Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/2KPglgw9m21F_mFHHi-y_vlGWvs.roa
File: 2KPglgw9m21F_mFHHi-y_vlGWvs.roa (raw, json)
Hash identifier: aXOZwgUI+cSO7JY53A4UBPp66L+kwX4TP/OfbIU0z60=
Subject key identifier: D8:A3:E0:96:0C:3D:9B:6D:45:FE:61:47:1E:2F:B2:FE:F9:46:5A:FB
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 018CC26D75E62917D5AA59A8B54532D687B4
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/2KPglgw9m21F_mFHHi-y_vlGWvs.roa
Signing time: Mon 01 Jan 2024 00:30:02 +0000
ROA not before: Mon 01 Jan 2024 00:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204254
IP address blocks: 2001:67c:754::/48 maxlen: 48
2001:67c:75c::/48 maxlen: 48
2001:67c:758::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:75:e6:29:17:d5:aa:59:a8:b5:45:32:d6:87:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: Jan 1 00:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8a3e0960c3d9b6d45fe61471e2fb2fef9465afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d7:5c:ea:22:15:aa:d0:d5:2c:7d:5a:f0:90:
50:82:a8:f6:e8:bc:91:7f:be:34:a1:d0:63:52:f0:
d1:40:6d:25:71:89:ec:19:59:0b:7f:85:52:e0:57:
f8:de:68:ff:cd:e2:2e:97:b7:2d:8e:41:c5:8c:fe:
56:2a:31:7a:35:f8:be:c1:b9:24:ee:29:19:cf:2f:
bd:cf:cf:50:a4:b3:20:0d:bb:74:7d:84:5b:ee:e5:
04:01:dd:c8:e8:61:06:aa:31:09:de:16:b7:c1:b6:
2b:87:e1:dc:a1:f5:4f:09:58:45:60:de:fd:dc:4d:
1e:44:ed:04:94:81:46:43:5f:ad:9d:1c:5f:6a:71:
c6:cc:fc:9e:70:fa:b7:59:b8:57:b7:71:42:cb:61:
19:c0:9d:3c:ce:3e:3a:f7:bc:7a:13:3d:df:24:18:
63:9e:af:c5:68:10:2e:f7:e1:e2:75:70:b9:a3:df:
28:c8:db:92:4b:e5:b8:57:85:83:aa:19:c2:d6:ff:
1a:ca:3e:aa:35:68:de:46:80:33:52:e7:b9:96:69:
a9:cc:58:a7:fc:92:9f:dd:ff:a1:16:06:59:ac:6e:
86:60:d6:fe:e2:6a:11:55:b8:e6:fb:4a:de:da:1b:
40:ac:ab:e1:11:3e:90:d8:5a:f3:64:d4:8c:a4:c6:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A3:E0:96:0C:3D:9B:6D:45:FE:61:47:1E:2F:B2:FE:F9:46:5A:FB
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/2KPglgw9m21F_mFHHi-y_vlGWvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:754::/48
2001:67c:758::/48
2001:67c:75c::/48
Signature Algorithm: sha256WithRSAEncryption
4a:c8:44:fb:d8:e3:dd:82:51:d1:a9:c3:06:14:ff:1d:c1:c3:
7e:5c:8a:82:e3:ae:bf:c8:8e:81:81:ff:ae:5a:9a:5c:80:80:
aa:12:3f:51:f1:4c:8c:d7:20:1b:15:ca:c0:4f:3c:56:62:67:
5c:d8:fd:e2:8b:04:89:de:ff:9a:13:6b:63:6c:8a:f7:1a:bf:
b2:b2:b2:19:7b:c2:3e:aa:d4:2d:6a:27:0c:e0:80:85:28:38:
68:be:c7:30:4a:5b:a5:b7:a1:a2:1c:ca:a3:35:43:9f:72:fb:
2d:e5:4c:62:cc:18:9f:4e:37:69:26:ba:90:9f:c6:02:38:54:
49:32:15:d4:a0:ea:d5:92:66:99:c1:10:44:df:8a:18:78:e4:
56:a8:21:32:cf:4f:f4:50:ba:44:9d:35:5f:3e:05:49:a6:61:
e4:37:63:3a:bb:28:e3:5a:49:0d:43:d9:6a:d9:d2:8a:b0:1f:
b2:0d:9c:67:61:00:b0:2a:0f:23:ee:b3:c1:35:63:76:76:a2:
a5:1e:c3:3a:4a:0d:48:c8:0b:6a:17:72:4a:28:20:ef:31:eb:
d7:a5:58:88:c3:6c:9b:54:6c:b9:00:99:dd:6c:98:be:44:39:
91:31:05:9b:a1:32:2e:91:2f:50:02:7d:ca:52:68:06:de:ba:
c2:85:4b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:18 2024 by rpki-client on console-ams.rpki-client.org