Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/oNOTt3G3uB7siLDq1qynPUdXcK0.roa
File: oNOTt3G3uB7siLDq1qynPUdXcK0.roa (raw, json)
Hash identifier: AYBt0D7bKX+1m8KV3Ji5HNGYFVxs4vcOoIvum80u7bg=
Subject key identifier: A0:D3:93:B7:71:B7:B8:1E:EC:88:B0:EA:D6:AC:A7:3D:47:57:70:AD
Certificate issuer: /CN=d223093ce150874016d793f439f43d2e6440c3f2
Certificate serial: 018CC801AD63942AE91F34295D5D1E6C5589
Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/oNOTt3G3uB7siLDq1qynPUdXcK0.roa
Signing time: Tue 02 Jan 2024 02:30:02 +0000
ROA not before: Tue 02 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12915
IP address blocks: 212.123.39.0/24 maxlen: 24
212.123.32.0/19 maxlen: 19
212.123.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:ad:63:94:2a:e9:1f:34:29:5d:5d:1e:6c:55:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2
Validity
Not Before: Jan 2 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0d393b771b7b81eec88b0ead6aca73d475770ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:2b:d6:87:bb:3e:69:33:0e:a0:7a:82:56:
b1:0c:70:a0:32:6b:49:ba:53:ca:76:bb:a7:79:00:
b0:a6:aa:c3:91:6c:be:76:b1:8d:00:b0:0a:8c:24:
e6:08:c3:10:5b:3d:a2:87:df:7f:6b:31:cc:57:fc:
54:53:8b:fc:ef:63:9f:f0:33:4f:d3:78:72:ed:cc:
58:a8:b6:51:0f:5d:59:fc:5f:b8:60:07:51:95:7c:
01:62:eb:5a:79:3c:0b:e1:15:3a:dc:15:4e:da:5f:
ce:58:d0:79:55:98:5a:25:e0:63:05:0e:31:49:11:
51:3a:55:ba:2a:e6:44:9c:ef:d7:2c:2a:f1:8d:48:
4a:43:34:31:6c:3b:a3:3d:20:6d:c8:a2:da:e2:3d:
df:ac:f7:f8:8b:a7:c3:c7:e0:3b:3e:15:ad:ff:5e:
a6:02:3b:18:f5:30:62:b9:90:92:53:de:c5:f2:a0:
db:bb:89:13:b4:8d:a3:b5:c1:28:81:1a:45:9e:22:
e7:b4:84:0e:27:a6:74:01:ea:9b:ce:2e:b0:7d:08:
53:ad:61:ee:b0:f8:f5:a5:23:b5:92:38:d1:e3:33:
06:8c:63:93:2a:51:c0:30:73:74:96:a0:b5:26:82:
24:77:dc:a4:5e:1a:3b:43:08:6a:74:b0:90:42:42:
74:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D3:93:B7:71:B7:B8:1E:EC:88:B0:EA:D6:AC:A7:3D:47:57:70:AD
X509v3 Authority Key Identifier:
keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/oNOTt3G3uB7siLDq1qynPUdXcK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.123.32.0/19
Signature Algorithm: sha256WithRSAEncryption
9e:7f:52:0b:5f:8d:4b:15:9f:0b:f9:c2:36:45:c8:56:41:7b:
ca:c1:a9:02:a4:1b:44:93:a8:c3:c6:48:c3:85:72:11:43:3a:
ef:43:e2:7e:d7:9a:81:40:df:e2:d1:3d:37:d1:3f:3b:ee:72:
b1:50:23:40:26:dd:1d:50:9c:5f:7e:a7:3d:cc:96:ed:8b:c3:
2e:4d:13:24:02:4d:d0:06:26:ad:3d:87:a5:64:df:93:fb:11:
a3:60:8b:f7:f1:97:6c:79:41:ef:65:b8:e3:3b:bd:7e:93:5e:
37:b6:75:9e:2b:f4:ab:90:b3:31:96:b8:2b:16:44:3d:51:a9:
e6:41:05:1a:fa:6f:3b:07:aa:df:ee:84:4d:6d:3a:4f:1f:f0:
a3:87:50:5f:0c:f7:0c:43:b7:a0:bd:7a:3f:82:7b:0c:02:b3:
3a:a2:86:71:4a:ad:b0:dd:1b:55:f3:b3:54:ef:a9:8a:06:5e:
b9:75:c1:b5:95:65:8a:a1:96:00:f4:23:e9:01:f5:14:6d:c5:
f6:48:4d:49:ee:f6:f9:be:24:a3:81:8d:7a:29:0d:2f:7d:20:
94:55:ef:6b:07:a4:01:2e:1b:a0:b1:74:a6:d9:3f:4a:27:61:
5a:46:9d:d6:46:5e:2e:47:40:00:31:5f:4b:76:0b:12:04:35:
7e:23:97:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:39:36 2024 by rpki-client on console-fra.rpki-client.org