Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/A2sq6XGSwdeFBPpaUd-uFpBaMEM.roa
File: A2sq6XGSwdeFBPpaUd-uFpBaMEM.roa (raw, json)
Hash identifier: wqC9ig9c4r3ibxnGZkXomsyFuAUXNDfrCQNIAiK2dP4=
Subject key identifier: 03:6B:2A:E9:71:92:C1:D7:85:04:FA:5A:51:DF:AE:16:90:5A:30:43
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 018CCA2B9EA289AD5F6D5BB95E9BAF15F24F
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/A2sq6XGSwdeFBPpaUd-uFpBaMEM.roa
Signing time: Tue 02 Jan 2024 12:35:05 +0000
ROA not before: Tue 02 Jan 2024 12:35:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51508
IP address blocks: 194.34.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:9e:a2:89:ad:5f:6d:5b:b9:5e:9b:af:15:f2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Jan 2 12:35:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=036b2ae97192c1d78504fa5a51dfae16905a3043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d9:3c:8e:a2:48:8a:79:58:10:93:ad:36:aa:
a9:2e:bd:16:b0:84:e1:78:54:83:92:06:cf:c9:8d:
0a:47:1c:ec:8b:5e:87:5f:8e:79:6d:09:07:16:db:
1c:18:9a:25:35:e2:7e:94:bb:fc:0a:e3:b7:45:7b:
32:73:34:af:75:d8:1d:39:89:50:8e:da:45:f1:83:
6c:2b:89:8d:92:7e:6c:4e:4d:a0:71:00:8c:1d:bd:
90:71:06:99:77:b8:bc:b0:e3:7c:10:b3:42:70:4a:
9d:fb:c2:d5:32:59:c9:ab:5d:38:0a:d9:2c:73:bc:
08:32:45:96:09:59:f3:f1:2c:51:e8:64:9c:0e:7b:
a2:a8:e5:de:a4:b2:47:6b:d7:3b:04:3d:d7:de:b4:
fa:cb:6a:79:63:c2:90:93:ec:fb:3a:72:58:55:44:
d2:a3:04:22:77:0a:2c:ce:9c:28:ad:8b:c7:73:9c:
30:1f:13:df:af:63:a8:b6:df:aa:9f:0d:69:85:e9:
d0:65:1d:dc:e4:b4:67:2f:ac:2a:d0:ad:0c:ba:33:
e5:8c:b9:bc:a3:5b:4b:8e:dc:e1:d8:fd:10:ff:75:
16:9b:4a:af:19:dd:e9:0e:dd:9b:ce:b6:41:3f:b3:
7c:22:79:5a:94:b2:a9:e4:dc:9d:21:f1:68:b9:e0:
f3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6B:2A:E9:71:92:C1:D7:85:04:FA:5A:51:DF:AE:16:90:5A:30:43
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/A2sq6XGSwdeFBPpaUd-uFpBaMEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.246.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4f:64:9b:d3:0c:20:c6:56:78:45:ba:ce:89:d9:4f:a1:67:
b7:eb:fd:87:b6:ee:66:15:99:35:a9:5b:ec:c5:32:00:21:02:
4f:a7:a6:74:32:d6:52:c6:97:8f:15:ee:aa:51:c6:8b:b0:d0:
83:58:cd:c0:f8:54:22:9c:d8:a4:ec:bd:10:43:58:b8:4f:6e:
08:b0:e4:cc:b2:e4:83:56:be:22:5e:1a:b3:77:34:85:d4:25:
44:8e:bc:61:c4:02:0f:28:20:4f:41:52:13:e1:2a:59:a4:b5:
e8:1b:3e:71:97:af:74:ab:4c:40:ba:40:ce:98:21:40:0a:c8:
28:eb:2b:68:ed:43:ee:92:21:6c:ce:e1:9c:5f:d7:4f:15:8f:
df:eb:27:27:90:ba:a9:5b:a4:74:73:28:33:a7:23:ca:3b:43:
44:f3:a3:c7:e9:23:97:82:00:91:82:24:ba:a4:f2:e2:6d:08:
4d:b6:50:c8:d0:bc:d8:72:8b:b1:d5:ae:86:6a:70:91:89:df:
e5:2b:1a:fb:60:44:fb:da:8d:19:2f:29:0e:c7:d7:7a:18:3e:
75:98:22:d4:c2:e9:14:94:99:c5:2f:2a:83:2c:16:86:64:3a:
fd:80:f4:83:79:05:0f:b5:0a:e6:04:5f:82:00:0b:a3:dc:dd:
a9:cd:30:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 08:49:01 2024 by rpki-client on console-ams.rpki-client.org