Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/S2hk14-ZM_arcKvdq1JA5mClovI.roa
File: S2hk14-ZM_arcKvdq1JA5mClovI.roa (raw, json)
Hash identifier: D8F2uA6ryU97nnXnEA4/5WkbQelfCgToxw2DmEjvGbg=
Subject key identifier: 4B:68:64:D7:8F:99:33:F6:AB:70:AB:DD:AB:52:40:E6:60:A5:A2:F2
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 0192FC17A77EF83C52A69A8B588AB56F1E4F
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/S2hk14-ZM_arcKvdq1JA5mClovI.roa
Signing time: Tue 05 Nov 2024 11:31:01 +0000
ROA not before: Tue 05 Nov 2024 11:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48090
IP address blocks: 2.57.122.0/24 maxlen: 24
45.142.192.0/24 maxlen: 24
80.94.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fc:17:a7:7e:f8:3c:52:a6:9a:8b:58:8a:b5:6f:1e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Nov 5 11:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b6864d78f9933f6ab70abddab5240e660a5a2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:ad:c2:20:4e:ac:ae:06:c3:2a:4f:2e:a4:
2d:48:f1:ee:3d:43:9c:01:23:61:6d:37:51:30:15:
e3:c2:ac:b4:45:33:ef:f6:91:31:a4:99:8a:d6:34:
b5:79:0f:7c:53:bd:15:4c:da:5e:e3:1f:c8:bf:68:
80:a2:27:e1:99:62:40:1e:41:c2:3f:72:01:2a:a4:
9f:01:bd:5b:56:44:c1:f0:c9:e7:ec:5a:a0:0b:92:
e0:b0:f2:0b:67:4e:f6:1f:a3:47:76:73:2b:1b:58:
52:79:79:9f:e9:68:ff:b0:b1:45:3a:c8:90:5f:1c:
f5:37:bb:3a:1e:2f:b4:ec:49:2e:b6:27:0b:d2:62:
5a:ce:9f:e1:79:ad:6d:ed:6b:5d:0b:36:14:6f:a5:
d3:d0:29:02:c6:95:eb:fc:4f:8c:a9:c3:a0:56:6f:
ab:57:1a:1f:06:53:6e:20:74:75:cb:a8:25:d1:93:
dd:16:43:1b:ab:d4:4f:17:40:c3:fa:a7:f2:0a:45:
82:26:9b:ea:31:c1:58:22:90:77:c6:e2:00:a9:c9:
7c:57:31:01:4e:4c:f1:3f:b8:d0:06:b3:82:f8:60:
04:e7:79:fd:fb:09:ff:03:2c:7d:ad:55:55:7d:93:
89:e6:4e:8a:fd:3c:66:a1:f7:3e:47:2c:48:93:ee:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:68:64:D7:8F:99:33:F6:AB:70:AB:DD:AB:52:40:E6:60:A5:A2:F2
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/S2hk14-ZM_arcKvdq1JA5mClovI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.122.0/24
45.142.192.0/24
80.94.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:7d:f0:35:3b:e5:cf:92:8c:0a:e9:86:20:03:94:d6:cc:d1:
0a:13:cc:79:73:1c:30:81:30:cd:43:9e:e9:a1:5f:19:6f:0a:
9b:ac:0a:69:bd:7f:49:11:3a:f1:af:89:d7:ea:67:19:9f:6b:
be:eb:60:18:75:3c:6d:6a:2f:f9:89:45:b7:b9:52:91:94:49:
a1:35:2a:ae:b7:c5:56:c0:91:5a:9b:69:79:40:82:81:31:98:
5f:1e:19:d8:7e:25:7a:f7:34:16:73:98:93:77:c7:92:53:c9:
37:d6:46:7b:ff:c6:3a:3c:b2:28:29:41:21:45:3e:f9:c3:15:
74:24:80:de:33:96:b7:c4:f8:77:6f:32:e2:57:1b:1f:f4:e0:
18:0b:99:d3:94:71:65:f2:d1:df:ff:84:bb:34:a4:68:90:48:
bc:6e:a2:a6:6a:86:fb:6f:40:be:8d:30:52:5d:47:f0:b0:74:
d4:b0:be:e1:8c:d7:c3:cc:2d:5e:b7:dc:9a:b0:72:a8:4d:f4:
8e:b5:00:79:f8:e0:af:22:7a:1f:44:a6:70:83:72:98:d6:0f:
55:56:94:8f:b9:66:2c:87:d6:6e:cc:e0:c3:0c:45:9a:64:27:
3d:7e:dc:28:1f:2c:46:83:b9:cb:87:83:c0:be:40:35:7f:54:
2b:d0:91:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:52:52 2024 by rpki-client on console-ams.rpki-client.org