Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/2PbXcElGaHzj3G_BNpVJ5MNzXCc.roa
File: 2PbXcElGaHzj3G_BNpVJ5MNzXCc.roa (raw, json)
Hash identifier: O6cByBKmRGU5YeYDRXMyjKnnVMKoxPpbIWbHQ6ot3F8=
Subject key identifier: D8:F6:D7:70:49:46:68:7C:E3:DC:6F:C1:36:95:49:E4:C3:73:5C:27
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019072D8579DE0312C5ACD30318392947D37
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/2PbXcElGaHzj3G_BNpVJ5MNzXCc.roa
Signing time: Tue 02 Jul 2024 09:48:18 +0000
ROA not before: Tue 02 Jul 2024 09:48:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212384
IP address blocks: 89.249.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:72:d8:57:9d:e0:31:2c:5a:cd:30:31:83:92:94:7d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jul 2 09:48:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8f6d7704946687ce3dc6fc1369549e4c3735c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ed:f4:11:a2:0f:e1:fd:c4:01:d7:7b:e8:6a:
ed:e1:a5:91:44:d3:5a:a6:31:76:cc:5f:98:ee:0a:
78:83:26:52:9e:13:ac:08:87:04:40:cd:89:e1:37:
83:0d:59:84:5b:1d:08:89:e6:0c:7b:6d:ff:f2:66:
c8:10:e9:61:0e:68:c4:55:c2:98:e9:38:3d:16:1e:
3c:cf:ae:ee:ce:6b:1c:94:84:5d:a3:5c:9c:26:6e:
a4:ab:5f:c6:c9:af:0b:22:2c:76:fc:dc:e6:b8:f9:
96:12:23:ef:d3:08:f9:d0:f1:8b:32:ba:e1:c7:89:
52:27:5b:cf:6b:b5:4b:f2:f0:03:15:1d:98:a4:ee:
be:ff:9c:a1:e9:40:9d:63:c5:6e:c1:22:95:b1:a7:
c4:21:a6:dc:36:1e:54:f9:c7:3d:f1:26:5e:ae:5d:
08:b5:bf:93:b3:4f:c6:7d:52:b7:a3:e0:c0:92:af:
8d:8b:ac:83:cb:fb:fc:6e:80:0e:ec:53:8b:46:e0:
52:49:cf:9c:aa:48:94:f7:2f:f9:d3:27:95:12:33:
81:28:66:c0:dc:78:f6:eb:b9:c8:25:3f:b5:08:85:
0a:27:08:dc:69:38:9b:7d:28:60:89:bb:39:c2:99:
cc:a5:42:c3:e3:13:9c:c7:c4:69:8d:e1:ef:53:ce:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F6:D7:70:49:46:68:7C:E3:DC:6F:C1:36:95:49:E4:C3:73:5C:27
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/2PbXcElGaHzj3G_BNpVJ5MNzXCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.204.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:02:82:b8:56:0c:8a:7b:38:ba:83:83:0f:f5:ab:b0:63:e3:
12:97:e2:52:f6:fd:8b:1b:2b:bf:77:33:b5:b5:a8:c8:fe:61:
0f:a1:22:dc:d9:ef:f8:fc:ae:06:c6:cd:17:dd:13:55:23:a7:
b8:b1:ae:8a:82:18:77:81:19:fc:23:bd:80:a1:3d:6e:21:c9:
0d:bb:fc:be:e2:2d:de:f3:6b:09:5b:75:73:5f:8e:f9:c8:0a:
cb:f9:74:5c:7c:9a:93:95:ab:2b:d0:67:6e:b8:ad:d9:97:03:
5f:52:33:a4:86:de:02:87:aa:82:e5:7e:cc:5d:0d:0d:6b:a0:
2b:43:dc:1b:b5:13:a4:26:79:96:e8:d7:92:a3:13:a3:c3:ab:
71:59:1e:12:a7:59:b4:05:0f:1b:86:67:b3:49:24:56:82:c9:
fc:bb:c7:97:ff:f6:38:cb:50:16:d2:5e:da:21:27:17:52:78:
72:5f:81:6a:a7:50:05:3f:9d:53:22:5c:de:82:1f:6a:40:8e:
49:64:22:29:f6:1b:59:d4:b2:48:f4:96:87:44:31:ce:f1:56:
b0:be:d1:4d:4a:71:70:df:93:25:a4:16:79:1b:a6:3e:74:78:
ce:b7:04:ab:10:00:6a:20:44:34:88:0d:f4:ae:59:a0:c8:34:
e1:3a:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:47:49 2024 by rpki-client on console-ams.rpki-client.org