Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/g_Qj5zIFg2DosICGMV_Peb5HI2w.roa
File: g_Qj5zIFg2DosICGMV_Peb5HI2w.roa (raw, json)
Hash identifier: nKHnBlc6fKPOY6XvMYKSHHeq/idvYImf2RmMgVyLc2s=
Subject key identifier: 83:F4:23:E7:32:05:83:60:E8:B0:80:86:31:5F:CF:79:BE:47:23:6C
Certificate issuer: /CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Certificate serial: 018CEED190992621A5050BEBF11C4CE3C007
Authority key identifier: AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/g_Qj5zIFg2DosICGMV_Peb5HI2w.roa
Signing time: Tue 09 Jan 2024 15:22:40 +0000
ROA not before: Tue 09 Jan 2024 15:22:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204457
IP address blocks: 213.134.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:d1:90:99:26:21:a5:05:0b:eb:f1:1c:4c:e3:c0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Validity
Not Before: Jan 9 15:22:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83f423e732058360e8b08086315fcf79be47236c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:af:95:f5:e5:ee:16:da:7e:62:21:03:fd:31:
33:73:0f:7a:a4:b3:3e:6f:ca:65:6d:70:eb:4c:3d:
2b:ae:9b:1a:25:38:4a:ab:ec:91:29:58:d6:c3:4d:
c6:2f:5a:40:d9:d6:fc:01:69:4e:27:21:07:a4:be:
2b:96:a4:f0:21:c6:8a:e9:69:29:e1:c4:3c:3a:e9:
5c:a5:52:f8:7f:e3:28:08:16:23:22:5c:45:66:43:
78:4b:e9:e8:f0:b9:7a:15:cf:d8:02:a1:f9:77:9e:
73:40:22:15:75:a6:51:15:43:50:cc:cb:ff:75:03:
c5:92:ac:81:8d:ab:50:a0:a0:40:2c:ba:5b:af:bf:
c0:e6:f4:24:58:a8:f8:e5:61:8d:ab:3f:85:ad:c1:
00:a1:1b:c5:d7:03:a1:34:fc:2c:74:c9:ea:bc:33:
6a:6f:23:fb:1e:1f:1c:b6:57:9d:d1:f2:1d:5d:1a:
26:64:ca:7b:5a:2a:9e:cc:db:d9:e4:0f:8e:ce:47:
04:3f:e7:94:3d:78:21:fa:09:75:f2:52:87:fd:15:
05:24:f4:c2:ad:c8:76:58:0b:1d:f5:18:5c:d6:15:
76:92:0a:80:66:c4:85:5a:e9:f4:d6:78:d1:18:a4:
81:be:41:32:71:da:c1:94:60:14:ed:5b:e3:b3:41:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F4:23:E7:32:05:83:60:E8:B0:80:86:31:5F:CF:79:BE:47:23:6C
X509v3 Authority Key Identifier:
keyid:AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/g_Qj5zIFg2DosICGMV_Peb5HI2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.12.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a8:14:2d:e0:81:20:5c:c5:20:c2:1c:11:9a:9e:b8:9b:27:
3f:96:78:d8:da:74:42:c3:08:01:9d:10:d1:27:dd:e9:d1:3d:
f0:df:0f:86:d6:e8:99:02:aa:4b:57:09:cd:27:46:51:13:ff:
1c:40:df:c1:76:bf:67:a7:39:4f:45:ba:d9:4d:34:53:59:52:
0f:6e:93:54:0c:6c:24:75:ff:f9:74:58:87:48:cb:71:07:0e:
ff:9e:08:89:58:59:9e:de:00:3f:4e:da:82:c4:35:f0:18:0d:
85:a3:4f:10:04:5a:82:98:e7:76:e4:f9:5f:32:d1:db:c5:bc:
f9:9d:40:14:c2:2c:4d:73:99:1c:6d:57:eb:cf:f6:8e:3b:85:
5f:5c:4a:23:ba:1a:6d:89:e2:22:13:f0:1b:4a:39:77:cd:b1:
f9:97:a0:58:17:30:a2:82:7c:1e:69:0d:2c:ab:95:f0:c3:08:
dd:e8:91:fe:cf:3c:cf:03:ce:65:07:67:10:51:9f:cf:c6:f6:
43:7c:e0:72:3b:58:53:32:fa:55:0c:55:d9:f5:ed:85:e9:36:
31:c8:ea:77:c2:e7:8b:86:ec:32:3d:9b:66:9f:6a:34:f6:86:
db:27:34:4b:df:6e:fb:e1:7c:7c:2d:f7:48:7b:48:56:1f:74:
53:91:0a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:28:44 2024 by rpki-client on console-fra.rpki-client.org