Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/2k48w00SwHKyjOdGRU_yBrUYwaU.roa
File: 2k48w00SwHKyjOdGRU_yBrUYwaU.roa (raw, json)
Hash identifier: uHAZpCUrITSsG+QhGFPTqRBsEhR4tgDYQmdzGTWm13w=
Subject key identifier: DA:4E:3C:C3:4D:12:C0:72:B2:8C:E7:46:45:4F:F2:06:B5:18:C1:A5
Certificate issuer: /CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Certificate serial: 018CC50017267440A99CD793F0B39172D0E5
Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/2k48w00SwHKyjOdGRU_yBrUYwaU.roa
Signing time: Mon 01 Jan 2024 12:29:26 +0000
ROA not before: Mon 01 Jan 2024 12:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59253
IP address blocks: 185.129.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:17:26:74:40:a9:9c:d7:93:f0:b3:91:72:d0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Validity
Not Before: Jan 1 12:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da4e3cc34d12c072b28ce746454ff206b518c1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:01:c3:bd:5e:d6:b0:d9:94:60:3b:6f:e0:f4:
76:c6:11:2c:e8:63:85:e3:08:fd:34:bc:ee:cf:ec:
22:ab:fc:a0:d4:aa:40:8b:4e:c2:5f:d3:fa:56:ca:
a1:99:56:33:c3:46:ef:b5:38:09:af:7d:9e:71:d1:
7a:62:f4:97:69:b6:61:93:45:e8:f1:ee:b7:80:2e:
f8:44:56:94:43:89:3d:39:90:4c:fb:5c:78:f5:39:
55:d0:93:73:a2:c9:8e:7a:5b:ba:0a:a2:4b:a0:16:
69:e5:c7:93:48:3e:e9:95:f0:6b:06:45:44:51:6c:
47:69:09:fe:f8:04:b7:60:11:98:22:e1:ab:3f:a1:
47:fe:c2:39:bf:c0:8f:10:bb:bc:f7:77:16:51:d2:
57:1f:fe:8f:cc:67:78:c4:60:70:a1:7f:65:9f:6c:
ff:4b:3f:58:43:20:8f:0e:f5:00:4b:f7:fe:23:f6:
0a:21:f4:58:3b:1e:b3:de:c0:95:84:32:c5:43:6f:
a0:3e:1c:25:fd:f7:9b:d6:ad:fa:97:30:0e:62:38:
36:36:30:91:21:ef:32:36:4a:00:43:1e:6c:bc:f2:
cf:b3:7d:23:58:cd:ee:09:d6:78:e6:58:c1:84:da:
4b:c6:94:37:92:ae:47:d2:b4:ef:d3:fb:ff:66:c1:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4E:3C:C3:4D:12:C0:72:B2:8C:E7:46:45:4F:F2:06:B5:18:C1:A5
X509v3 Authority Key Identifier:
keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/2k48w00SwHKyjOdGRU_yBrUYwaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:18:a2:44:df:8f:b2:fb:5f:f3:d0:8b:f2:d3:0c:9b:6c:54:
87:e9:a0:59:06:ed:d4:26:b3:53:71:bd:10:a4:a1:31:d1:c7:
b6:5c:31:7e:5b:7d:b0:83:63:20:23:9f:e5:44:d2:e3:e3:be:
39:c4:01:b7:9f:95:d4:3d:9a:50:af:3a:8f:ad:6c:f0:b8:aa:
39:2b:92:52:73:37:ec:c6:8d:eb:84:8b:88:b3:96:83:75:e5:
fd:07:ec:c6:5a:f4:12:5e:c6:77:49:63:86:2c:d6:79:3e:c0:
17:3c:8b:1e:3b:35:d5:88:f6:03:60:8d:45:d7:4d:9e:b1:c5:
47:50:06:01:c3:96:22:18:d4:79:2f:37:21:e8:84:99:02:54:
a4:9e:34:03:44:69:6c:74:91:3e:f8:85:ad:5b:22:7b:b4:94:
74:37:1c:d2:df:3e:9c:18:80:d5:5b:3b:3c:ff:df:f5:db:ed:
c8:ca:ee:3d:8a:59:3c:b1:cf:b5:d8:35:d8:34:bc:90:07:b4:
b7:af:18:f1:41:48:c7:6d:9d:e2:43:b1:eb:24:bc:47:4b:61:
0d:ac:40:9d:6c:cd:52:06:7c:fc:04:a5:1e:84:ff:78:7d:8e:
2f:ae:15:8f:0a:0f:4b:dc:e3:5c:57:3c:bc:1c:93:bf:83:c1:
ca:ab:67:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 16:01:21 2024 by rpki-client on console-fra.rpki-client.org