Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2VVa2eMNFAvTpZIgmpXRTYOIrR4.roa
File: 2VVa2eMNFAvTpZIgmpXRTYOIrR4.roa (raw, json)
Hash identifier: pzj4hcFTCzRZRQmjjFP7PU3RVMDAV+F4vWkD3QWNno0=
Subject key identifier: D9:55:5A:D9:E3:0D:14:0B:D3:A5:92:20:9A:95:D1:4D:83:88:AD:1E
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 0192F0F59E4CB0154D5B1D7B9B8CF0CEFA6C
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2VVa2eMNFAvTpZIgmpXRTYOIrR4.roa
Signing time: Sun 03 Nov 2024 07:38:01 +0000
ROA not before: Sun 03 Nov 2024 07:38:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59442
IP address blocks: 91.241.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f0:f5:9e:4c:b0:15:4d:5b:1d:7b:9b:8c:f0:ce:fa:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Nov 3 07:38:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9555ad9e30d140bd3a592209a95d14d8388ad1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:8d:a5:3f:62:01:1b:b8:f1:6f:02:87:7d:
4c:59:1f:c2:dd:b6:fe:3d:da:69:fb:f6:0d:db:70:
c3:5d:39:c9:c8:a4:71:3e:ef:74:fc:cb:ef:cd:58:
13:ff:04:55:b8:de:e2:70:eb:c0:68:42:26:b2:c6:
95:2c:98:81:2f:e5:dd:7a:c5:91:d0:7c:47:c9:07:
e8:01:60:97:48:ee:8c:08:8b:66:e3:fe:52:62:6a:
e3:9d:3a:da:9e:b8:37:25:62:8f:79:57:68:29:b0:
f3:05:1a:46:bf:bf:cf:f0:a6:45:2a:a6:10:7c:96:
81:f1:85:29:53:53:08:44:7b:f0:2b:bf:45:7a:87:
23:87:1d:38:2e:ea:13:35:47:1a:5b:7d:00:e6:8f:
d6:95:a9:45:7e:6c:36:55:00:fd:bf:33:45:62:c1:
bd:53:c1:28:58:84:59:42:5c:3a:68:69:b2:5d:13:
9f:3d:9b:e0:96:2c:fe:14:ab:5f:ec:c5:7b:14:c6:
c0:14:01:06:ed:87:58:09:22:6c:84:18:68:31:52:
17:f9:81:8d:67:6d:f1:ce:0a:ba:b4:49:20:64:60:
cd:73:44:be:25:c3:12:53:05:98:b0:af:ba:a7:cb:
55:83:2e:09:cf:bb:bf:2b:66:7e:90:bb:ce:7b:11:
9b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:55:5A:D9:E3:0D:14:0B:D3:A5:92:20:9A:95:D1:4D:83:88:AD:1E
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2VVa2eMNFAvTpZIgmpXRTYOIrR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.20.0/23
Signature Algorithm: sha256WithRSAEncryption
06:06:de:25:11:a4:24:3b:86:72:90:7b:b9:a8:35:f0:ab:23:
66:77:02:40:33:85:4b:c8:ae:cb:fc:46:dd:77:cb:43:3e:0b:
0f:8e:6c:6f:0e:62:9c:02:85:38:3c:84:27:2e:ad:28:a9:93:
4f:be:6c:1d:2a:1d:17:d5:3b:7c:22:04:d9:ff:a8:24:30:7b:
4e:93:2e:be:8a:ac:13:07:b3:17:d7:76:13:b5:c4:a5:f0:53:
8d:14:9b:7f:b8:48:25:28:8b:ed:01:79:b5:31:f3:05:f2:e2:
e6:b4:19:61:c2:1e:25:65:fb:07:cf:f7:7b:df:68:71:3c:73:
bd:68:89:f5:27:1f:d2:42:97:a2:07:59:27:54:da:f0:f7:8c:
3e:78:f4:d1:e5:21:64:12:e3:8b:63:e3:dd:2d:69:02:55:b9:
ab:1a:ac:9e:71:0e:6a:c7:87:70:b4:03:64:73:40:e4:92:db:
3e:b8:0b:47:aa:d4:3e:f2:6b:93:46:41:09:c8:d9:03:f8:c9:
fc:32:32:62:ee:3c:7e:ea:2d:ed:13:6a:21:61:bd:57:5f:59:
42:0b:b4:6b:72:90:7f:e8:de:d4:4c:24:89:90:7e:6d:35:48:
48:33:d5:32:38:25:c7:44:41:d7:8c:96:25:0d:a1:f3:46:d3:
8c:8c:95:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:02 2024 by rpki-client on console-ams.rpki-client.org