Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/2ao34M86WIu4qrc9zhp8awjTZJ0.roa
File: 2ao34M86WIu4qrc9zhp8awjTZJ0.roa (raw, json)
Hash identifier: bl71YS3G5Tp52MXq12keWWElyYlCj4iFemhax9PmGkE=
Subject key identifier: D9:AA:37:E0:CF:3A:58:8B:B8:AA:B7:3D:CE:1A:7C:6B:08:D3:64:9D
Certificate issuer: /CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Certificate serial: 01930B80A855E617FB9048B7B2DBEB234D33
Authority key identifier: 64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/2ao34M86WIu4qrc9zhp8awjTZJ0.roa
Signing time: Fri 08 Nov 2024 11:20:01 +0000
ROA not before: Fri 08 Nov 2024 11:20:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198004
IP address blocks: 185.234.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0b:80:a8:55:e6:17:fb:90:48:b7:b2:db:eb:23:4d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Validity
Not Before: Nov 8 11:20:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9aa37e0cf3a588bb8aab73dce1a7c6b08d3649d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:59:d0:71:80:3c:6b:23:d1:f5:9e:5c:e6:
c1:36:ef:93:25:06:98:b1:95:e1:d2:0d:37:94:8b:
81:ef:ca:cd:81:92:b7:cf:44:54:7e:aa:54:54:35:
a8:cc:a9:e5:eb:83:7b:6f:25:97:80:c6:d9:57:65:
75:c4:c9:c0:d2:1f:58:2e:86:6c:c5:13:61:81:2c:
b5:db:24:dc:a3:5e:c6:30:89:13:5a:76:cc:8c:b1:
9d:cd:72:e6:09:8e:4e:a4:d8:55:db:22:13:3a:66:
31:7a:99:21:48:b8:a7:b7:ee:e9:03:94:94:cf:72:
83:1c:55:4d:a6:df:f2:50:ef:89:9e:be:2d:51:08:
96:8c:9b:16:65:b8:0d:f7:19:ab:91:0b:80:ea:14:
91:00:68:9e:c3:14:8f:30:b2:33:8e:f3:29:27:d9:
8d:0c:36:48:69:b7:90:4b:c1:c6:fa:bf:1e:5d:fd:
9d:c4:34:c4:61:c1:f1:1f:f3:21:55:1c:3a:30:d0:
21:88:f1:ab:49:ad:e4:f1:b5:40:dd:73:0d:af:04:
88:7e:fd:35:52:8c:05:c2:49:31:1a:da:94:cc:25:
d9:1d:2c:97:be:19:7f:3a:43:5e:ce:9d:10:00:b6:
26:14:dd:9a:c6:73:b1:68:eb:be:e8:d8:06:92:1c:
45:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AA:37:E0:CF:3A:58:8B:B8:AA:B7:3D:CE:1A:7C:6B:08:D3:64:9D
X509v3 Authority Key Identifier:
keyid:64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/2ao34M86WIu4qrc9zhp8awjTZJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.240.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:a1:7a:6a:95:6a:ec:f7:38:a3:26:c0:e0:1c:f5:9b:fa:8a:
17:f5:8c:da:3f:b0:2b:83:78:42:e7:18:1f:5c:a2:30:86:d6:
03:c8:ea:3f:ea:b3:36:11:49:db:d7:06:29:68:02:2d:5a:bb:
b0:db:12:4c:34:9e:e2:30:74:0d:4b:ed:e9:5e:73:19:dd:0d:
fd:4a:80:01:24:08:fb:77:eb:69:4a:8d:e0:b6:d0:ed:2d:b8:
dd:e1:48:83:a0:8d:c3:f2:1b:87:94:94:13:16:76:9e:2f:52:
1e:e9:69:b4:8d:ef:0e:87:cc:43:4a:59:c7:a3:70:5b:cb:3c:
d8:ee:48:72:90:6f:05:91:da:61:d5:90:fa:b4:16:db:6f:07:
48:02:a9:c6:98:b0:a6:90:68:e4:cf:9d:25:e0:d2:5d:de:9e:
63:9c:c9:12:27:fb:03:50:f7:60:10:99:ae:32:54:c3:b7:06:
9e:77:b3:79:22:bc:84:90:99:69:4a:a5:89:d2:9f:0f:99:10:
2f:1b:a2:cf:6e:45:ea:6b:de:eb:ff:29:2d:97:1a:ff:a4:67:
e8:46:e9:7b:1c:c9:25:45:92:6e:f2:3f:52:2f:41:2d:5c:fd:
b8:fb:31:6b:c5:58:0a:1c:1d:04:83:0d:3e:a4:fe:94:83:b6:
c9:79:01:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:53:57 2024 by rpki-client on console-fra.rpki-client.org