Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/2H5R-U7slsSxpB3e1vJZNRhAcsQ.roa
File: 2H5R-U7slsSxpB3e1vJZNRhAcsQ.roa (raw, json)
Hash identifier: T3I7MF5+xwLm3ltid7jf8EbcSVx0MQL6ZYq6IhlSmEY=
Subject key identifier: D8:7E:51:F9:4E:EC:96:C4:B1:A4:1D:DE:D6:F2:59:35:18:40:72:C4
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 018CC86FB64F80701D56023825310B50A997
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/2H5R-U7slsSxpB3e1vJZNRhAcsQ.roa
Signing time: Tue 02 Jan 2024 04:30:13 +0000
ROA not before: Tue 02 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210148
IP address blocks: 78.142.250.0/23 maxlen: 24
195.7.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b6:4f:80:70:1d:56:02:38:25:31:0b:50:a9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 2 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d87e51f94eec96c4b1a41dded6f25935184072c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:39:ae:6b:23:7b:eb:66:5b:93:e7:01:79:4a:
1a:16:bd:f4:a9:0d:bf:ae:0b:78:97:cc:d7:36:13:
60:4c:91:66:b5:ec:b4:ab:a2:88:ff:b7:3b:38:8f:
e7:49:91:4f:d3:27:ce:fe:93:f7:9e:f5:24:75:3d:
be:c7:2b:07:43:f7:99:5f:14:cb:8c:8e:a9:e4:c7:
43:46:e1:71:b6:06:74:56:18:ad:fa:ad:26:34:c7:
f8:14:d1:94:68:b2:39:62:d0:79:81:52:17:a0:75:
f7:ac:ed:68:1b:bb:d8:0e:d9:52:a8:d0:f3:f1:24:
1d:7c:2d:f1:8f:78:d4:06:71:06:ba:d6:76:ab:0d:
e0:4c:0d:79:4f:d1:5f:c6:1d:b2:e3:24:dd:e8:63:
11:47:8f:9c:7f:0b:be:a9:b5:c8:a0:e4:26:5c:cf:
ab:42:0e:53:1b:ab:fb:3c:2a:88:42:0d:24:fc:fb:
10:0b:78:59:d9:83:ea:d1:e6:88:81:e2:f7:f8:c2:
2b:6e:90:04:ee:0e:22:11:05:61:ae:37:56:e9:ab:
16:e8:07:24:4f:56:bd:df:5f:1e:61:57:de:31:19:
e8:92:71:1c:c1:45:e7:e3:70:8f:0e:d4:42:24:77:
4e:5e:7a:2a:f7:66:a3:39:00:6c:74:f4:d7:0e:b7:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7E:51:F9:4E:EC:96:C4:B1:A4:1D:DE:D6:F2:59:35:18:40:72:C4
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/2H5R-U7slsSxpB3e1vJZNRhAcsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.250.0/23
195.7.12.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:dd:e4:de:46:41:91:5e:cf:c3:23:dd:bc:8c:ce:8d:39:2b:
e5:87:f9:b0:b8:67:7d:d8:7a:8a:df:b2:7d:2c:82:6c:b9:6b:
53:7f:71:81:db:23:18:11:06:c9:5c:4a:c4:1f:42:58:43:ac:
8c:e5:11:86:39:c4:32:c1:d1:28:35:13:42:36:e3:85:49:b2:
3b:64:dd:87:f0:d7:e6:85:64:40:6d:4d:c5:84:37:c7:ad:1d:
80:fe:06:e3:e0:bc:82:b4:5b:97:ae:cd:25:92:97:bd:d1:7e:
40:66:94:fa:26:4f:ac:99:9f:c1:c4:7f:fe:4f:5a:a9:aa:e4:
55:7e:4c:87:48:fc:00:22:0e:f5:6f:ed:ee:05:17:e9:16:fa:
8e:1d:ad:7d:74:fe:b2:61:63:9a:e8:e5:47:73:6b:5d:69:e9:
17:e9:1b:e7:7e:0e:88:15:94:16:ef:fb:2f:e3:3f:f2:f7:22:
35:39:7f:93:60:43:90:7d:70:5d:ab:60:02:c3:30:cf:f5:6f:
f7:e9:2b:ac:12:be:26:72:39:0a:10:00:ed:94:45:9c:6b:13:
04:3c:c7:18:45:ae:51:c5:23:b8:9c:e6:38:bb:8e:91:b5:b4:
57:4f:5d:9a:5f:08:80:df:04:8d:ac:4c:2a:bd:e9:f2:91:70:
6f:83:58:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:12:42 2024 by rpki-client on console-ams.rpki-client.org