Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/2_gacoHrW3LVNKuQlX4pA3fYCPI.roa
File: 2_gacoHrW3LVNKuQlX4pA3fYCPI.roa (raw, json)
Hash identifier: n1e6RrqVe2NsRvpZhGkR2GbsN2VRbQifKBnWJ3zv+W4=
Subject key identifier: DB:F8:1A:72:81:EB:5B:72:D5:34:AB:90:95:7E:29:03:77:D8:08:F2
Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial: 018CC72750734C492F5B839DDD2D55013A93
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/2_gacoHrW3LVNKuQlX4pA3fYCPI.roa
Signing time: Mon 01 Jan 2024 22:31:31 +0000
ROA not before: Mon 01 Jan 2024 22:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198863
IP address blocks: 91.240.2.0/23 maxlen: 23
91.240.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:50:73:4c:49:2f:5b:83:9d:dd:2d:55:01:3a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
Validity
Not Before: Jan 1 22:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbf81a7281eb5b72d534ab90957e290377d808f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c1:95:82:d4:45:30:78:55:ff:66:b8:d9:55:
b6:cc:76:47:34:b1:68:9c:bf:1d:e3:fb:d5:d9:c0:
90:19:6f:59:da:49:70:7c:b3:25:5f:4f:a8:27:82:
1b:4d:0f:35:4a:e1:d1:e9:4a:e5:b5:d6:14:ee:f3:
65:69:1b:38:b0:29:ae:61:e1:7a:e1:09:e2:23:78:
54:e0:0b:b3:dd:93:92:d8:b3:a1:a7:d9:05:f8:05:
25:a1:86:8d:ad:99:c0:b9:d0:1c:09:d5:53:fc:38:
15:45:93:01:6b:34:78:33:f0:93:d4:da:57:7c:0d:
40:88:31:aa:87:a6:71:1d:17:16:56:5d:55:8f:a5:
7d:81:bf:ab:78:21:73:2c:69:47:f2:9e:39:a5:4f:
be:e4:7a:af:19:cd:cd:15:43:ee:ea:db:59:13:49:
c0:9a:cb:d1:36:67:15:32:10:94:0d:66:45:a6:dc:
f9:1b:55:0b:b7:88:1e:8a:25:7c:d2:f8:d1:cc:f8:
19:99:f0:24:51:2a:f4:26:d0:be:78:38:7f:bd:ec:
0d:93:a1:20:c2:66:08:6d:e0:71:b9:3b:f1:33:d4:
10:c9:3c:a6:40:20:82:c5:73:a7:0b:92:8a:58:ae:
c4:93:ce:7b:13:ab:ab:44:c4:9c:6c:b6:3f:54:6d:
b5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F8:1A:72:81:EB:5B:72:D5:34:AB:90:95:7E:29:03:77:D8:08:F2
X509v3 Authority Key Identifier:
keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/2_gacoHrW3LVNKuQlX4pA3fYCPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.2.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:a7:90:52:20:2e:36:a7:58:22:6f:0e:67:02:20:93:36:a4:
cc:15:da:06:23:a8:db:3c:ac:5d:03:46:7e:dc:2d:f0:f0:d9:
c8:6f:f5:28:3a:ec:45:dc:88:60:9c:f9:18:9e:91:66:15:82:
7d:04:28:13:da:ff:88:1a:3c:1f:f9:84:d4:ab:04:db:ca:1e:
a3:72:39:79:bd:79:b7:90:b6:27:cb:7a:87:71:74:f9:1d:1d:
ac:7a:da:ff:03:65:b8:24:5a:98:a8:d0:49:b3:02:dc:cf:93:
ef:ba:2a:24:23:4b:6a:f1:1f:d4:e7:ac:0b:bf:ec:1a:7b:a2:
9d:aa:49:13:86:93:cb:b8:5f:98:e4:62:7a:6d:94:af:fe:7c:
67:ac:48:e9:a8:a6:96:ea:ea:c8:a8:5e:fe:bf:95:ae:83:a1:
67:c9:12:8b:ba:08:d2:41:f7:4a:d6:60:4f:66:dd:6c:7d:7a:
de:8f:ca:cd:0a:8b:a4:f4:cd:53:12:d3:71:0b:42:4e:f6:b4:
63:06:3b:41:0e:3e:52:1d:fe:71:ef:18:02:b3:70:2f:ac:8a:
85:27:ab:04:9d:d6:73:9b:7e:c2:cf:bf:5f:45:09:67:d3:44:
29:68:16:da:94:f4:d8:13:5b:5e:32:1f:c7:3f:dd:ec:5c:4f:
92:d0:92:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:50:43 2024 by rpki-client on console-fra.rpki-client.org