1:67:7e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:28:47 2024 by rpki-client on console-fra.rpki-client.org