Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2XFCTZ3mRs8j1pLvNITQkps2A08.roa
File: 2XFCTZ3mRs8j1pLvNITQkps2A08.roa (raw, json)
Hash identifier: T400REz865XrUi6QIVJknhZnbxrV7lR4Srm9xiMOeoA=
Subject key identifier: D9:71:42:4D:9D:E6:46:CF:23:D6:92:EF:34:84:D0:92:9B:36:03:4F
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018CC8DF17D8DAB1424231C1A315F0AE4A13
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2XFCTZ3mRs8j1pLvNITQkps2A08.roa
Signing time: Tue 02 Jan 2024 06:31:52 +0000
ROA not before: Tue 02 Jan 2024 06:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 194.146.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:17:d8:da:b1:42:42:31:c1:a3:15:f0:ae:4a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 2 06:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d971424d9de646cf23d692ef3484d0929b36034f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3a:4d:5c:af:7e:46:0b:a9:fd:ec:50:b4:32:
3e:8a:b7:d7:0c:79:e3:ef:22:2b:1c:a2:4d:93:34:
36:37:af:15:2a:89:0a:d5:b6:dd:39:fe:4f:f9:1e:
6a:fc:d2:3d:45:ed:76:09:a5:2f:3a:7f:77:80:35:
88:da:6b:30:91:64:b5:7e:21:f7:6b:a5:dd:39:ab:
00:3c:3d:e9:39:10:3c:2e:ca:2d:6d:eb:da:cf:6c:
5d:a7:7b:70:01:fa:67:ed:3e:ef:fa:a7:94:3b:c7:
4d:23:79:8a:8d:0a:e9:b6:cc:46:c3:86:97:1e:cd:
b6:05:9c:02:62:a6:86:3c:13:0c:69:33:86:d8:d3:
cc:4f:da:1e:86:ee:8b:a2:4c:33:f1:69:24:3a:97:
13:10:52:f7:d1:28:cc:ec:b7:3d:5b:b7:1f:ff:43:
98:8f:ad:e7:53:cf:12:14:6b:63:cd:b5:a1:15:c8:
12:07:20:88:68:87:0f:f0:4e:97:0d:51:41:ef:8c:
ca:bb:78:f9:24:f6:23:85:c1:d7:7d:6d:b2:d5:39:
9d:41:db:0c:8e:21:66:68:20:8c:64:27:c4:25:d3:
28:2c:bc:82:37:dd:dc:50:97:15:f9:00:3c:52:30:
d2:32:da:d2:98:f8:68:be:e5:31:69:a0:36:0c:f0:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:71:42:4D:9D:E6:46:CF:23:D6:92:EF:34:84:D0:92:9B:36:03:4F
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2XFCTZ3mRs8j1pLvNITQkps2A08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.93.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1f:79:b1:14:05:9e:5d:d7:a9:c4:4f:23:7c:04:d7:ce:34:
64:31:76:db:4e:46:f0:53:c8:1b:a5:8a:cb:a3:9a:4c:90:be:
27:17:72:35:ad:69:4e:e1:a4:23:7c:92:a0:2a:fa:b5:b7:8d:
59:a9:38:29:b5:22:36:ea:1d:73:ab:fc:7d:92:55:b4:65:f0:
0a:43:51:97:ea:fb:2b:6a:91:42:de:67:d1:fc:8f:00:93:af:
d3:80:6e:db:fe:2d:ea:0c:7e:f4:de:a3:ca:8b:9f:9c:5e:75:
95:9b:a7:f9:42:c6:2f:a9:7e:6c:b5:ba:fa:31:61:6a:5d:21:
84:70:cb:a7:9b:4f:c6:c7:f6:af:bb:9c:1d:8a:b7:66:c3:a2:
5c:d9:73:ec:73:24:4d:1d:bc:fc:3c:39:b2:e3:75:19:d0:ff:
7a:22:a6:58:e1:0d:d8:86:17:7f:1a:2a:dd:d6:b4:74:93:03:
cf:5b:39:00:fb:41:62:3a:6f:e4:14:7e:d3:a5:f7:e1:c2:d5:
56:f4:b3:13:0f:f6:ea:e7:16:bc:91:9e:4a:c6:ae:ea:cf:09:
6c:91:4d:d2:59:9e:5b:e7:35:63:52:b6:1f:9e:2e:cd:a5:89:
43:eb:e1:c8:42:a2:cf:07:dc:12:13:75:6b:2b:45:53:0f:36:
be:70:1a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 18:54:58 2024 by rpki-client on console-fra.rpki-client.org