Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rUW_Pj5oM2a6MIQsGRVx70rTAic.roa
File: rUW_Pj5oM2a6MIQsGRVx70rTAic.roa (raw, json)
Hash identifier: IJ9WtKfvTbQbEn0JO875HDqRfhyM01CSyfj5nEa8Sww=
Subject key identifier: AD:45:BF:3E:3E:68:33:66:BA:30:84:2C:19:15:71:EF:4A:D3:02:27
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018CC56DDC95F0D9DD1910EB252BA4756943
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rUW_Pj5oM2a6MIQsGRVx70rTAic.roa
Signing time: Mon 01 Jan 2024 14:29:20 +0000
ROA not before: Mon 01 Jan 2024 14:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6850
IP address blocks: 212.109.174.0/24 maxlen: 24
212.109.173.0/24 maxlen: 24
195.191.18.0/24 maxlen: 24
195.191.19.0/24 maxlen: 24
212.109.169.0/24 maxlen: 24
212.109.171.0/24 maxlen: 24
212.109.168.0/24 maxlen: 24
212.109.170.0/24 maxlen: 24
212.109.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:dc:95:f0:d9:dd:19:10:eb:25:2b:a4:75:69:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 14:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad45bf3e3e683366ba30842c191571ef4ad30227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:31:1b:89:57:29:ed:13:ef:ad:42:29:a7:
12:11:a3:82:d4:cb:f2:ba:65:f8:3f:5c:fd:9e:95:
be:3d:8f:09:e7:ca:f8:d5:6d:af:56:c9:68:0a:95:
9c:18:71:e7:e0:f7:76:07:87:9d:31:df:26:07:58:
75:26:71:46:32:7f:4f:10:87:bb:ed:35:40:bd:99:
c7:fc:9c:a0:27:58:e1:7b:9c:58:0c:58:32:14:f3:
a8:7f:3d:74:fa:c6:91:0b:eb:2a:98:fe:7b:18:3b:
8d:d5:40:16:e7:d2:5e:fa:52:97:5e:54:a7:cb:30:
c7:48:ba:28:99:e6:4d:4a:5e:0e:a2:98:ff:b3:b2:
4a:a0:00:91:04:1e:1a:3d:ec:7d:18:05:f5:4c:ce:
01:bf:37:16:52:a9:56:e2:7e:ac:2f:9b:1f:bd:17:
7b:43:f9:08:ee:37:20:e6:e6:29:9e:c6:37:f6:86:
cf:db:9c:f7:b6:15:a6:86:d6:ad:39:c4:f6:54:c0:
8a:7c:48:9b:a6:a8:d4:63:de:db:90:82:b4:5d:a2:
e7:b8:01:de:26:69:88:33:93:89:f2:73:b6:8d:d8:
cf:0d:de:bd:e7:75:c3:94:03:87:3c:01:a2:e9:af:
f4:01:be:f1:39:de:8f:61:f7:90:4e:9d:2a:ce:53:
d1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:45:BF:3E:3E:68:33:66:BA:30:84:2C:19:15:71:EF:4A:D3:02:27
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/rUW_Pj5oM2a6MIQsGRVx70rTAic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.18.0/23
212.109.168.0-212.109.174.255
Signature Algorithm: sha256WithRSAEncryption
a7:9b:3e:f0:55:11:cd:c1:cc:9b:f9:a0:8c:f9:75:f0:0b:dd:
1c:23:8f:47:e1:8f:1e:80:6d:2d:05:e3:e4:e7:de:ed:f7:df:
1c:6b:0c:54:2d:da:35:db:de:58:32:06:b9:8b:f3:bb:4a:a4:
4a:84:5c:82:b3:36:ad:c4:40:bb:76:d6:c3:8e:ee:de:ae:c8:
5a:d1:ed:c4:8a:42:0f:e8:1a:a7:e5:81:82:50:54:da:84:e0:
55:8d:76:b4:7b:2c:58:f0:0c:c7:a8:f1:be:34:b8:3f:a0:b8:
a9:04:7b:03:9c:e1:6a:df:cb:b2:cc:c9:4f:8e:e9:0d:12:c1:
bc:75:9e:91:72:cc:a9:e2:b3:73:5c:47:86:1a:82:ea:52:a6:
8e:f4:3d:59:89:bf:27:a2:d0:c1:e4:9b:fd:56:29:55:34:b6:
75:b7:41:8d:4f:b4:43:66:92:a4:e4:10:64:e9:a1:65:48:be:
0d:01:66:81:70:e1:b8:23:01:de:44:01:b4:43:25:bb:8e:57:
38:6c:dc:24:ec:44:a9:f1:c2:ef:e5:4a:10:bd:ac:db:73:bf:
b0:28:98:1f:b7:7f:5e:70:66:54:f0:4c:0c:6d:50:54:5c:94:
1c:0b:0e:09:2b:4f:13:ca:01:92:a8:23:c2:4a:3c:e1:d5:96:
ac:b9:ca:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:38:15 2024 by rpki-client on console-fra.rpki-client.org