Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2cbcSEtD-t4zJ8c9HGWa84EcwCU.roa
File: 2cbcSEtD-t4zJ8c9HGWa84EcwCU.roa (raw, json)
Hash identifier: +zKheBdMZk40cdtPMZhkNvvpifjmVm2jEXQXFK7ggyI=
Subject key identifier: D9:C6:DC:48:4B:43:FA:DE:33:27:C7:3D:1C:65:9A:F3:81:1C:C0:25
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A4D7281C208BDF58CECC6B3DAEF9F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2cbcSEtD-t4zJ8c9HGWa84EcwCU.roa
Signing time: Tue 02 Jan 2024 12:33:39 +0000
ROA not before: Tue 02 Jan 2024 12:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209179
IP address blocks: 92.253.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:4d:72:81:c2:08:bd:f5:8c:ec:c6:b3:da:ef:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9c6dc484b43fade3327c73d1c659af3811cc025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6c:07:5e:81:80:dc:0a:72:83:59:e3:ca:cf:
c2:d3:33:8c:45:0a:a5:d3:f0:93:75:6d:96:c6:f7:
93:89:32:a7:fc:a9:a7:7d:a2:49:4b:85:7a:8f:2e:
3e:b6:ef:5b:fd:75:38:c2:f1:fb:8b:81:08:94:ff:
3b:8f:92:ff:00:85:c1:1d:16:f8:89:a3:53:45:11:
02:c5:0c:23:e2:24:38:b7:0f:27:a7:39:0c:50:1d:
0a:19:10:a7:24:52:48:6e:b7:43:46:72:66:d3:44:
a0:26:cd:e3:3b:80:19:94:52:06:62:d7:c9:b8:da:
6b:3a:7c:ea:c9:01:5b:56:fd:30:f5:73:52:7c:ed:
c5:58:1b:df:3e:b4:90:f3:45:ab:b7:70:bd:56:b6:
42:50:51:5e:ec:76:d6:03:70:30:f7:5d:31:e4:71:
a8:1e:52:cb:78:0a:5c:7f:3a:c9:3e:bf:0d:9e:c6:
fa:f9:39:f8:e7:15:ed:e8:e1:b0:09:05:57:89:84:
2e:19:b1:da:70:a2:b5:83:7f:74:77:b9:84:17:08:
3a:af:ff:5a:56:bf:04:d9:8c:e9:75:e5:7d:87:73:
81:0b:7c:f1:31:b7:57:ac:cf:eb:f5:47:43:1e:74:
f8:20:f4:bf:5c:2a:97:73:e7:39:bc:7a:8f:67:9f:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C6:DC:48:4B:43:FA:DE:33:27:C7:3D:1C:65:9A:F3:81:1C:C0:25
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2cbcSEtD-t4zJ8c9HGWa84EcwCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:e6:fb:81:a9:eb:e4:71:5a:40:87:36:9a:47:c7:34:49:ac:
1a:49:c8:5c:6e:0e:27:34:50:a9:36:67:ff:4c:1a:cc:6e:af:
a2:8e:b5:5a:54:03:18:b8:f3:9e:a4:30:60:c6:53:e6:7a:02:
a9:63:cb:61:c1:8d:45:64:05:7e:2f:da:c6:14:db:c8:45:8b:
fb:3e:49:a1:99:11:83:80:d8:72:89:7a:b7:94:b2:86:57:32:
b1:8b:6a:66:14:ce:2c:54:96:6a:05:15:5c:fb:e4:34:aa:07:
53:d9:44:b5:ec:80:60:8b:9f:5a:77:a8:15:68:99:b4:a4:15:
c1:2d:71:2c:d7:5f:87:c8:5d:6b:62:af:3a:32:c5:b3:44:33:
b0:06:6f:a2:52:5b:25:7d:52:10:9d:fa:e3:21:af:a8:7d:f1:
6e:f6:2d:a7:e5:47:75:fc:32:57:a6:23:c0:c8:d4:0c:6d:49:
7f:0a:e3:c5:f0:72:3e:85:1b:0b:b1:61:93:43:f7:9e:85:14:
ce:85:7f:79:ed:6c:03:2f:d9:a5:d9:b3:50:4a:06:71:59:24:
be:86:f5:8e:90:69:cf:df:a6:3d:69:5b:7e:d3:b4:4f:b9:25:
e0:b5:f4:bd:56:1b:8d:dc:2f:35:cc:97:ac:11:58:c8:95:65:
6a:63:80:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 17:25:48 2024 by rpki-client on console-fra.rpki-client.org