Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2hXsB9qtv2WTyLHgt-KTFVNgffM.roa
File: 2hXsB9qtv2WTyLHgt-KTFVNgffM.roa (raw, json)
Hash identifier: /2F8EzEu8GSF1l9almO5R59Q4GdpPrc02LyOpqMrxxs=
Subject key identifier: DA:15:EC:07:DA:AD:BF:65:93:C8:B1:E0:B7:E2:93:15:53:60:7D:F3
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E00BEDE030A87BB296799924BB782
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2hXsB9qtv2WTyLHgt-KTFVNgffM.roa
Signing time: Mon 01 Jan 2024 14:29:29 +0000
ROA not before: Mon 01 Jan 2024 14:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39421
IP address blocks: 5.101.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:00:be:de:03:0a:87:bb:29:67:99:92:4b:b7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da15ec07daadbf6593c8b1e0b7e2931553607df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:43:60:07:cb:7d:e9:87:88:20:b0:1b:38:28:
28:8c:f2:28:2c:db:95:0e:fc:cd:2c:26:8c:55:c3:
f6:2a:bc:a6:fe:08:56:f1:8f:6e:99:3c:ac:67:32:
61:6b:94:42:ea:c8:73:59:0b:e5:7c:04:a4:db:68:
c7:b6:e8:13:3c:4f:1c:9b:02:9c:8d:ac:4b:c1:09:
51:a8:00:2c:88:e6:c6:99:ae:48:66:83:24:9a:68:
18:20:0d:43:7c:e4:d2:8b:24:d1:4a:73:64:58:b7:
10:04:a5:75:81:5b:29:94:74:55:a3:0c:22:7c:35:
a9:5b:4e:05:c2:61:0a:31:4f:d5:ed:37:a8:91:d0:
2a:1b:c1:4a:54:cc:d5:a8:8c:51:ba:92:8d:aa:35:
26:1c:31:b0:4d:b6:36:cf:da:ce:aa:ea:5c:91:5e:
5b:58:c7:75:3b:f9:91:26:81:46:77:69:84:41:cf:
f8:99:09:df:c1:93:dc:c0:23:83:8d:11:68:a1:2c:
9b:fb:e1:89:78:5b:33:2a:97:b5:ba:2c:ea:61:04:
80:6e:f8:9c:4a:e4:bd:08:7b:bd:64:9e:08:a5:57:
1b:8b:cf:c6:b4:9b:91:9d:df:de:71:ec:3f:49:c4:
56:8a:7f:67:43:ca:d6:b4:72:6d:9a:63:f4:5c:65:
bb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:15:EC:07:DA:AD:BF:65:93:C8:B1:E0:B7:E2:93:15:53:60:7D:F3
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/2hXsB9qtv2WTyLHgt-KTFVNgffM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.34.0/24
Signature Algorithm: sha256WithRSAEncryption
72:30:80:58:4d:71:80:ca:74:45:9a:cc:c6:c6:21:a5:a1:e3:
14:52:3a:4d:f7:15:13:56:3c:95:d6:5f:75:cc:5d:8f:f2:e4:
2b:26:33:28:d5:6e:17:f2:83:dd:38:0d:11:6e:22:90:76:56:
77:db:c7:72:cf:07:3b:c2:22:38:d2:bb:2d:9a:e3:a2:0f:2b:
c2:c6:47:f6:99:6b:21:2c:40:d2:0a:ba:79:4e:2b:76:d8:d6:
cf:33:52:c4:57:91:69:41:9f:ab:13:94:90:de:a7:1b:22:ca:
d6:4f:24:9a:db:e4:86:0d:1b:e0:7b:f0:7f:f6:4a:12:0e:7b:
bd:20:ab:52:fc:73:3a:69:3e:04:79:cd:53:c9:53:c8:65:95:
77:78:cd:ac:73:ea:45:38:ef:5d:a2:bc:2e:b8:87:fe:d0:e4:
9c:c0:1c:d0:bf:42:c5:6d:7c:4f:08:3d:5f:79:db:a1:e2:6b:
5d:e1:ac:64:75:73:64:19:48:64:98:75:a7:d7:8c:40:25:4f:
d5:bb:a6:6f:88:c3:07:2d:88:c5:d5:92:4f:9d:3d:dc:28:dd:
fe:16:4f:9f:6b:a3:11:8a:db:0d:18:4d:41:fb:3f:a5:74:24:
68:b4:de:27:33:28:28:c6:d5:1b:01:5d:85:82:85:c2:68:2e:
3a:e7:ff:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 20:13:25 2024 by rpki-client on console-fra.rpki-client.org