Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/2IHGEB2ndL-N7fvM04Fr9hcertQ.roa
File: 2IHGEB2ndL-N7fvM04Fr9hcertQ.roa (raw, json)
Hash identifier: 2PnMV1Js6M+XySbTSk5wE+Yc0vVI7ruwC2KLDWyUlZk=
Subject key identifier: D8:81:C6:10:1D:A7:74:BF:8D:ED:FB:CC:D3:81:6B:F6:17:1E:AE:D4
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 018CC3B730F8BA0D7D3201AB8D3A798C7CE8
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/2IHGEB2ndL-N7fvM04Fr9hcertQ.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 268624
IP address blocks: 45.141.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:30:f8:ba:0d:7d:32:01:ab:8d:3a:79:8c:7c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d881c6101da774bf8dedfbccd3816bf6171eaed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:80:45:48:58:7c:fc:c1:de:34:6f:7d:a2:74:
4d:fa:df:1c:19:ad:42:fa:ac:a5:f8:b4:1f:ea:60:
8e:93:77:61:ac:0e:05:54:ca:8a:e9:b2:db:b9:5c:
53:62:22:c4:a8:bf:81:f3:d4:e9:41:7e:3d:e9:84:
1e:4c:41:e0:4b:52:06:cc:ed:50:f0:03:45:72:54:
63:78:de:09:53:22:ff:69:ab:48:bb:1a:e3:51:58:
22:e4:81:62:4f:31:cc:4b:0f:55:de:7a:a7:5e:58:
53:4f:b9:cf:66:00:5d:36:1f:22:3c:aa:59:5b:9b:
dd:84:69:04:be:d0:7a:34:af:18:06:c1:e0:13:ea:
8c:36:11:89:98:8c:d1:95:b5:1d:06:47:1e:2d:ce:
0b:43:5b:57:36:06:7d:4e:ba:eb:09:ee:f7:8e:13:
fb:a5:e8:a6:b2:b1:54:66:d1:32:30:c0:d1:bc:b4:
5c:ae:33:11:82:e3:a8:66:e6:e2:25:81:e2:92:43:
01:99:1c:48:a7:1d:e1:94:ba:b3:1d:12:63:97:da:
9d:6c:b0:ed:25:01:dd:7f:eb:36:c3:16:13:d5:e1:
e8:09:66:e2:30:15:b0:c1:75:b8:2b:71:28:2a:b1:
b3:34:41:2d:40:61:65:57:1e:e2:a7:c6:65:bb:5a:
25:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:81:C6:10:1D:A7:74:BF:8D:ED:FB:CC:D3:81:6B:F6:17:1E:AE:D4
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/2IHGEB2ndL-N7fvM04Fr9hcertQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.214.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f8:70:82:a6:04:0f:10:a9:cd:1e:63:26:41:da:8e:40:10:
34:58:f8:24:7b:e3:3e:36:b4:e3:07:ef:a1:df:b7:aa:3d:d8:
52:36:36:35:24:51:a3:98:c5:04:80:b6:70:1f:a1:da:d9:bb:
47:d0:bb:73:08:e3:61:88:55:7c:ea:92:eb:a9:b6:12:7b:41:
81:d6:f3:ed:24:ae:42:65:3b:bd:5d:cb:58:a2:72:ae:0d:bc:
78:f1:1d:86:2f:10:b3:2a:69:eb:af:bf:a3:ed:4f:90:59:ec:
47:07:43:9c:82:61:56:b0:94:0d:4a:b6:77:f7:1e:d6:86:aa:
11:31:0c:61:32:6d:91:51:74:a9:b2:d3:fd:3f:a4:86:2b:4d:
2d:20:5b:ab:70:89:ed:a0:9a:b9:ef:84:c2:22:5f:bd:ea:f4:
d2:87:20:4f:29:c8:63:98:a1:a1:8f:ae:02:ee:48:1c:74:f9:
a4:f5:c5:41:c3:48:6c:cd:93:e6:12:6a:79:6a:9e:be:34:57:
15:68:4e:03:a7:25:c4:4a:a0:5b:90:fa:d9:f7:45:15:04:e2:
6d:9c:3e:d8:15:0a:73:7d:66:94:bc:2d:54:75:32:ad:4e:a4:
e7:b9:74:27:ee:db:a7:5a:2e:0b:ba:88:7a:8a:3c:ef:60:fe:
87:4c:9d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:58:25 2024 by rpki-client on console-ams.rpki-client.org