Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/1-Hz75c0Kdq3iF63Y7B4e23qUtPk.roa
File: 1-Hz75c0Kdq3iF63Y7B4e23qUtPk.roa (raw, json)
Hash identifier: TjbDrab+rhB7qnetil5D2UvKoaAXT5Ox5fYLPmCGzFI=
Subject key identifier: F8:7C:FB:E5:CD:0A:76:AD:E2:17:AD:D8:EC:1E:1E:DB:7A:94:B4:F9
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 018CC5001BD044D5FCB80167E07DC110FABC
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/1-Hz75c0Kdq3iF63Y7B4e23qUtPk.roa
Signing time: Mon 01 Jan 2024 12:29:27 +0000
ROA not before: Mon 01 Jan 2024 12:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43940
IP address blocks: 212.200.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:1b:d0:44:d5:fc:b8:01:67:e0:7d:c1:10:fa:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Jan 1 12:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f87cfbe5cd0a76ade217add8ec1e1edb7a94b4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:67:e3:e6:31:33:d5:6f:ed:7a:be:9d:37:
2d:9b:18:5a:0b:2b:81:50:99:e9:6e:09:3b:14:e4:
2a:62:7f:cb:d8:c1:b3:ab:e3:63:2a:37:c1:4d:e7:
f9:f6:5d:c2:11:50:95:2e:e4:1d:9b:ea:ca:d1:5f:
a9:ce:e0:9c:d2:72:f1:7f:60:d7:ce:fd:c4:27:05:
91:1c:27:cb:68:34:69:54:33:b1:67:e5:b0:fc:0c:
6a:92:29:ff:81:0a:e3:42:ac:65:88:e1:13:57:25:
2a:7a:8a:b0:e7:7c:13:1d:d7:43:45:bb:00:18:0b:
c7:81:c1:ca:8e:d8:34:b3:2b:9c:39:7a:68:39:27:
20:c5:4f:d1:84:e2:ae:a9:c3:c2:17:07:e9:85:7e:
8b:05:c3:e2:30:67:89:d7:eb:21:ed:63:1f:b6:fc:
ae:3c:19:36:27:80:9a:59:ca:f2:c8:68:c9:24:d1:
11:70:95:67:87:60:10:e1:b8:0c:f2:5a:8e:03:9a:
f9:51:27:ba:49:91:7e:ba:2b:3e:30:ac:39:e3:f6:
9a:1e:3a:b1:d0:29:28:7f:da:8d:3d:9a:95:fe:8c:
eb:02:8f:3a:5b:f4:a5:c6:22:e7:d2:9c:68:86:01:
d1:e5:43:fe:65:2e:e6:5a:ff:65:75:ae:c2:cc:47:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7C:FB:E5:CD:0A:76:AD:E2:17:AD:D8:EC:1E:1E:DB:7A:94:B4:F9
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/1-Hz75c0Kdq3iF63Y7B4e23qUtPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.200.246.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:15:51:13:88:2a:99:1a:db:df:24:05:93:87:9b:a5:b9:24:
87:82:d3:e2:50:99:e0:13:3a:92:62:db:e6:78:c8:43:07:0b:
ff:8b:40:49:cc:3d:5b:c5:60:a5:b4:1f:e9:bb:e9:6e:c8:5d:
29:64:58:77:ee:4e:50:5f:de:18:57:f9:c8:52:8e:33:5a:99:
5b:46:63:65:e1:d4:fd:b5:ef:e8:c8:18:2a:ab:7b:f3:f3:6f:
48:48:8b:eb:ac:02:d4:5e:fd:53:77:13:0e:cd:f4:22:46:c1:
8e:f9:74:71:33:d6:10:b9:70:bf:ef:41:6c:63:e0:8e:6c:e9:
4f:37:23:ed:c4:5e:d8:a0:a7:28:75:1a:88:08:e8:ba:01:9c:
47:4a:b4:c6:e0:9b:64:44:c2:e0:2f:12:f2:44:47:8d:7c:a6:
77:81:18:b5:49:88:84:c5:d8:85:d1:da:f2:ab:53:7e:ed:0d:
5f:43:5e:de:96:fe:cb:e2:08:36:c4:a2:5f:82:fc:76:3d:06:
7a:ce:e9:34:f9:11:25:6b:5b:6a:b0:16:b5:d3:f5:d4:e8:52:
79:ef:53:cb:d6:67:0f:de:d2:71:cf:ff:f5:63:97:76:63:65:
98:7f:ff:85:2a:f7:ad:5a:be:e2:24:66:b9:3d:43:d1:84:44:
c2:2d:13:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:23:33 2024 by rpki-client on console-fra.rpki-client.org