Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/00ezFRoPq-YD_JIGpJpT7OK_lNU.roa
File: 00ezFRoPq-YD_JIGpJpT7OK_lNU.roa (raw, json)
Hash identifier: VnffKYV07Oc5P15xud+Uy6AUA40x1JMBBtOm1bwiaTw=
Subject key identifier: D3:47:B3:15:1A:0F:AB:E6:03:FC:92:06:A4:9A:53:EC:E2:BF:94:D5
Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f
Certificate serial: 018CC3489D7A1756E9AFABD5A344BCA43B97
Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/00ezFRoPq-YD_JIGpJpT7OK_lNU.roa
Signing time: Mon 01 Jan 2024 04:29:25 +0000
ROA not before: Mon 01 Jan 2024 04:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206610
IP address blocks: 2.56.104.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9d:7a:17:56:e9:af:ab:d5:a3:44:bc:a4:3b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f
Validity
Not Before: Jan 1 04:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d347b3151a0fabe603fc9206a49a53ece2bf94d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:f6:14:9b:84:0f:8b:92:a1:db:86:de:c2:
7d:87:50:83:3c:a5:aa:6e:78:00:6c:36:88:32:39:
aa:1e:73:98:ae:a8:e8:31:b7:2d:67:0e:8b:27:bc:
88:9a:55:8f:24:d5:68:6c:d7:da:d8:a0:2b:cc:14:
ec:30:8c:e9:f3:36:62:45:74:52:9e:24:9d:f6:fc:
11:65:1e:06:b8:65:3c:fe:b9:2b:13:5f:e9:09:95:
47:5a:2f:4b:06:63:30:48:df:35:1f:88:22:dc:3a:
24:34:18:eb:09:24:7d:54:45:96:af:a5:d1:ee:d3:
6c:26:cd:c7:5e:0a:a4:0a:ca:0f:55:58:27:5c:be:
d5:06:35:18:fc:06:ec:3c:c1:e7:38:e9:c7:4f:59:
6c:1c:86:6d:6f:d3:6f:a7:b4:ca:89:38:b5:05:f2:
a7:f7:0f:33:89:7e:56:10:49:fb:be:2e:38:2a:58:
1d:25:58:eb:16:73:2b:3c:cc:4a:3f:75:ce:50:59:
ef:a6:ea:f0:3e:73:5a:74:87:0b:ac:4e:f9:0c:53:
93:e5:f6:3f:8d:3f:cb:d7:35:9c:70:12:30:9b:52:
dc:1a:99:d1:d6:a1:d1:5d:ff:5a:f9:2c:ca:43:c8:
ce:bf:37:89:2f:0e:82:fa:ac:2d:10:11:bb:22:34:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:47:B3:15:1A:0F:AB:E6:03:FC:92:06:A4:9A:53:EC:E2:BF:94:D5
X509v3 Authority Key Identifier:
keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/00ezFRoPq-YD_JIGpJpT7OK_lNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.104.0/22
Signature Algorithm: sha256WithRSAEncryption
12:79:5d:62:cd:ad:d8:8a:af:6a:95:c3:87:de:7b:1c:36:de:
20:ab:3b:ba:8b:b8:13:28:cd:d7:c4:77:f4:1f:d5:2a:27:55:
b2:10:ae:50:77:57:14:84:09:db:aa:62:2e:d0:f3:5c:da:8a:
a8:5e:a5:da:8a:53:0b:5b:70:af:48:75:e7:83:21:14:b6:9a:
d0:97:76:2b:cc:f4:22:f5:08:cd:53:05:dc:b3:63:81:df:67:
fc:cd:89:e0:1e:f7:db:2b:b8:16:26:f4:96:4b:f9:fe:e6:0c:
b0:66:30:bf:7c:d2:64:59:d8:41:3a:5f:d9:da:ce:34:51:76:
4f:79:6b:39:bd:cb:3a:c1:85:81:79:4f:29:bf:2a:59:89:c1:
76:3f:d7:5e:9d:11:bd:3e:d3:95:92:e0:b5:1d:f1:42:ef:19:
b2:b3:51:a4:1b:c1:8b:4c:ed:56:21:c7:d6:21:eb:aa:60:61:
0b:3a:3e:ad:e7:2a:4d:ea:e2:e8:62:eb:45:9e:76:b7:de:4a:
a9:a9:1e:55:97:c2:1e:16:ef:dd:79:bb:93:84:74:eb:2a:09:
31:b1:34:ee:59:5c:1e:4b:0a:96:14:b3:fe:65:c2:71:44:e1:
13:43:78:ed:69:93:73:3d:cf:54:9c:c4:f0:9b:de:c3:e0:3c:
5f:0b:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:13:00 2024 by rpki-client on console-ams.rpki-client.org