Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/X1GecnNHHD2bzjeb9o2hoF9EhBE.roa
File: X1GecnNHHD2bzjeb9o2hoF9EhBE.roa (raw, json)
Hash identifier: 2gmQvD1zkvd5b5fYgtH7/84QJQNEBegSlGbeUNES6y8=
Subject key identifier: 5F:51:9E:72:73:47:1C:3D:9B:CE:37:9B:F6:8D:A1:A0:5F:44:84:11
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 018CC3B6A463F43E877EDFAACB0BA699E91A
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/X1GecnNHHD2bzjeb9o2hoF9EhBE.roa
Signing time: Mon 01 Jan 2024 06:29:35 +0000
ROA not before: Mon 01 Jan 2024 06:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199484
IP address blocks: 212.64.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a4:63:f4:3e:87:7e:df:aa:cb:0b:a6:99:e9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Jan 1 06:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f519e7273471c3d9bce379bf68da1a05f448411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f7:21:43:25:68:1b:6d:fd:5e:83:b8:e5:46:
81:d4:d5:64:bb:7d:8f:e7:28:01:04:5b:7c:8b:6b:
d2:ba:c8:c4:98:0c:e6:db:cc:a7:5a:e4:af:64:7b:
de:e4:87:71:bc:5e:ad:8b:10:35:c4:5b:c7:c6:6f:
41:7e:eb:55:63:a3:a1:a6:fd:94:16:c5:c0:f3:6a:
d1:b1:a0:b2:e5:cb:b6:8a:c9:2d:2a:74:27:52:a8:
ee:75:55:61:e5:29:f7:71:7c:0c:dc:18:1e:95:d3:
48:72:0a:6e:f8:ad:0f:87:fb:16:e6:b3:f4:34:28:
f7:90:34:ac:56:60:3e:2e:3c:02:c8:27:cd:d1:94:
4b:11:4a:47:9e:31:44:56:b6:3f:dc:7c:e6:af:e9:
7a:d2:52:13:f1:31:d4:cf:31:f0:11:b9:a8:28:79:
a4:c0:1e:d6:6e:50:ea:44:fe:95:5e:cb:a3:6e:f8:
01:18:19:e4:a8:a7:9b:ce:5e:13:13:77:ad:35:7d:
a4:24:83:f7:d9:72:13:57:5d:66:94:ea:eb:1b:df:
e8:05:84:06:ee:e2:08:96:2b:90:a0:2d:1b:74:dd:
d6:2b:4d:21:73:76:c9:a4:16:98:20:e4:46:17:10:
2f:4a:ca:bd:70:fe:0c:a6:ee:b6:bc:2f:e2:98:21:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:51:9E:72:73:47:1C:3D:9B:CE:37:9B:F6:8D:A1:A0:5F:44:84:11
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/X1GecnNHHD2bzjeb9o2hoF9EhBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.64.195.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e3:ad:22:9a:06:c4:e7:f6:66:b2:2f:20:3a:4b:e3:c1:af:
a0:ab:8e:dc:9c:fc:1e:2d:db:6e:05:bb:7a:00:37:a8:43:cd:
c6:1d:a7:a6:47:fc:38:00:57:3a:a5:84:1d:fd:79:41:21:e3:
c1:a6:8a:ea:81:46:80:5b:40:d2:73:aa:67:94:9c:de:18:cc:
ab:de:f0:6f:6e:78:d3:87:41:1c:43:79:be:91:f8:da:9e:b3:
44:ec:a5:5b:21:96:6a:86:cf:53:b0:73:8e:72:a4:e2:ca:f3:
6e:59:e5:e9:0f:67:cf:e5:5f:a3:4e:e6:58:82:88:19:51:18:
f4:01:7e:01:e3:bc:e6:6e:41:e4:ea:30:97:ae:1b:86:ea:ef:
41:2e:d4:9e:c3:f0:f8:7d:14:89:66:d1:7b:73:1a:f6:f8:a7:
1d:7e:2e:b7:f2:ae:d1:56:b5:a9:30:ea:00:d8:4d:88:0c:f1:
9c:a1:51:57:b0:6b:cf:88:cf:29:c2:c7:8b:9c:69:ee:ed:47:
91:77:76:5c:89:9e:a7:7a:46:08:2a:72:fc:3a:84:cd:10:cc:
62:1d:39:19:2c:82:4d:95:f1:1b:c4:49:6b:97:d9:03:10:c0:
a3:bc:bf:97:e4:7d:0c:c1:35:b6:4f:9f:5e:87:42:00:f2:6a:
8c:76:70:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:02:41 2024 by rpki-client on console-fra.rpki-client.org