Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/2dKilKmnrO047nsJYxv6pZukh6o.roa
File: 2dKilKmnrO047nsJYxv6pZukh6o.roa (raw, json)
Hash identifier: 9izQfIm7YEDH5xz6bUdkiunYBsfazKkmc2YsGvrgnFk=
Subject key identifier: D9:D2:A2:94:A9:A7:AC:ED:38:EE:7B:09:63:1B:FA:A5:9B:A4:87:AA
Certificate issuer: /CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Certificate serial: 018CC94D6AF5B15B13A7ADF59CF66A8A7998
Authority key identifier: B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/2dKilKmnrO047nsJYxv6pZukh6o.roa
Signing time: Tue 02 Jan 2024 08:32:23 +0000
ROA not before: Tue 02 Jan 2024 08:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25091
IP address blocks: 192.162.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:6a:f5:b1:5b:13:a7:ad:f5:9c:f6:6a:8a:79:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Validity
Not Before: Jan 2 08:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9d2a294a9a7aced38ee7b09631bfaa59ba487aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:d6:13:59:f9:d0:2f:20:d6:11:06:af:54:
4a:0e:50:99:8d:42:67:a1:08:ca:8a:84:c4:31:78:
79:43:ed:d4:88:3b:49:23:04:3c:7a:a9:c1:f7:cf:
87:63:1f:5b:ec:a8:c1:f7:6c:8f:99:80:bc:e4:37:
16:6c:02:65:ef:23:aa:33:12:9e:14:7c:7d:da:bd:
49:03:32:bb:b0:9f:8e:66:86:99:1d:4b:46:fd:11:
91:0c:db:45:ee:85:ad:69:e4:d9:9f:43:5e:39:08:
b2:17:26:de:73:b9:0a:e6:ec:ef:2c:12:b6:41:4b:
16:c7:6d:dd:ea:05:7f:f2:69:25:d8:e2:d2:0d:ba:
29:2a:3a:7c:4d:c9:f0:de:0b:97:4b:4f:1b:3c:4d:
2a:88:4f:8d:7e:45:06:45:b3:8d:86:0f:f2:f9:fd:
75:73:c6:67:c9:e7:fc:25:dc:39:27:e7:e7:49:4b:
98:b5:50:0c:2a:35:ba:08:2b:f9:ec:e5:ba:8c:22:
4a:8a:66:1e:77:2e:6a:10:e5:b8:26:48:d6:17:d8:
e0:04:9f:24:4d:8c:91:d9:46:ed:80:5b:02:d3:c0:
0b:3f:49:3b:ea:91:f9:a2:42:7d:d5:e1:3f:65:79:
5b:da:39:e5:8e:aa:21:9d:46:30:fb:78:87:0e:41:
33:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D2:A2:94:A9:A7:AC:ED:38:EE:7B:09:63:1B:FA:A5:9B:A4:87:AA
X509v3 Authority Key Identifier:
keyid:B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/2dKilKmnrO047nsJYxv6pZukh6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.204.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:27:a9:54:b2:a0:76:d5:e6:5b:bb:ec:00:9e:14:f1:1f:9b:
ca:9e:b8:ee:86:fc:25:36:04:1a:6f:82:63:48:02:f5:67:6c:
45:4f:4d:fb:95:7b:4a:5b:66:ee:24:af:35:51:51:a7:5f:d0:
42:68:5f:17:2e:1d:47:aa:cb:45:39:f5:a0:bd:2b:00:40:dd:
01:33:c5:06:8c:20:ff:c4:dd:45:a9:7e:8d:15:e9:93:aa:5b:
11:91:ae:a1:db:80:9b:33:a7:df:3b:65:1b:25:57:e6:96:93:
07:d2:69:a3:6e:6d:43:43:07:13:7a:2c:a7:e0:e7:a7:a8:ac:
06:aa:a0:8e:7c:94:20:7f:63:fc:c1:8e:f5:9f:00:1e:a7:08:
98:f4:8c:f9:a0:fe:86:65:b0:eb:46:87:0d:9b:37:d1:fc:0f:
19:6b:6e:07:c3:3f:14:2c:d7:6a:c7:34:33:18:e1:ba:6a:05:
ee:b3:91:be:fc:8b:4c:4e:f8:07:7c:4e:bb:6b:72:34:fc:af:
5e:ac:ca:81:d6:70:4a:92:a9:1c:d6:a5:b5:40:c9:e4:b3:b7:
59:78:fb:91:75:3c:e7:5d:d8:f6:64:09:36:43:10:d5:6c:cd:
1a:4a:68:8b:22:cb:ab:1e:3d:a1:74:f3:c0:4d:85:92:6c:71:
43:59:55:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:09:17 2024 by rpki-client on console-ams.rpki-client.org