Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/2QYxoJz7u4Bi5hNtXBbimov_sRI.roa
File: 2QYxoJz7u4Bi5hNtXBbimov_sRI.roa (raw, json)
Hash identifier: JxeXD8h1CNqZnRlvsWfdrx4HOd3LDn/MDcy5iUW1u18=
Subject key identifier: D9:06:31:A0:9C:FB:BB:80:62:E6:13:6D:5C:16:E2:9A:8B:FF:B1:12
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 018CC3B703B87726E02DD27D875F30D3B640
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/2QYxoJz7u4Bi5hNtXBbimov_sRI.roa
Signing time: Mon 01 Jan 2024 06:30:00 +0000
ROA not before: Mon 01 Jan 2024 06:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12610
IP address blocks: 213.214.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:03:b8:77:26:e0:2d:d2:7d:87:5f:30:d3:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Jan 1 06:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d90631a09cfbbb8062e6136d5c16e29a8bffb112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8c:c0:4a:a8:c4:1e:2c:9e:70:f8:63:37:37:
72:f5:4f:ca:4c:6f:99:d8:b0:6c:74:c1:93:de:bf:
32:51:5e:f7:ad:4e:47:f5:b3:a9:fe:b0:ef:46:7a:
82:8b:21:e8:78:68:2c:5d:24:70:10:0e:f7:df:23:
52:51:95:aa:c9:73:69:cd:ea:73:f0:98:bf:ed:45:
05:a1:eb:80:0d:61:66:7f:fd:da:8b:61:ad:d7:45:
3b:ce:e9:5c:ef:b0:b7:be:2d:c5:44:2e:a6:16:d5:
30:f3:73:1d:3e:3b:d0:95:31:d9:5b:ee:25:6e:29:
25:09:63:5b:66:d5:d1:2f:b8:c6:c7:90:1c:4b:3f:
08:55:a7:56:b6:f1:ef:05:bf:02:9d:23:01:6a:cb:
35:ce:02:c1:d3:e7:8f:b0:0c:58:de:0e:05:97:3b:
ba:16:be:00:d4:b5:33:19:ce:30:b6:ed:b6:af:f2:
3c:f7:54:53:8a:e6:bf:79:1f:28:c9:70:1b:1e:6c:
c8:fe:12:3a:f9:1c:22:19:6c:b3:4c:4c:e9:6b:8c:
70:53:41:08:16:f1:cf:56:51:b6:9c:08:95:0b:e0:
c0:1b:98:69:9c:1c:d9:b0:b8:85:30:40:10:c2:98:
1f:8f:44:fe:95:ca:8d:cf:74:00:cb:64:a8:b5:f2:
33:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:06:31:A0:9C:FB:BB:80:62:E6:13:6D:5C:16:E2:9A:8B:FF:B1:12
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/2QYxoJz7u4Bi5hNtXBbimov_sRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.214.24.0/21
Signature Algorithm: sha256WithRSAEncryption
54:4b:93:8b:bd:07:37:25:c3:33:bb:2c:ed:46:b3:a9:16:b2:
ee:09:21:82:54:51:ef:43:59:db:b6:bc:0d:72:61:c7:72:28:
79:05:f6:88:b4:b4:e5:29:f7:e3:45:70:df:3c:fb:c8:8c:b9:
38:22:8c:6e:ab:0e:34:98:39:dd:88:7f:65:28:e9:bb:59:5b:
02:cb:f6:10:80:de:b2:5a:90:a7:01:53:94:9f:55:d2:27:c7:
5c:8e:00:0f:20:6e:9f:08:88:50:13:73:26:62:8c:8e:24:2c:
28:27:35:9f:18:36:c7:29:eb:9b:d2:2d:27:37:35:81:73:a0:
25:90:9f:d7:56:d8:77:08:97:d4:66:06:4e:2d:34:18:19:e5:
f1:70:10:9d:cf:04:65:f1:9c:de:57:53:03:95:9b:26:c8:f0:
1d:17:97:aa:78:fc:98:c2:41:de:5a:da:7d:43:a9:96:de:4d:
ea:4a:5c:74:80:3d:f6:bd:48:44:f9:81:d0:91:15:e4:3c:3f:
cb:80:c9:28:16:98:a8:73:b6:2f:e2:12:60:ab:17:6a:aa:d4:
c5:1a:5e:b8:8a:0d:8c:6e:e2:72:91:34:b9:81:32:ca:61:73:
4c:ea:c4:10:9c:94:e1:e9:3e:39:26:dd:f8:79:40:74:9e:c2:
1f:ac:3b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:59:23 2024 by rpki-client on console-ams.rpki-client.org