Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/2u7IPO9O5lR3VG4HKYosBXWpXEA.roa
File: 2u7IPO9O5lR3VG4HKYosBXWpXEA.roa (raw, json)
Hash identifier: irbVBHTUV1zXhFvtYquaK+c8Y3dKPUsJK1H0y9zQ+LI=
Subject key identifier: DA:EE:C8:3C:EF:4E:E6:54:77:54:6E:07:29:8A:2C:05:75:A9:5C:40
Certificate issuer: /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial: 0191FFC81725DA0818CFF8B77F1C4C08410B
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/2u7IPO9O5lR3VG4HKYosBXWpXEA.roa
Signing time: Tue 17 Sep 2024 11:39:48 +0000
ROA not before: Tue 17 Sep 2024 11:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208949
IP address blocks: 194.147.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ff:c8:17:25:da:08:18:cf:f8:b7:7f:1c:4c:08:41:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Validity
Not Before: Sep 17 11:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=daeec83cef4ee65477546e07298a2c0575a95c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:e4:06:0a:62:38:0f:43:75:f1:4c:79:19:
08:a1:11:1d:b3:e2:fd:5f:0b:41:86:21:4a:54:c1:
17:1f:75:97:ef:f2:14:f3:94:85:ee:33:8a:4b:10:
69:4d:d6:44:46:ba:06:b5:79:72:f8:e7:72:12:43:
c3:f7:0d:65:50:fc:52:49:98:50:e1:3c:f2:9c:63:
0f:8a:3a:3b:ca:52:c4:c8:ca:ca:2b:22:14:76:b2:
db:37:7d:64:dd:bb:d7:87:08:d6:f3:0f:53:13:3a:
aa:c9:a5:14:95:91:0c:f5:92:77:5e:47:d3:86:dd:
fa:4b:9a:1c:f3:38:4a:c1:62:3d:bb:04:60:7d:8f:
09:5b:72:5c:bd:98:5b:f7:e3:1b:f8:16:da:94:d4:
be:a3:49:31:d8:eb:f2:42:63:22:37:36:fe:52:55:
02:c2:cd:b3:87:08:30:95:a0:f5:90:ea:1f:ef:3d:
c4:4a:23:ad:70:24:e6:01:b2:25:c0:cc:c5:49:e2:
7e:6a:be:54:bd:46:e5:19:ae:4e:f1:e1:4f:b3:92:
b6:ec:60:12:c9:8d:de:50:80:44:21:17:b8:e7:7a:
dd:b6:29:af:72:dd:fa:5e:c7:40:88:b4:16:e3:62:
4a:15:73:5b:34:a6:8f:e2:8c:b6:af:aa:ee:ba:e0:
45:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EE:C8:3C:EF:4E:E6:54:77:54:6E:07:29:8A:2C:05:75:A9:5C:40
X509v3 Authority Key Identifier:
keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/2u7IPO9O5lR3VG4HKYosBXWpXEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.44.0/24
Signature Algorithm: sha256WithRSAEncryption
91:09:ff:64:f1:f5:2c:12:59:7f:0a:c2:fe:5b:e1:95:28:63:
43:f6:e5:c8:e0:b7:9d:67:b9:c7:2f:eb:6b:75:58:b9:7b:9c:
ec:47:41:c8:ce:de:63:04:45:6d:4f:66:87:9f:2b:8a:36:b9:
11:70:ec:ee:3b:12:1f:6c:59:c7:9a:03:37:f2:59:7e:9d:61:
89:5b:a7:4a:f1:c5:37:38:77:9d:17:59:3e:ed:6e:cf:e0:34:
c5:c9:a7:5c:87:0d:29:4b:6f:a1:23:92:ab:10:d9:f3:fc:6b:
16:8a:15:89:d2:11:88:cf:ed:f6:96:7e:4b:1f:3d:8f:6e:7b:
76:5c:41:73:d8:ff:41:bd:bb:a2:e3:5a:69:15:9a:a1:9c:91:
0a:11:c6:27:12:85:99:5d:51:40:5c:25:4b:92:b3:64:8f:74:
c3:a3:cd:7c:31:f4:c6:4c:3a:21:36:21:fb:ba:c4:5a:07:b8:
af:3a:d8:fa:46:ad:f4:d7:be:2d:a7:f3:a2:f4:df:f4:4c:a0:
a6:e9:81:96:d8:78:ec:4d:9d:bf:54:b5:e4:33:e3:6e:cf:32:
d9:5a:25:76:ba:c7:78:1c:54:b7:cd:af:8f:f9:01:be:b8:71:
88:69:f1:db:37:8d:bd:66:eb:97:bd:c7:94:1d:2c:4b:7f:02:
bc:42:4b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:22:27 2024 by rpki-client on console-ams.rpki-client.org