Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/2Ii0pqouQrFn8lOhNpWIXyDcXKo.roa
File: 2Ii0pqouQrFn8lOhNpWIXyDcXKo.roa (raw, json)
Hash identifier: t4I0yQn9Vh+luN2DRJtN3n5tOJhGSJrPpQ17a6chr40=
Subject key identifier: D8:88:B4:A6:AA:2E:42:B1:67:F2:53:A1:36:95:88:5F:20:DC:5C:AA
Certificate issuer: /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial: 018CC2DB37C9CB3C9731AAD1BC7CD4CE2AFB
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/2Ii0pqouQrFn8lOhNpWIXyDcXKo.roa
Signing time: Mon 01 Jan 2024 02:29:55 +0000
ROA not before: Mon 01 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2200
IP address blocks: 147.100.0.0/16 maxlen: 16
147.99.0.0/16 maxlen: 16
138.102.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 01:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:37:c9:cb:3c:97:31:aa:d1:bc:7c:d4:ce:2a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d888b4a6aa2e42b167f253a13695885f20dc5caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:54:0a:cf:b2:e8:db:20:81:a0:f9:d5:fc:a6:
0d:1f:d6:4e:fb:de:81:dc:6e:6b:8e:1d:1f:ad:49:
61:8e:26:ac:40:d2:66:b1:fb:1f:eb:2a:70:41:9c:
f0:75:01:a8:d1:53:4c:5b:40:e5:97:de:70:5a:a5:
9a:8d:7f:d3:4d:3b:cd:c8:43:32:fd:da:bb:e9:e5:
2c:97:0d:93:fe:fb:18:86:ae:f2:a4:94:69:f4:4e:
98:7c:ce:95:7e:30:18:d9:c4:0e:db:70:aa:3f:69:
fc:0a:af:ac:d3:44:d9:a8:5a:0e:b3:9c:44:99:35:
16:ff:b4:8a:51:e6:20:88:7b:6d:d6:1e:b4:c0:89:
7d:f6:88:d0:aa:bc:4e:f0:0a:77:fb:ee:62:ea:5f:
92:f4:c8:34:be:36:05:c8:18:85:63:90:da:4a:45:
13:9a:05:4d:e8:1c:bc:83:22:67:24:fb:85:ca:46:
bf:54:02:7b:da:09:ce:1e:8a:80:f4:56:71:d8:43:
bc:d9:c9:06:60:ad:84:b5:de:f7:b2:7f:0f:31:37:
af:eb:b4:36:d7:4b:2b:2c:91:d3:8b:19:2f:c2:b6:
66:2e:57:9f:03:e1:20:e3:f0:32:df:f9:88:cc:a8:
e6:25:d6:5d:77:6c:42:6f:e7:c5:b3:8c:5d:b5:c5:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:88:B4:A6:AA:2E:42:B1:67:F2:53:A1:36:95:88:5F:20:DC:5C:AA
X509v3 Authority Key Identifier:
keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/2Ii0pqouQrFn8lOhNpWIXyDcXKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.102.0.0/16
147.99.0.0-147.100.255.255
Signature Algorithm: sha256WithRSAEncryption
20:d7:64:72:42:86:f5:84:02:c2:ab:a6:17:01:aa:f8:69:88:
fa:8a:7a:33:7c:94:c7:ec:9e:3a:76:55:cc:f3:cc:58:32:33:
77:8e:8f:ee:5b:3a:99:b1:e5:41:09:7d:e7:96:ef:11:1f:0b:
a9:80:39:87:fa:31:70:f1:ef:24:61:cf:21:e0:17:14:fa:d1:
16:21:a1:c4:f6:2a:fa:2e:51:5a:83:56:f2:bd:53:3d:ad:f8:
e3:5e:0d:f6:14:43:1e:f7:83:a3:3c:38:94:d6:93:78:6d:a7:
cb:b3:72:72:2c:52:4f:c8:e4:01:75:d2:a5:0c:d9:4e:93:c4:
c2:2a:f9:8c:32:00:8e:ba:6e:4d:ea:ad:ca:7a:27:25:25:05:
83:c9:f6:3f:4b:a5:f8:8f:45:c1:3f:44:76:66:d0:9f:78:22:
69:05:83:8d:92:c1:c3:12:1f:34:ae:cc:15:25:11:18:e6:16:
9a:36:52:e4:4b:00:55:1e:2a:a1:1c:83:34:aa:2d:46:61:a1:
03:01:49:10:75:59:84:fd:a8:be:c0:1c:0a:f4:ee:2e:dc:af:
02:80:8f:b7:2c:f3:f9:03:b4:cd:54:bd:43:dd:82:ba:82:80:
f9:ed:9d:ef:ba:7e:31:67:d4:7d:dd:7c:b7:d0:68:68:41:56:
8d:ae:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:59:12 2024 by rpki-client on console-ams.rpki-client.org