Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/RMt8Ypu40pEbX5eYRYX4unaFM0s.roa
File: RMt8Ypu40pEbX5eYRYX4unaFM0s.roa (raw, json)
Hash identifier: a6b8v7i+/gM9oUTUXGRbb0o8pOgUVeLMsZCCn1XNhds=
Subject key identifier: 44:CB:7C:62:9B:B8:D2:91:1B:5F:97:98:45:85:F8:BA:76:85:33:4B
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 019091F953534229CC4233E81A137BA93BD4
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/RMt8Ypu40pEbX5eYRYX4unaFM0s.roa
Signing time: Mon 08 Jul 2024 10:52:34 +0000
ROA not before: Mon 08 Jul 2024 10:52:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12321
IP address blocks: 212.7.32.0/19 maxlen: 19
212.166.64.0/19 maxlen: 19
213.129.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:f9:53:53:42:29:cc:42:33:e8:1a:13:7b:a9:3b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Jul 8 10:52:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44cb7c629bb8d2911b5f97984585f8ba7685334b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:af:c5:41:3e:7a:d6:93:7d:6a:6e:20:72:20:
f7:13:54:69:03:eb:27:4d:56:20:26:a0:b8:79:4f:
f4:c5:3a:52:37:1b:3d:21:33:b6:43:ae:d3:e2:81:
13:e4:3b:8e:3d:7d:a1:a2:29:e9:58:f7:75:4a:c9:
fb:e2:3c:1f:b9:ef:c8:d3:6e:85:33:1d:51:d4:ae:
88:9c:51:64:9e:14:45:04:de:b9:a6:18:52:b4:09:
4c:72:4e:54:00:77:35:70:65:e2:19:23:76:d9:fa:
41:7f:85:1e:01:82:42:7b:b0:5b:4b:9b:43:77:5f:
ad:cf:c9:40:db:19:ed:5e:48:88:d9:c4:ed:d5:d7:
1c:26:3e:49:32:2f:32:e5:e6:a9:fc:9d:0c:3f:e8:
7b:3b:ca:60:e3:b7:2f:54:c6:9d:a5:4a:79:ab:75:
f6:0a:9d:e2:9f:ad:98:29:94:77:9d:b2:16:e7:b0:
22:10:d4:ab:08:85:a6:74:0f:81:98:30:78:04:19:
04:3a:39:ec:da:e2:05:e4:29:18:0f:44:59:6c:de:
0e:f7:b8:b5:e7:7a:cd:62:cc:c0:3e:93:14:88:30:
8e:7c:e8:a0:0b:3e:15:99:56:30:c6:af:dc:6c:4f:
ac:37:ec:ae:9d:2a:0c:f5:7f:17:6d:99:c5:0c:69:
1d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CB:7C:62:9B:B8:D2:91:1B:5F:97:98:45:85:F8:BA:76:85:33:4B
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/RMt8Ypu40pEbX5eYRYX4unaFM0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.7.32.0/19
212.166.64.0/19
213.129.160.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:b5:5f:b2:a7:b9:46:29:d8:f7:02:e6:85:5c:17:e0:08:fc:
b0:23:ab:da:7a:75:34:de:c8:78:f0:5d:32:c1:e9:14:7c:f7:
20:90:1b:7e:46:21:a9:3a:13:bb:a2:b6:21:7f:cd:07:bd:0f:
ef:04:94:b7:b2:6a:81:b0:4b:88:69:a6:ad:c6:a6:e3:53:52:
62:27:c7:0d:e3:0f:4e:53:c6:28:91:22:55:21:b6:e1:f2:99:
2e:1a:15:80:ca:90:2e:c9:fb:0e:ba:18:e8:76:27:a2:ff:1d:
0b:75:be:66:03:a3:87:f8:f1:cc:88:c9:3c:d9:5f:03:4c:48:
7d:79:9e:29:65:ef:d3:06:a8:0d:b1:39:d6:31:94:a9:92:85:
76:e2:59:bf:57:9d:ab:1c:e8:b7:13:d2:aa:46:f8:b8:d7:93:
f2:48:e2:76:19:1e:73:29:58:ff:c2:66:46:4e:72:9e:03:a1:
42:9d:d5:67:fb:8e:1b:39:e1:35:4e:f5:40:f1:70:09:a1:2f:
1e:79:2c:2a:48:5b:80:f6:70:4f:b7:3a:b7:51:cf:84:ed:f1:
4d:50:6b:eb:f2:4c:25:61:a6:b6:78:54:e0:70:c5:69:2b:f3:
7a:d7:6a:66:4f:22:e7:fc:4c:a0:c8:68:d1:91:b5:95:02:d2:
6c:f9:82:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:38 2024 by rpki-client on console-ams.rpki-client.org