Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/Ri3XJ9Uwx2BNfLsWv2p7-g3_dUc.roa
File: Ri3XJ9Uwx2BNfLsWv2p7-g3_dUc.roa (raw, json)
Hash identifier: xRCTpx2pLdSJjpT5QtCYjBP8jpRuMjJ7W+PtlPlwAeI=
Subject key identifier: 46:2D:D7:27:D5:30:C7:60:4D:7C:BB:16:BF:6A:7B:FA:0D:FF:75:47
Certificate issuer: /CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
Certificate serial: 018CC9BC4906DA9990FD0EB0F7522C9A2C3A
Authority key identifier: 78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/Ri3XJ9Uwx2BNfLsWv2p7-g3_dUc.roa
Signing time: Tue 02 Jan 2024 10:33:29 +0000
ROA not before: Tue 02 Jan 2024 10:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8592
IP address blocks: 212.16.0.0/20 maxlen: 20
212.16.0.0/19 maxlen: 19
212.16.16.0/21 maxlen: 21
212.16.24.0/22 maxlen: 22
2a02:24f0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:49:06:da:99:90:fd:0e:b0:f7:52:2c:9a:2c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
Validity
Not Before: Jan 2 10:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=462dd727d530c7604d7cbb16bf6a7bfa0dff7547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:31:bf:7e:84:b6:10:7e:84:c0:9b:41:d1:f5:
bd:ae:6d:17:49:06:57:b1:9f:30:4f:81:9b:03:39:
ed:af:00:10:eb:18:a4:ea:83:5b:60:69:3b:9f:6f:
dc:08:bd:ab:21:4b:ea:3f:6f:5d:32:fd:33:af:28:
55:0c:15:e4:72:02:e0:42:a7:0d:56:7e:19:5c:53:
cf:7e:95:5c:2d:8d:f3:96:31:c3:a8:16:98:96:77:
8b:c4:da:2a:2c:41:75:06:e6:c7:77:32:02:ae:da:
0a:88:c4:bc:b4:8e:5c:a2:23:a8:73:a0:dd:71:bd:
c9:0b:94:2d:ca:99:f6:91:53:b3:c6:e9:8f:21:a0:
91:85:2e:60:42:75:a0:b8:2b:9f:c6:17:e7:7a:84:
08:77:a2:a3:f4:91:02:4c:1c:a2:c5:3b:6d:ab:77:
49:fc:57:0a:b1:d6:0c:5e:0e:6d:bc:40:71:2f:8f:
e0:14:1a:70:55:8e:da:ff:63:a0:6a:8e:29:50:53:
14:eb:a7:c7:b3:04:24:5a:25:a9:c3:d0:c9:07:71:
bc:d5:36:dc:7c:88:1e:c8:a8:5d:df:d6:e0:35:e5:
9b:a2:0b:a8:f5:9f:4e:a8:72:d7:5c:e9:3b:af:1a:
19:26:fc:cf:4d:37:ae:c2:21:df:8e:5f:c8:a5:96:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2D:D7:27:D5:30:C7:60:4D:7C:BB:16:BF:6A:7B:FA:0D:FF:75:47
X509v3 Authority Key Identifier:
keyid:78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/Ri3XJ9Uwx2BNfLsWv2p7-g3_dUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.0.0/19
IPv6:
2a02:24f0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:44:66:00:03:01:b0:3a:48:53:cc:f8:0d:55:51:da:89:16:
0a:06:12:ca:cd:ed:eb:cf:a0:3c:e5:85:2c:38:fd:44:f5:0c:
01:40:1e:c9:4c:7b:67:ba:12:f0:92:c1:e5:23:4c:fe:8e:b8:
fa:e7:cf:54:33:f4:a8:2c:40:83:ef:bb:c2:58:61:aa:3d:1e:
30:b3:a1:5d:71:bc:e3:8e:6f:71:df:cb:3d:36:eb:68:6b:0b:
7a:6b:85:ab:34:80:ae:d2:43:fd:fc:b6:f1:ac:2c:45:65:d4:
cc:49:43:14:1e:7d:7c:b7:b6:e5:b1:13:07:9c:52:b5:a3:03:
e0:42:f8:20:3c:38:e6:1f:5b:ba:ed:02:3b:4d:0e:6c:f9:e6:
63:de:5b:c2:98:ae:74:dd:41:b1:36:6f:24:88:00:8f:92:f7:
53:85:44:ff:20:76:f5:1c:84:98:1f:c7:49:2e:5a:85:2b:03:
21:e6:89:25:a3:50:80:f5:76:e4:e3:8e:65:4f:44:5b:50:45:
4c:6e:31:d3:da:64:36:49:36:d5:f6:08:61:f4:03:f9:93:c8:
d3:72:02:f2:61:b2:a6:eb:7c:52:02:fc:91:a9:4d:c0:71:ef:
96:ff:e2:49:63:ac:2f:30:a1:0c:db:dc:0e:59:73:9e:77:40:
89:27:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:56:42 2024 by rpki-client on console-ams.rpki-client.org