Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/2YAMIz1FL7qnfFMbleSl-mVu4MU.roa
File: 2YAMIz1FL7qnfFMbleSl-mVu4MU.roa (raw, json)
Hash identifier: kH8KMzoHXsqv0hosFwSNuVfeEyXmkfCp0HWmXgZNLxI=
Subject key identifier: D9:80:0C:23:3D:45:2F:BA:A7:7C:53:1B:95:E4:A5:FA:65:6E:E0:C5
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 018CC870A025F336C74479D2D0A2ABF7B793
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/2YAMIz1FL7qnfFMbleSl-mVu4MU.roa
Signing time: Tue 02 Jan 2024 04:31:13 +0000
ROA not before: Tue 02 Jan 2024 04:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61094
IP address blocks: 185.187.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:a0:25:f3:36:c7:44:79:d2:d0:a2:ab:f7:b7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: Jan 2 04:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9800c233d452fbaa77c531b95e4a5fa656ee0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:7b:17:c4:3c:02:73:c3:e4:a0:05:62:82:
fa:f1:4b:d7:66:ba:d7:2c:41:c0:d4:c8:ea:53:70:
c9:ab:4b:1d:6f:32:c2:2c:97:67:5b:6a:7e:16:80:
c5:e8:b6:6a:9d:b8:d4:a9:5d:3f:10:8e:6f:fb:30:
96:76:5d:6f:97:06:f2:8c:44:11:f4:d3:bc:12:b0:
7d:18:8e:54:76:df:97:c9:b1:26:ed:f2:6d:24:8d:
b6:dd:11:80:d9:ce:ca:f2:fd:60:82:5c:ff:eb:bf:
9c:7a:9c:b6:98:23:0c:0b:0b:87:c2:36:08:c0:1e:
39:bd:b2:bc:12:45:73:c6:d6:68:f5:75:46:65:53:
c1:52:7a:6c:98:c8:f8:4c:47:f0:c6:df:3f:4b:d8:
b6:e8:ab:7e:fe:b6:8b:29:70:0a:45:3d:2e:e3:70:
5e:6a:52:67:9d:4a:85:1f:af:09:01:9e:f0:5d:f4:
98:c3:68:14:21:4b:d6:45:2c:0e:59:8a:70:e1:f0:
3b:c8:0f:a9:63:7f:05:9e:1b:b2:21:1b:76:a8:ba:
b7:e3:18:69:c9:b7:5a:cd:c8:de:ba:d0:ac:08:e9:
aa:f2:2e:89:3b:ae:30:12:18:ac:2d:5d:d4:89:8c:
14:ab:fc:02:9f:9d:ab:7d:d5:d1:22:4a:72:91:b3:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:80:0C:23:3D:45:2F:BA:A7:7C:53:1B:95:E4:A5:FA:65:6E:E0:C5
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/2YAMIz1FL7qnfFMbleSl-mVu4MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.136.0/23
Signature Algorithm: sha256WithRSAEncryption
66:fb:4b:a5:a4:0a:57:37:14:63:36:3a:6f:d5:ab:27:9e:68:
e8:a6:6b:cb:67:5c:72:e0:7b:69:5a:41:48:f5:e4:24:29:06:
ad:eb:00:99:da:ac:63:8d:5a:04:0d:cf:16:bc:b3:b7:5f:dc:
a5:dd:ba:c7:92:fa:83:35:42:f3:57:4f:5b:5a:33:0d:f7:e9:
35:80:ce:4c:bc:81:c0:30:df:95:ad:4d:84:f2:22:6e:7c:9b:
fd:f0:68:94:d9:4a:fb:38:45:d2:15:2e:38:23:9a:21:eb:19:
bb:c9:9c:e6:54:be:8c:35:4b:46:b6:be:34:15:92:a1:a2:92:
06:6d:ed:d7:aa:75:45:41:73:b8:90:4e:89:43:94:e7:a3:38:
4a:a9:55:71:a1:c8:cd:c4:a3:96:9c:62:e5:f6:2f:01:09:86:
76:bc:3f:9b:97:99:bf:ef:aa:49:1e:89:2e:78:2b:b0:bf:57:
31:78:3e:34:03:41:ea:a3:17:48:07:ce:ab:5c:39:55:97:0e:
3b:b2:93:c3:ac:a2:08:92:68:7b:39:ec:43:82:18:36:99:9c:
7d:55:81:98:97:1c:2e:3b:1d:4b:27:12:88:03:56:28:f4:4f:
5e:fa:78:b7:06:de:3c:03:24:39:c6:e6:0a:7c:cd:39:18:95:
a4:53:4a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:03:54 2024 by rpki-client on console-ams.rpki-client.org