Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/7mBmdZYhLRK3CbJ8iIFkXvxiqZA.roa
File: 7mBmdZYhLRK3CbJ8iIFkXvxiqZA.roa (raw, json)
Hash identifier: 4whwPjY/qjVPi+kU3i2it7lpvkw8OKSRpXv/KyRz0Ds=
Subject key identifier: EE:60:66:75:96:21:2D:12:B7:09:B2:7C:88:81:64:5E:FC:62:A9:90
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 019112DABF69373599B43EE9FB518FD80754
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/7mBmdZYhLRK3CbJ8iIFkXvxiqZA.roa
Signing time: Fri 02 Aug 2024 11:30:11 +0000
ROA not before: Fri 02 Aug 2024 11:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60117
IP address blocks: 212.81.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:12:da:bf:69:37:35:99:b4:3e:e9:fb:51:8f:d8:07:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Aug 2 11:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee60667596212d12b709b27c8881645efc62a990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:b3:26:84:f2:01:a4:9f:4e:40:1b:30:2c:
87:86:65:26:10:4c:14:9d:7c:4f:3b:6d:6e:6e:3e:
56:72:d0:90:98:31:80:81:28:61:f4:fd:2c:da:77:
da:d9:f7:fb:11:58:92:fa:d0:a7:5d:8a:76:cc:60:
8a:94:ee:f4:9a:5a:55:38:90:5f:2c:5e:59:99:1e:
c4:98:09:e3:be:6b:2d:e1:2f:2f:cf:87:a2:e3:42:
57:e4:1f:3d:1c:17:75:34:89:82:c3:ac:f5:b6:8a:
c6:8b:18:c5:29:7c:dd:c9:ac:b9:5b:63:58:f0:3d:
43:f7:3f:22:ef:3a:07:a9:0c:99:e7:82:c3:36:8c:
89:3e:98:01:78:fe:bd:e1:f3:80:10:58:77:0e:3a:
db:51:d4:da:08:79:da:96:7e:09:0a:98:f4:59:a4:
93:64:b3:53:b4:b5:25:5d:34:66:3d:2d:d8:7a:08:
86:1e:e1:49:fd:61:fa:f7:cc:0d:09:47:8b:17:98:
4e:30:4e:bb:a4:7a:ae:6b:85:f3:e7:b9:c2:cf:42:
64:71:59:d2:50:f7:9f:45:f9:d6:93:a4:a2:25:0e:
b0:5e:44:85:59:e6:67:6a:8a:d0:0d:91:f6:06:54:
80:8f:f7:38:5d:ec:01:fb:4f:de:d0:ce:fe:89:62:
3c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:60:66:75:96:21:2D:12:B7:09:B2:7C:88:81:64:5E:FC:62:A9:90
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/7mBmdZYhLRK3CbJ8iIFkXvxiqZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.44.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b0:a1:a5:eb:41:80:1c:cd:a9:c5:b7:a8:19:a6:66:75:8e:
19:f6:fb:60:33:ae:b5:5f:bc:d6:d4:7a:78:59:50:17:60:0a:
d6:b3:d6:77:c8:67:d8:47:ef:3a:67:4b:8c:cf:2b:19:40:ad:
03:fb:b9:42:dd:ca:77:75:3c:f0:d7:00:6e:98:b4:a6:bf:54:
88:a5:f2:3a:74:ee:bb:de:92:46:d5:6d:2f:41:48:ec:fd:0d:
b6:ea:5b:ab:7b:f8:71:9a:74:f7:57:19:ac:eb:a7:c0:92:b9:
6b:b0:de:21:44:9b:aa:4a:a4:94:c1:9e:65:08:64:1b:d7:da:
13:79:7d:ce:56:78:00:0b:c2:29:2b:be:5a:ef:5a:63:f9:fe:
e1:17:a9:11:1f:c4:42:ee:be:8e:26:ce:e0:18:f3:22:4c:22:
71:50:61:8c:04:28:e4:4b:23:a0:d7:6e:ac:7f:c0:0f:7c:45:
67:25:68:9d:3a:93:7e:45:10:c7:ce:20:22:bf:ed:7d:38:07:
26:c3:f0:c0:4c:fb:3c:53:d9:f5:f2:33:05:b7:42:b6:97:f6:
9e:91:81:fb:32:2e:91:da:76:70:51:d1:81:c7:eb:aa:ef:64:
de:dc:3a:f0:a8:8c:d7:de:fc:8b:04:46:c0:04:8b:04:0f:ed:
52:57:84:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 01:18:53 2024 by rpki-client on console-fra.rpki-client.org