Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/m966RQc2Qbvk2c8PanMraHOBrJM.roa
File: m966RQc2Qbvk2c8PanMraHOBrJM.roa (raw, json)
Hash identifier: h+eQaL3NdFPw+MBdpfXKrlbgCwhvdEHKRAcxt1SE334=
Subject key identifier: 9B:DE:BA:45:07:36:41:BB:E4:D9:CF:0F:6A:73:2B:68:73:81:AC:93
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018E9D5A4EB8C31C16EF4FAABC80A0C1A403
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/m966RQc2Qbvk2c8PanMraHOBrJM.roa
Signing time: Tue 02 Apr 2024 05:48:45 +0000
ROA not before: Tue 02 Apr 2024 05:48:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6828
IP address blocks: 212.220.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9d:5a:4e:b8:c3:1c:16:ef:4f:aa:bc:80:a0:c1:a4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 2 05:48:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bdeba45073641bbe4d9cf0f6a732b687381ac93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:b5:ea:f5:11:7a:f2:5e:0f:45:b9:db:38:
07:07:b6:63:ba:e6:4b:54:ed:c7:17:06:c6:5f:cd:
ee:33:25:f5:81:e9:ea:29:09:58:c7:92:ee:bf:1a:
ba:4a:48:e0:b8:86:15:46:c6:45:a5:3e:8a:63:b3:
87:38:3f:df:de:f1:08:d7:f4:3e:8f:4b:94:97:75:
44:e5:49:8e:3d:7d:6d:45:9b:5f:c1:2c:b9:88:12:
b9:be:3d:e5:4e:8e:a2:67:5e:26:3a:f0:9b:76:8b:
e0:95:72:e6:11:76:53:b0:e3:43:18:d6:d4:2a:c0:
84:d9:ec:31:03:8c:10:d9:d3:dd:4c:af:69:4d:07:
08:09:54:39:96:62:22:c6:e0:b1:54:c1:07:bf:b9:
9b:52:39:76:2d:0c:0d:13:b0:d9:64:e8:8d:e1:c9:
2c:be:72:17:62:de:20:db:99:6e:c5:2a:04:1c:d7:
71:cc:e8:cb:31:05:d1:15:29:3b:a8:b9:40:79:12:
5e:bb:be:a1:75:26:23:1e:2e:26:1b:cb:a0:c9:af:
ed:16:75:f1:46:68:b1:6b:43:01:7f:04:10:6d:f9:
f9:b1:77:9f:7b:1c:91:72:08:44:8c:32:c8:25:02:
3f:ff:a2:8d:7d:53:80:21:b9:65:37:79:0b:76:93:
11:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DE:BA:45:07:36:41:BB:E4:D9:CF:0F:6A:73:2B:68:73:81:AC:93
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/m966RQc2Qbvk2c8PanMraHOBrJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.220.222.0/23
Signature Algorithm: sha256WithRSAEncryption
26:b5:c4:b7:9f:05:a1:54:b1:d7:3d:76:39:fa:82:9d:da:9b:
32:25:e8:c0:7d:6a:6e:11:24:36:f8:13:d4:4c:54:5b:65:41:
80:47:c9:0b:e1:83:36:3d:25:0d:5f:e5:50:a8:1e:e2:b9:a6:
fa:bd:83:87:23:da:fd:64:c9:cd:d4:59:90:68:b0:0a:2f:22:
58:c1:50:f1:31:32:9a:cf:cd:04:78:38:84:ce:8b:40:58:9a:
af:70:fc:50:d2:a8:5c:3c:a9:d7:c5:ee:54:1d:3f:7c:cf:6f:
f3:86:cb:27:b1:05:3e:1a:aa:b5:7b:33:79:27:a7:ec:fc:68:
ca:fb:31:eb:f2:17:af:98:40:76:0a:7f:de:a1:47:9e:9d:3c:
a7:4e:f8:9c:a2:4e:37:ea:d7:44:9d:b5:86:21:f6:22:76:7a:
2c:4b:98:3a:4b:43:cb:71:00:72:66:ee:e8:75:f1:d8:f6:1d:
ed:6b:30:dc:c7:f7:b4:b9:20:1c:ef:ae:a2:4e:db:ae:d5:ed:
dd:35:a2:84:60:56:a6:d0:d4:01:46:ed:af:8d:c6:1c:14:ad:
ba:33:c5:cc:98:d8:45:f8:04:06:38:40:19:3a:d5:72:7b:f8:
87:b6:88:7f:0d:5c:38:07:bb:38:e3:34:69:c9:d6:10:e6:81:
d4:3b:a2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:26 2024 by rpki-client on console-fra.rpki-client.org