Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2ZOr7bR7RGUG7iDtX0-v7zVubDg.roa
File: 2ZOr7bR7RGUG7iDtX0-v7zVubDg.roa (raw, json)
Hash identifier: TH3apmePPv6W/DEJ3IbXrwPhCRfa9vNNkg6QV0tKbWA=
Subject key identifier: D9:93:AB:ED:B4:7B:44:65:06:EE:20:ED:5F:4F:AF:EF:35:6E:6C:38
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018DA20BD965C306FF3FEC86AB6FF54B748E
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2ZOr7bR7RGUG7iDtX0-v7zVubDg.roa
Signing time: Tue 13 Feb 2024 10:38:21 +0000
ROA not before: Tue 13 Feb 2024 10:38:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215904
IP address blocks: 87.229.84.0/23 maxlen: 23
178.238.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:0b:d9:65:c3:06:ff:3f:ec:86:ab:6f:f5:4b:74:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 13 10:38:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d993abedb47b446506ee20ed5f4fafef356e6c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ff:f2:46:05:0c:08:1d:92:7d:c5:51:84:80:
d8:7d:6b:81:bf:b5:27:f6:3d:2e:bb:7e:27:4e:fa:
1e:07:af:bc:88:7b:2e:ac:98:5c:5f:8e:57:6d:8a:
1c:ea:75:8d:ad:74:1e:a8:a3:96:7e:d0:d9:68:5e:
f7:4a:f8:c8:9d:d2:15:b9:98:fa:87:b0:cb:cc:f5:
b5:82:8d:b4:cc:b4:5e:cf:51:9e:6d:15:0a:94:35:
51:ad:2a:7d:10:ac:d6:71:e4:a4:e8:7e:40:4e:56:
75:a3:24:7a:8f:b0:2a:1a:b4:e7:96:0d:11:dd:e6:
19:56:10:bd:65:10:63:e5:be:62:fe:00:7d:7b:b9:
1e:f7:b6:7a:82:4a:0e:be:a7:6f:9a:98:d4:bc:61:
5f:b3:f6:ab:47:34:3c:fe:cd:37:42:fa:73:67:12:
d3:8c:c3:4b:5f:a1:81:36:35:dd:11:65:33:eb:14:
84:08:99:83:d8:48:32:e8:c9:24:7f:6f:8e:1e:a3:
6d:f8:e1:48:55:ef:94:8e:2a:3c:bb:7c:49:30:ab:
cb:d7:f9:48:9c:17:a0:17:d6:78:fe:b9:99:fc:a1:
cf:90:8f:da:6f:cd:f2:ee:82:a3:a5:3c:b3:6c:8e:
74:a0:85:a4:22:ca:ce:3d:0b:0f:f4:1d:b2:65:af:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:93:AB:ED:B4:7B:44:65:06:EE:20:ED:5F:4F:AF:EF:35:6E:6C:38
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2ZOr7bR7RGUG7iDtX0-v7zVubDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.84.0/23
178.238.212.0/24
Signature Algorithm: sha256WithRSAEncryption
35:33:79:11:23:75:43:8f:53:54:3c:34:bd:55:1b:38:e3:e9:
6d:13:83:d8:d6:d9:54:43:f0:7d:31:a4:9f:f6:fb:ee:5e:7e:
e0:57:70:72:74:1c:b3:45:af:83:b3:bf:66:6a:c3:5c:56:14:
ee:b7:77:1a:7d:80:8c:05:1f:9a:40:b9:02:0e:7f:85:73:c6:
50:88:0e:bf:24:d8:ab:2f:df:24:7c:b8:0b:8d:7a:bc:9b:0c:
81:4a:34:28:3c:80:8b:61:14:70:01:b2:b2:18:bf:9c:fe:f6:
bf:d0:c0:a7:5f:91:77:9f:e3:c9:e8:7a:1a:e5:4e:16:73:59:
02:c8:b7:ed:9f:3a:1b:00:59:b0:d0:cb:d0:2b:86:d5:c6:6e:
13:e8:d0:3b:30:ed:0f:6e:66:89:fe:07:7c:70:3a:d8:c3:df:
2f:2b:36:20:47:56:8b:7d:59:da:6b:6e:24:92:04:56:60:86:
64:f4:b6:1a:c8:dc:a5:de:aa:51:06:48:9a:95:26:e3:21:ff:
9e:1e:51:45:85:66:0b:8d:88:57:76:3f:28:7f:61:28:64:16:
10:ba:ec:ac:ad:91:4c:03:e5:94:13:cc:69:f1:77:b3:67:b4:
00:c6:b5:81:14:29:0d:dd:a2:b6:6f:d0:3f:10:1b:75:aa:36:
7c:be:e5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:27:54 2024 by rpki-client on console-fra.rpki-client.org