Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/pd75O2zEXVxwPv-4uHvIm8qhlCs.roa
File: pd75O2zEXVxwPv-4uHvIm8qhlCs.roa (raw, json)
Hash identifier: /nODdgdJuNyeqzAG13hJscYoVvwzJgOyystzUZPFIeQ=
Subject key identifier: A5:DE:F9:3B:6C:C4:5D:5C:70:3E:FF:B8:B8:7B:C8:9B:CA:A1:94:2B
Certificate issuer: /CN=d223093ce150874016d793f439f43d2e6440c3f2
Certificate serial: 018CC801AE4986ECC86F40FB50FE57D27EF3
Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/pd75O2zEXVxwPv-4uHvIm8qhlCs.roa
Signing time: Tue 02 Jan 2024 02:30:02 +0000
ROA not before: Tue 02 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 212.123.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:ae:49:86:ec:c8:6f:40:fb:50:fe:57:d2:7e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2
Validity
Not Before: Jan 2 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5def93b6cc45d5c703effb8b87bc89bcaa1942b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:1b:72:74:7a:3b:ad:7e:86:2f:3f:42:5c:
bf:08:0b:10:33:4c:e3:06:47:bb:1c:35:7c:2b:f6:
03:43:ae:7d:ac:41:64:34:43:26:9c:b6:a4:01:31:
8c:af:1a:f1:2e:d9:d2:17:24:23:26:16:bf:fe:fe:
43:b4:80:4c:8b:72:5e:ed:19:30:90:99:1e:b5:26:
1a:85:b7:1d:db:4f:84:5d:58:f4:ff:0d:9d:01:25:
ed:9e:c6:a3:fb:ed:b4:dc:14:be:b1:ff:8c:4f:21:
9e:31:a4:29:bc:86:55:b9:8d:df:a9:6b:10:44:71:
77:fd:30:87:66:ef:86:10:50:6f:e1:ef:10:23:80:
ee:cb:23:19:f7:9c:f2:d2:48:d7:d7:d8:e1:84:ed:
ef:b9:4c:c8:f9:d7:0d:3a:a0:8a:c7:43:a7:a8:a6:
5e:3e:55:a5:ba:bf:46:e4:c6:9a:cb:4a:a1:16:e0:
89:c6:df:1e:05:f4:c5:73:cc:c1:fb:13:54:56:1c:
41:3a:c8:3a:f6:72:d8:86:54:d5:be:a7:19:12:9e:
a4:93:8c:e8:de:c5:75:3e:fc:5c:99:d2:77:5a:84:
0d:9b:e7:7e:11:ae:a1:65:3d:13:fd:2f:aa:45:f1:
49:37:2d:52:27:3e:6c:cb:47:d0:03:f2:6e:09:c6:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DE:F9:3B:6C:C4:5D:5C:70:3E:FF:B8:B8:7B:C8:9B:CA:A1:94:2B
X509v3 Authority Key Identifier:
keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/pd75O2zEXVxwPv-4uHvIm8qhlCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.123.46.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:76:99:42:14:3a:c4:8b:b1:ff:d9:d5:a6:d7:0f:3f:1d:d6:
74:75:31:25:7f:a9:d5:90:b7:fd:6b:98:02:eb:d4:95:6f:f3:
0e:63:75:17:2f:06:ca:79:99:dd:20:a1:92:d6:9e:b6:4c:de:
d5:f9:2e:84:b0:4b:2a:0f:d9:6b:86:ab:f4:bd:6b:3c:13:a7:
75:da:80:f9:28:38:60:9a:fe:f8:73:0a:68:d3:b7:5f:08:b4:
0f:99:da:c1:09:72:17:29:10:30:e3:68:1f:87:de:7a:1a:77:
c3:66:05:28:a0:73:a3:39:43:70:27:ef:30:45:11:56:a1:6f:
88:10:fc:38:08:bd:12:b9:98:c4:0c:95:65:80:d8:c7:f8:b3:
6c:06:25:20:10:e7:45:30:d5:ec:bd:c7:56:5f:a1:de:ab:2e:
24:5b:ae:fd:e0:65:16:5a:56:00:1a:df:b0:b4:af:a9:aa:4a:
d4:d9:6d:68:b7:ff:b8:4d:dd:87:c1:7b:89:e9:a9:2d:06:65:
61:4f:82:56:00:ba:80:6b:3d:b3:0f:9a:7b:80:ea:4f:24:eb:
5a:55:63:0c:da:cf:ef:69:4e:29:02:84:c3:61:8a:66:2c:c3:
27:da:23:d8:b7:84:dc:c9:1f:44:3d:55:96:dd:8b:e5:71:c0:
16:7c:27:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:54:53 2024 by rpki-client on console-ams.rpki-client.org