Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/2ImE5TbELTAztK87d7QwHgKVPw4.roa
File: 2ImE5TbELTAztK87d7QwHgKVPw4.roa (raw, json)
Hash identifier: jhT48hNb3pmmMoPpIGd8bF/yfWYmTwBxO4ojIC7gTbU=
Subject key identifier: D8:89:84:E5:36:C4:2D:30:33:B4:AF:3B:77:B4:30:1E:02:95:3F:0E
Certificate issuer: /CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
Certificate serial: 018CC8DE5B77D9D36F37BF1A1A10F260509B
Authority key identifier: 8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/2ImE5TbELTAztK87d7QwHgKVPw4.roa
Signing time: Tue 02 Jan 2024 06:31:04 +0000
ROA not before: Tue 02 Jan 2024 06:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48152
IP address blocks: 91.198.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:5b:77:d9:d3:6f:37:bf:1a:1a:10:f2:60:50:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
Validity
Not Before: Jan 2 06:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d88984e536c42d3033b4af3b77b4301e02953f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f0:6a:1a:5a:93:e4:11:b4:50:25:0f:73:a6:
c5:09:4f:d4:33:3a:24:98:1e:66:5e:f5:8c:71:a2:
f2:37:02:2d:4e:f0:e1:44:8b:ba:eb:d7:35:ea:a1:
c0:d8:c3:42:45:40:92:a0:94:47:ad:8a:32:00:a0:
e6:21:b2:f3:34:b5:aa:38:dc:21:f7:d6:04:b7:4e:
e2:12:b0:90:20:f6:e3:5b:60:8b:a9:7b:85:e9:c7:
20:15:2b:0f:d6:44:af:d7:9d:02:5e:22:fc:26:c7:
4a:28:18:34:78:0a:f4:11:e9:d5:32:41:76:e7:f3:
b3:03:44:32:a3:ac:95:c3:be:82:00:83:5f:47:90:
1b:0f:66:4e:48:23:7c:98:0d:75:c6:5a:ed:23:4f:
29:e8:21:61:30:9b:09:4f:57:04:6e:92:d3:e5:d1:
b0:a6:85:f6:8b:d2:d6:24:e2:98:a1:1a:c4:06:e1:
1b:a0:8e:3e:2e:90:15:be:8c:10:35:b4:77:b4:b5:
d5:1a:b8:c2:c1:2f:88:5b:8f:ab:32:ce:c9:4b:5e:
bc:41:da:20:3c:4b:97:11:17:39:c8:c1:be:2e:33:
e0:dd:19:78:ad:b2:35:75:3b:9c:d9:cc:c1:42:d5:
38:01:91:48:10:83:ba:17:38:8f:7c:67:cd:08:67:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:89:84:E5:36:C4:2D:30:33:B4:AF:3B:77:B4:30:1E:02:95:3F:0E
X509v3 Authority Key Identifier:
keyid:8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/2ImE5TbELTAztK87d7QwHgKVPw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.43.0/24
Signature Algorithm: sha256WithRSAEncryption
49:63:b5:9d:88:19:51:52:8e:dc:57:bc:99:a8:09:bf:3d:31:
ef:5a:a0:5d:c0:f8:b4:4d:e9:c3:b5:c6:93:b9:00:ad:dc:86:
ba:c8:2f:09:31:e1:c3:01:85:32:2a:07:4f:0d:98:b4:da:ee:
92:d0:f3:bc:d4:65:c4:e9:0d:e5:49:c7:8c:ce:41:f2:26:f6:
04:43:b5:7c:f6:15:ff:33:7c:3a:c0:c0:d6:22:f5:09:f2:64:
c0:b2:ce:e1:b7:3e:4e:8f:db:f0:83:49:df:4a:78:ce:df:4d:
09:ea:b4:eb:9d:3b:a1:81:6f:67:4a:71:66:2d:51:df:dd:eb:
fe:3d:4f:69:50:f8:94:16:b0:bc:b5:55:8a:32:51:50:ee:89:
c9:08:d1:9a:93:01:1a:08:b1:90:e7:e9:ed:cd:70:1d:be:99:
46:2d:0c:ac:95:48:47:bb:16:b7:ac:bf:e2:07:02:5d:09:56:
ca:8a:2c:7e:c5:76:f3:da:05:c0:db:8e:94:7f:c7:b2:61:3d:
94:4d:49:c2:c3:3e:a5:35:9a:bc:13:78:34:08:4b:fc:be:90:
1e:24:b2:60:46:71:bc:16:01:33:81:a9:6b:1a:26:0d:04:b2:
76:5d:8a:3d:a5:f0:ac:72:3d:d0:4d:f4:a7:07:31:71:0d:04:
4f:23:05:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:57:41 2024 by rpki-client on console-fra.rpki-client.org