Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/2iATcUeT-BWBfjvxIv_IB5qiSSM.roa
File: 2iATcUeT-BWBfjvxIv_IB5qiSSM.roa (raw, json)
Hash identifier: U7oPSbWtZ130OZx0H+rg9gkfH9rv6ZKWPjjJiyVMxx8=
Subject key identifier: DA:20:13:71:47:93:F8:15:81:7E:3B:F1:22:FF:C8:07:9A:A2:49:23
Certificate issuer: /CN=31836010eedef15f76adeba9f729a828bf2be8cb
Certificate serial: 018CC2DB307BF54F6A8303B0A936BD3F090C
Authority key identifier: 31:83:60:10:EE:DE:F1:5F:76:AD:EB:A9:F7:29:A8:28:BF:2B:E8:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYNgEO7e8V92reup9ymoKL8r6Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/2iATcUeT-BWBfjvxIv_IB5qiSSM.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.239.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/MYNgEO7e8V92reup9ymoKL8r6Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/MYNgEO7e8V92reup9ymoKL8r6Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYNgEO7e8V92reup9ymoKL8r6Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:30:7b:f5:4f:6a:83:03:b0:a9:36:bd:3f:09:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31836010eedef15f76adeba9f729a828bf2be8cb
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da2013714793f815817e3bf122ffc8079aa24923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:f8:fa:81:80:70:7a:4a:ce:f6:a6:93:bd:
8a:c3:33:4b:a3:82:8a:68:9e:9b:b5:c0:de:f4:fa:
ff:e1:cf:0d:0a:a4:82:8c:b7:5c:6b:63:39:17:39:
81:bd:80:06:90:40:21:61:30:20:de:c1:fe:96:94:
e0:2c:37:6a:52:71:96:55:2a:0b:49:7a:30:a9:21:
d4:70:b8:ee:1a:a3:5a:ea:94:69:85:b5:57:6c:94:
92:17:a7:fe:54:81:7b:0e:18:c6:81:b9:22:f9:98:
40:f9:96:c6:73:b1:68:5f:38:97:07:22:d3:19:0b:
8e:df:5d:d9:8e:16:6b:66:5c:32:f9:c7:cf:34:e9:
30:c8:c6:81:7e:40:81:02:56:7c:84:81:5d:af:cd:
13:da:4e:77:7e:fb:59:ef:b4:9c:dd:50:d4:06:29:
9e:44:0c:bf:dc:a4:2a:74:e9:37:2e:cf:30:24:ac:
47:d2:73:be:44:3a:3c:ca:a1:75:52:ec:b1:cb:6a:
5e:de:c7:32:99:1b:0f:60:df:1b:10:7e:5a:87:bc:
bc:ed:3b:7c:40:3e:b6:ff:1b:ee:77:1b:13:ec:a3:
c4:2b:ed:31:53:97:75:16:26:36:df:29:47:f7:ba:
5b:6d:a1:c9:63:61:b9:80:9e:0a:e8:83:a9:13:1d:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:20:13:71:47:93:F8:15:81:7E:3B:F1:22:FF:C8:07:9A:A2:49:23
X509v3 Authority Key Identifier:
keyid:31:83:60:10:EE:DE:F1:5F:76:AD:EB:A9:F7:29:A8:28:BF:2B:E8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYNgEO7e8V92reup9ymoKL8r6Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/2iATcUeT-BWBfjvxIv_IB5qiSSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/MYNgEO7e8V92reup9ymoKL8r6Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.211.0/24
Signature Algorithm: sha256WithRSAEncryption
90:cd:a3:56:4b:a7:5b:1c:69:02:59:88:59:23:e0:71:9e:c6:
7b:84:60:fa:6c:ed:01:d8:45:16:45:64:6c:8f:37:69:60:31:
bf:d3:bb:99:c2:cf:3d:90:94:03:b1:63:7a:07:65:1d:20:5c:
ec:3c:f8:bf:2c:74:02:33:b6:1f:3f:2e:9b:74:73:b8:ab:3f:
b9:b4:b3:7f:51:d2:98:23:d3:b4:5c:13:09:73:36:16:65:38:
0f:f5:e8:a2:60:e9:8a:dd:ba:13:d7:1e:63:73:fb:dc:ab:91:
06:24:c9:fd:26:a4:17:d4:4a:6b:50:60:d5:64:87:0f:04:60:
c3:7f:61:ef:c6:3e:d2:05:d9:1f:f0:fc:62:32:11:68:01:27:
9d:b6:a8:d0:5c:95:d7:8d:31:9c:13:95:71:f0:af:26:c3:e6:
64:40:c8:06:4f:24:bb:fe:89:f7:a8:73:12:31:e5:7c:36:8b:
cb:6f:c7:e7:6a:2d:2d:5c:bb:87:56:c1:9b:7c:ec:2b:a1:59:
5b:52:fe:d8:85:cf:20:62:c5:6e:15:80:fc:96:e5:bf:7e:77:
38:39:ba:6a:b9:ab:05:bd:83:1e:7d:ee:eb:32:a6:2d:d1:55:
5e:55:43:62:06:83:3f:e2:18:6b:35:68:e4:8d:20:ba:87:4d:
b9:12:c5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:09:05 2024 by rpki-client on console-ams.rpki-client.org