Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/2a-mAx6ZdA0OAH8wjsnjS_39ATg.roa
File: 2a-mAx6ZdA0OAH8wjsnjS_39ATg.roa (raw, json)
Hash identifier: N+u+TNG/YqbxDI2VzTFbJ8p8wCKguWPDZzRoCQAew3U=
Subject key identifier: D9:AF:A6:03:1E:99:74:0D:0E:00:7F:30:8E:C9:E3:4B:FD:FD:01:38
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 018CC86FB2A8505350D1856E9BDB8DCED55D
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/2a-mAx6ZdA0OAH8wjsnjS_39ATg.roa
Signing time: Tue 02 Jan 2024 04:30:12 +0000
ROA not before: Tue 02 Jan 2024 04:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202654
IP address blocks: 194.8.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b2:a8:50:53:50:d1:85:6e:9b:db:8d:ce:d5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 2 04:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9afa6031e99740d0e007f308ec9e34bfdfd0138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:53:48:c0:02:e3:91:e3:2b:a4:19:05:26:
4f:01:f3:64:4e:d1:4e:dd:ea:8a:7f:64:1a:e6:20:
fa:ee:b8:cc:5d:15:30:ab:55:30:39:f6:21:0a:dd:
82:21:bc:3c:b3:97:eb:6f:20:84:e8:f4:e1:ed:16:
cb:2b:8f:0e:ee:25:e0:7a:3c:d8:c1:b4:1a:09:02:
09:48:31:9a:17:9d:af:32:30:f2:59:76:71:bb:02:
5d:08:b5:5d:81:17:b5:b0:e7:e5:d3:e3:22:95:3f:
bb:54:d7:00:98:40:4d:97:f3:e9:c8:be:ab:8d:64:
8b:dd:bd:e6:20:61:ce:85:9c:0a:c4:e1:68:7c:50:
f7:3c:e6:86:e4:71:fb:27:2d:b5:be:78:6f:0e:bc:
f9:aa:01:9a:a4:01:6b:3e:4f:cd:89:c8:97:0a:dc:
d5:de:7e:a5:40:58:c3:12:92:d3:2b:61:4b:98:c2:
3e:8a:da:92:1c:01:dd:55:1a:8d:3a:72:11:72:4d:
31:4a:7b:70:75:5f:4d:e1:60:ab:be:ed:10:76:5b:
6e:3c:6f:31:d1:14:34:9f:0c:1e:7b:c1:a3:a9:25:
9a:55:75:1c:03:bc:37:3b:0a:44:aa:c0:fa:87:5e:
5a:65:57:d4:8c:55:0c:d2:fe:79:b3:99:01:ea:4e:
91:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AF:A6:03:1E:99:74:0D:0E:00:7F:30:8E:C9:E3:4B:FD:FD:01:38
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/2a-mAx6ZdA0OAH8wjsnjS_39ATg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.239.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:2a:57:f8:fb:5a:3c:3d:9c:21:7a:97:50:e3:8c:ae:75:68:
7b:31:10:41:dc:bd:db:20:5f:4c:fe:3f:25:ac:47:3d:74:a6:
77:62:e6:5a:15:aa:36:90:b9:2b:80:c4:1a:84:8b:6e:46:fe:
60:c1:c5:8a:81:12:0b:ef:49:eb:7f:c2:77:2c:97:5b:78:14:
e9:b5:03:ad:1b:99:6e:d4:58:b9:79:ec:cd:ce:5f:46:d7:4b:
70:55:a0:83:ee:37:db:3f:c2:00:55:ce:26:92:a0:81:93:e2:
5a:6b:6d:e2:e1:6c:a1:cb:41:84:13:2c:d8:10:fb:66:2a:8e:
30:c9:c1:09:9e:cb:3d:1b:8a:e8:d1:7c:ee:1c:ae:33:74:0c:
66:6c:4b:cc:39:71:3b:ed:e5:49:76:0c:11:67:6d:e2:86:d9:
6a:98:75:6a:cb:91:d0:b3:dd:db:94:3f:d8:8b:c2:09:35:85:
e5:f6:3b:88:0c:6f:5b:05:df:3e:4f:c0:81:58:cf:6e:f7:cc:
6b:b6:60:23:e8:81:32:67:d7:f1:5f:e6:09:74:7b:20:33:32:
2f:6e:6b:77:e7:fb:9b:80:0d:f4:1d:f4:36:d7:3c:fa:fc:d4:
30:0c:79:2a:f0:ef:54:a3:e9:e2:22:3f:44:1f:de:14:a6:28:
bb:d6:54:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:32:21 2024 by rpki-client on console-ams.rpki-client.org