Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/1mQfquVHNYgUwMWxO6us21y_LNs.roa
File: 1mQfquVHNYgUwMWxO6us21y_LNs.roa (raw, json)
Hash identifier: /IXTCnav+B6JbtW7vTpHkca+kxReuOTLB+4NGEflFTQ=
Subject key identifier: D6:64:1F:AA:E5:47:35:88:14:C0:C5:B1:3B:AB:AC:DB:5C:BF:2C:DB
Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial: 018CC2DB3F88E68BED7A0941BEA46EA18F6A
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/1mQfquVHNYgUwMWxO6us21y_LNs.roa
Signing time: Mon 01 Jan 2024 02:29:57 +0000
ROA not before: Mon 01 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6805
IP address blocks: 212.94.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3f:88:e6:8b:ed:7a:09:41:be:a4:6e:a1:8f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6641faae547358814c0c5b13babacdb5cbf2cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:cb:48:2e:a6:70:8c:4f:4e:ea:6f:42:2b:
82:9a:20:ea:41:7d:13:eb:f9:a4:65:24:03:6c:b1:
4a:87:f5:ff:81:31:41:48:67:e8:13:6f:27:40:8f:
05:9a:08:50:1a:bf:3c:63:23:c2:85:b2:f3:1c:b9:
d0:a5:2a:73:ef:d4:0c:d4:6b:c4:d1:f1:4b:a6:8b:
d6:fb:0d:4b:f6:38:f5:0b:7d:3f:0b:75:ab:cf:f1:
da:68:9f:18:14:1c:2f:06:19:12:e5:75:d1:eb:5d:
e1:1e:c7:51:a7:6f:4e:04:57:b3:f4:9c:e6:43:87:
75:0b:91:00:70:e9:de:de:14:26:76:3f:00:1c:a3:
e6:7c:3d:e6:aa:3e:b2:c7:38:94:c3:4b:fd:35:ac:
df:a8:e7:35:68:f8:93:ae:35:96:48:0a:63:a5:fd:
b6:62:13:53:e6:67:1c:f1:ae:54:e9:85:5d:6f:a2:
13:52:6a:3d:56:bb:69:ba:2c:b5:5e:27:05:4e:7f:
9a:bf:ab:00:d1:f7:a5:cb:0c:ca:eb:b7:66:e0:b0:
d6:21:0c:78:64:4a:69:b3:4b:fc:5e:42:72:be:b8:
38:6e:d2:6b:2e:4a:43:a9:c3:96:4e:44:6f:d7:89:
15:d3:6d:fb:3c:ae:90:dd:7c:7a:fa:87:fa:81:55:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:64:1F:AA:E5:47:35:88:14:C0:C5:B1:3B:AB:AC:DB:5C:BF:2C:DB
X509v3 Authority Key Identifier:
keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/1mQfquVHNYgUwMWxO6us21y_LNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.94.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:de:eb:15:1c:01:8b:b0:ae:83:64:28:9a:c4:a2:2b:26:fb:
51:ae:ea:c4:f3:af:46:30:80:f2:ee:5c:41:61:de:af:da:19:
9c:6a:83:9a:c7:b7:7c:65:73:d9:32:51:ba:05:2f:ef:20:76:
91:9f:96:39:2c:2c:fa:d1:42:61:5f:c7:41:0d:5a:ea:be:fb:
e2:0a:d9:3c:66:57:47:21:1e:6b:ff:b3:05:33:89:27:96:fc:
d9:ce:49:26:c7:0a:47:a4:b5:72:66:31:f0:70:b3:19:7f:03:
ac:df:c8:da:42:a9:7b:f4:5e:f7:67:61:3d:f0:f2:87:80:c2:
a1:c5:de:64:b6:d5:63:e0:e5:1e:4e:62:15:ee:96:6b:81:7d:
53:ba:80:57:ba:34:0b:72:57:2b:2d:af:df:fb:9c:7c:15:d1:
b5:56:c6:3e:08:35:83:3f:97:87:a3:97:ee:3d:83:a6:1c:59:
ac:c5:19:09:5d:8c:62:3e:73:96:2d:04:47:32:f2:1d:e8:2c:
0a:73:86:df:fe:c1:aa:23:f9:45:d7:6b:24:5e:69:c9:98:e5:
5a:d2:11:bf:d4:73:00:68:5d:2a:df:56:5e:95:a6:83:bf:90:
c3:bb:d3:c6:66:8a:94:66:eb:fd:56:74:38:80:0b:0b:24:9a:
90:89:7e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:48:25 2024 by rpki-client on console-ams.rpki-client.org