Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/kQ5JcGNwZkHfGRzzoaFdS2Jx4ck.roa
File: kQ5JcGNwZkHfGRzzoaFdS2Jx4ck.roa (raw, json)
Hash identifier: tVAUPEFZqNJGQp7qspso2WUxFR7Tztlar7CyCAxAMLI=
Subject key identifier: 91:0E:49:70:63:70:66:41:DF:19:1C:F3:A1:A1:5D:4B:62:71:E1:C9
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 018CC2DAE97001C4CCC23D898C1A72BFFBAD
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/kQ5JcGNwZkHfGRzzoaFdS2Jx4ck.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2159
IP address blocks: 212.39.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e9:70:01:c4:cc:c2:3d:89:8c:1a:72:bf:fb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=910e497063706641df191cf3a1a15d4b6271e1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:69:ba:6c:9e:b4:8f:17:13:83:c4:1e:e3:3a:
6d:45:36:fb:fa:35:f3:37:29:bc:f0:e3:b3:f6:3b:
b8:35:83:89:12:84:97:f1:cf:b9:b8:eb:f7:4d:4d:
a6:c6:b2:41:c0:88:53:98:6d:b9:47:79:79:5b:de:
14:ca:55:1e:61:9f:c9:5a:5a:ed:6f:12:70:17:30:
5e:79:fb:7e:51:d6:c5:06:0c:df:48:40:40:ba:b6:
29:fe:6c:4c:a3:c2:a8:c9:53:b4:f1:73:b2:1b:f6:
c0:55:b2:ab:9d:0a:80:a5:39:37:04:57:db:b7:ca:
06:d7:1a:05:6d:da:99:90:ae:58:fe:d5:b5:ab:7c:
f8:45:9e:26:5f:fb:9c:a1:d9:dd:b2:45:9f:24:2a:
1a:52:6a:e9:15:71:4b:93:68:12:3d:c3:36:f8:7b:
16:7d:b4:d1:a6:5c:93:a4:8c:af:78:e3:4d:e3:d7:
8a:e5:47:93:97:85:45:f6:4e:45:01:62:54:b3:5a:
53:d6:bd:d1:8e:51:7d:ab:60:22:e3:0c:53:3e:60:
4e:89:3a:c8:f4:4b:66:ad:14:6a:62:36:20:f5:df:
48:79:fa:7a:cc:20:83:fa:7c:e3:1b:7f:5e:17:ee:
61:83:c9:6f:a9:cf:1a:be:1b:96:26:7d:bf:20:75:
3a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0E:49:70:63:70:66:41:DF:19:1C:F3:A1:A1:5D:4B:62:71:E1:C9
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/kQ5JcGNwZkHfGRzzoaFdS2Jx4ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.39.229.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c2:10:df:2b:1c:7f:85:8a:49:f9:f1:35:61:f9:dd:31:52:
6d:71:e1:c5:88:c7:54:fc:f4:98:b0:0f:35:76:56:65:4e:4c:
ca:4e:fb:31:54:2e:33:c5:8d:a4:4b:12:a1:f1:d3:f0:08:fc:
19:5b:31:fb:1d:e5:05:58:ea:6a:7d:79:3a:c6:d2:da:43:ba:
f9:29:97:f2:00:32:ed:9d:c2:9f:62:b4:06:b6:73:15:58:01:
24:ff:7d:e2:a5:16:d1:91:c3:f0:94:b0:55:79:ab:2c:10:ae:
d0:71:92:90:c8:ed:16:8c:00:cd:93:3d:6b:51:57:c5:69:a1:
fd:ff:c7:78:7d:ca:11:df:88:65:7b:71:db:75:4f:bf:4e:fc:
e3:cb:ba:02:08:7a:fc:61:42:a7:fa:e7:03:02:7c:b2:60:45:
f0:be:7b:89:65:5d:cf:f5:49:37:0e:54:6d:30:2b:b7:96:4d:
58:26:54:be:31:01:9a:01:50:cb:74:26:d7:0c:dd:04:d4:39:
89:c2:70:07:fe:e6:da:cf:bb:f1:ed:9f:80:75:25:59:8b:16:
75:a8:5e:5d:3a:a8:82:dc:6b:90:4d:6b:bd:16:ca:31:21:47:
39:be:2b:f9:40:25:a3:60:74:bf:a8:26:ea:66:e5:1b:2f:b0:
65:40:48:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:03:29 2024 by rpki-client on console-fra.rpki-client.org