Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/vOEM8kUpzLxopD4TyIsB3N_Y010.roa
File: vOEM8kUpzLxopD4TyIsB3N_Y010.roa (raw, json)
Hash identifier: OAdILdvcEpTr1UueFf/ZDCzT+gCrJkrZoluYVIFmenU=
Subject key identifier: BC:E1:0C:F2:45:29:CC:BC:68:A4:3E:13:C8:8B:01:DC:DF:D8:D3:5D
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 018CC3B732264EB86BAD0419F97845514946
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/vOEM8kUpzLxopD4TyIsB3N_Y010.roa
Signing time: Mon 01 Jan 2024 06:30:12 +0000
ROA not before: Mon 01 Jan 2024 06:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 212.46.57.0/24 maxlen: 24
2a12:fc0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:32:26:4e:b8:6b:ad:04:19:f9:78:45:51:49:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bce10cf24529ccbc68a43e13c88b01dcdfd8d35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:81:de:ad:64:89:61:1a:cc:0a:29:37:9b:5b:
0d:b7:50:a9:06:6c:bf:60:aa:1d:1a:fb:56:94:ba:
2e:80:7f:91:9b:83:45:3d:e0:29:99:cf:fb:5e:35:
c4:78:b8:d8:e1:9c:bc:1f:dd:a8:2f:43:63:20:ff:
4e:21:07:16:c4:97:6a:b1:f1:7f:87:e8:ab:cf:de:
33:1b:02:48:13:d8:76:f9:bd:2f:33:79:44:dd:8f:
ee:ce:10:a1:56:a9:d8:c4:d7:89:3e:45:a9:c8:9c:
d3:c3:37:9e:62:48:65:20:e2:1c:44:f2:ee:da:12:
02:d4:0b:28:e0:12:af:01:02:ff:99:4c:3b:9c:f8:
48:7c:b7:15:7f:da:ad:94:07:e2:8a:81:cf:ca:4a:
27:83:13:74:59:57:da:4e:6b:55:fe:93:ab:c4:dd:
ef:33:67:d6:2d:d8:09:ae:21:71:e9:b5:14:62:2a:
9d:f5:44:41:ad:93:87:3c:4d:d5:52:24:83:da:89:
8c:75:6c:e0:1b:d1:48:7b:4c:cb:b0:d5:0d:b2:9b:
f8:1d:cf:74:5b:bb:c5:eb:cd:96:a3:5f:07:12:71:
f5:58:01:4e:0f:4e:f3:e7:0e:89:eb:2d:fc:3d:32:
bb:c1:53:ff:bd:71:c5:19:c9:ea:7a:b1:6d:62:a6:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E1:0C:F2:45:29:CC:BC:68:A4:3E:13:C8:8B:01:DC:DF:D8:D3:5D
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/vOEM8kUpzLxopD4TyIsB3N_Y010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.57.0/24
IPv6:
2a12:fc0::/44
Signature Algorithm: sha256WithRSAEncryption
16:aa:72:36:4e:0b:3e:7e:6d:5a:77:9e:0b:bf:3c:69:82:72:
71:6b:1e:a8:dc:3b:61:eb:41:e6:e2:1d:23:c0:c3:85:c0:a9:
7b:44:c2:e4:50:c5:cf:9e:ec:07:27:d8:f1:c1:ee:e8:88:84:
59:46:12:2b:3d:6c:75:f5:b6:83:c2:fd:da:91:37:fb:db:08:
9a:7c:29:aa:ea:f8:de:0a:55:cd:09:f4:69:e8:c1:88:0e:c0:
8e:9b:49:fd:08:d3:23:14:bd:e6:cf:bc:15:0f:a6:9f:50:4d:
0f:cf:34:ad:99:10:41:75:2c:fe:01:7b:2e:91:fe:f9:a7:d6:
a1:02:d8:d1:27:41:e7:9a:82:06:38:0f:93:41:2c:81:33:ab:
70:37:40:92:4f:6f:5b:64:d2:1c:9c:d7:3b:54:c3:9a:0c:0d:
b2:38:79:f8:ab:30:12:80:21:39:d1:13:30:a2:43:fb:cc:d0:
24:6f:49:bc:70:ef:b4:cb:e9:c1:03:01:05:e5:b3:b1:0d:a0:
a8:53:e8:a1:f0:f1:ef:b2:68:90:3f:38:e9:39:c8:04:f7:54:
01:b6:eb:0c:e9:5c:b5:0d:a6:20:6b:02:26:8f:91:1a:46:48:
80:9f:c7:d5:0b:74:d6:18:ae:b2:73:83:02:8d:89:dc:30:4a:
4f:18:c6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:45:25 2024 by rpki-client on console-fra.rpki-client.org