Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/_rpAJVBCeX-BxKyW1zjUfjNmK0s.roa
File: _rpAJVBCeX-BxKyW1zjUfjNmK0s.roa (raw, json)
Hash identifier: 7mVwVc/DpVfYA3WQtY3LfYjxaxVUA+XqggaxBVEmrS0=
Subject key identifier: FE:BA:40:25:50:42:79:7F:81:C4:AC:96:D7:38:D4:7E:33:66:2B:4B
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0192251B738CC8FD86E36A6350E73FC5FD34
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/_rpAJVBCeX-BxKyW1zjUfjNmK0s.roa
Signing time: Tue 24 Sep 2024 17:36:48 +0000
ROA not before: Tue 24 Sep 2024 17:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 212.81.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 19:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:25:1b:73:8c:c8:fd:86:e3:6a:63:50:e7:3f:c5:fd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Sep 24 17:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=feba40255042797f81c4ac96d738d47e33662b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:aa:60:0e:7c:ab:a0:25:f2:e1:f4:73:95:
df:79:6f:8c:98:b5:47:9d:bb:f0:6e:2a:a8:d8:3f:
93:71:78:49:9b:25:8c:15:43:7f:60:bf:95:74:0d:
fa:9e:a3:b1:61:fa:1c:26:4f:d8:40:4c:15:b6:b6:
cf:dc:dc:b8:ac:a6:ce:8e:0e:af:2d:23:38:a6:ed:
ea:39:00:6e:60:5b:d6:76:e0:ba:f5:89:d6:d1:b7:
0f:db:8b:40:0a:35:97:fa:71:e6:b8:e6:3a:8e:44:
7d:22:77:8a:c4:d1:b0:03:d6:a5:68:69:c5:77:6c:
dd:d1:db:2f:ac:7b:fe:37:b5:fe:b2:76:a3:2a:5f:
7d:2a:90:d8:d2:9c:95:4d:e4:63:c3:8f:5a:fa:cc:
93:38:71:bb:b9:d4:f4:13:7e:81:92:b8:e0:b0:c2:
f8:59:34:9e:a7:90:83:a5:b9:f3:e5:61:ab:5f:f5:
db:7e:be:f1:3d:35:41:6b:b0:1d:1e:f2:34:af:eb:
dc:84:89:b2:41:2e:9b:a3:dd:21:19:ab:91:ff:cf:
c7:47:47:a4:b9:e8:76:93:45:52:91:ef:63:3b:3b:
04:c1:e9:eb:da:d9:7c:4a:ce:c0:88:b7:30:75:84:
a9:f8:36:70:19:d8:65:dd:1a:8a:d2:5a:d0:16:4f:
f6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BA:40:25:50:42:79:7F:81:C4:AC:96:D7:38:D4:7E:33:66:2B:4B
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/_rpAJVBCeX-BxKyW1zjUfjNmK0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:38:9c:fa:5d:e0:9f:3b:ed:66:8d:d3:72:6b:58:6b:b8:b1:
4e:69:66:4f:7c:b9:3c:df:c6:57:ec:37:be:05:c6:3b:e9:d5:
ad:cb:bb:97:b2:a9:62:e0:d1:16:63:b4:51:8f:fc:bb:31:c1:
b7:3c:79:88:9e:12:51:17:88:3f:6c:de:43:1b:9a:32:e8:63:
d6:90:6c:11:dc:18:72:b5:c1:f8:d1:3b:45:70:7c:bb:85:31:
de:a5:21:a7:5d:03:73:8a:2d:f0:5c:c9:e0:29:57:47:81:2f:
2c:9f:bd:e0:e2:c2:1f:d5:15:09:1b:95:09:ec:a3:67:91:d3:
ac:57:20:4d:29:23:df:ee:50:aa:bb:78:55:53:ee:5d:01:69:
7b:36:d4:5e:1f:7f:73:7e:2e:39:0b:f2:42:f2:39:dc:0f:fc:
aa:b7:d5:61:fa:9b:51:c0:38:9c:11:f5:23:43:f8:4b:d4:da:
75:9c:da:b3:16:af:4a:9f:55:a7:3c:9a:e9:55:ed:a4:33:a9:
f6:62:73:15:50:a5:af:6b:24:09:50:fd:71:d2:b6:80:1f:1d:
22:e7:4b:e1:8b:db:1e:63:e0:a4:1e:d1:3d:b4:c8:09:fe:ce:
0d:e2:53:e2:aa:7e:f3:8e:6c:c7:ac:7c:78:15:90:d8:c7:39:
ba:eb:65:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 01:08:30 2024 by rpki-client on console-fra.rpki-client.org