Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/2HCUdDs3q5GiS_BNCVlTHBbUdpA.roa
File: 2HCUdDs3q5GiS_BNCVlTHBbUdpA.roa (raw, json)
Hash identifier: EL1fpRPB6vBazh+JxYd7irOmxsKb1nM4sEbddmg3dOM=
Subject key identifier: D8:70:94:74:3B:37:AB:91:A2:4B:F0:4D:09:59:53:1C:16:D4:76:90
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018CC3489AC96AC25C9C3FF2040164CFA725
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/2HCUdDs3q5GiS_BNCVlTHBbUdpA.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 212.116.242.0/24 maxlen: 24
91.147.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9a:c9:6a:c2:5c:9c:3f:f2:04:01:64:cf:a7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d87094743b37ab91a24bf04d0959531c16d47690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:1b:57:de:8a:54:c1:00:97:21:e0:d1:8e:
b2:80:73:59:b2:c3:08:f5:c7:90:2f:c6:81:ec:ea:
77:19:64:ea:6f:20:29:be:f1:42:66:2a:10:e4:ff:
57:72:a2:99:54:fe:ea:27:61:88:e6:09:da:3c:2f:
80:ca:02:04:90:e8:d8:fd:98:bc:ff:82:db:fe:f7:
73:7a:e3:21:17:39:75:24:54:32:72:44:d8:56:e8:
05:6f:29:b2:0e:f3:4c:a6:de:26:91:a2:61:1c:5d:
46:ac:fe:a5:3e:ef:eb:42:ec:d1:87:4b:a1:ec:fa:
02:72:e3:01:6b:20:f2:04:c9:26:6b:f4:a8:61:c7:
af:3c:b3:9e:72:1d:2c:87:fb:6d:ee:33:f2:1b:76:
dc:bd:9b:4d:f0:ed:04:c4:41:5b:7c:c7:88:23:79:
5a:64:83:0e:ab:0e:b9:a9:ae:6e:ed:c6:f6:3c:6c:
00:1c:7c:8b:ff:31:5c:06:dc:23:ab:4c:34:70:6c:
fb:35:9d:0d:89:d4:d5:cf:a7:25:a7:e0:0d:7c:a9:
25:95:23:f4:f5:58:81:80:b3:2a:10:23:87:c6:c5:
91:4c:4d:03:8f:cc:27:a0:1e:a3:98:70:95:4f:08:
69:a0:6a:ec:ca:56:62:79:3b:61:70:5b:0f:e1:9e:
ca:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:70:94:74:3B:37:AB:91:A2:4B:F0:4D:09:59:53:1C:16:D4:76:90
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/2HCUdDs3q5GiS_BNCVlTHBbUdpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.121.0/24
212.116.242.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e8:1b:6e:a7:09:5a:bb:2b:d5:7d:5a:46:ba:f8:33:4d:f9:
0d:35:c1:ef:41:77:a1:ce:a0:9c:c8:e3:9a:3f:dc:77:0e:0b:
a4:0b:6f:19:a6:af:b6:47:3c:04:03:ac:82:18:86:65:09:04:
0c:9a:6f:49:ba:95:44:56:6f:32:db:c4:cb:51:b6:09:fc:8d:
e0:94:9d:f8:5d:ae:22:4a:cf:59:f0:04:be:6e:e4:fc:db:b8:
f9:09:93:ae:4a:df:8e:9b:92:19:6a:e3:14:6b:cd:24:5a:cf:
9a:5e:0d:4f:51:64:8c:6a:f1:80:bf:9c:b0:86:d8:ab:72:2a:
2d:45:3b:92:df:a2:0f:4f:22:31:a8:8e:5f:cc:32:1f:2d:9f:
f2:78:e4:f6:cc:bc:4c:5d:e3:dd:b0:3b:04:f0:d8:30:6e:e4:
9e:58:4e:17:00:b1:7d:45:4b:12:2d:57:73:54:95:09:bf:ad:
7e:ce:73:71:12:03:f1:49:52:12:2d:94:99:5d:e5:f0:6a:89:
60:37:bd:6b:9c:eb:35:30:b8:21:cc:57:d7:bc:d9:89:6b:3f:
17:ce:74:28:8d:6b:21:38:db:dc:c9:5f:4c:f6:67:77:ee:69:
0b:e8:aa:07:55:55:3e:2d:f4:eb:b7:ec:92:d0:c0:78:a7:e0:
49:a9:b7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:38:08 2024 by rpki-client on console-ams.rpki-client.org