Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/2d34_feJs6CzpEUIbB1vrARfrwU.roa
File: 2d34_feJs6CzpEUIbB1vrARfrwU.roa (raw, json)
Hash identifier: aqCOrnqqASOJ0g2pFHny+QB4cljsyD/QJY7CSQ+/N1A=
Subject key identifier: D9:DD:F8:FD:F7:89:B3:A0:B3:A4:45:08:6C:1D:6F:AC:04:5F:AF:05
Certificate issuer: /CN=e27e66e403d31c7958335298168de60a215c0c0f
Certificate serial: 018EC1CE4CB24A89D4CE36155BAA55C899A3
Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/2d34_feJs6CzpEUIbB1vrARfrwU.roa
Signing time: Tue 09 Apr 2024 07:41:46 +0000
ROA not before: Tue 09 Apr 2024 07:41:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 188.241.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c1:ce:4c:b2:4a:89:d4:ce:36:15:5b:aa:55:c8:99:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f
Validity
Not Before: Apr 9 07:41:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9ddf8fdf789b3a0b3a445086c1d6fac045faf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e6:64:bd:3b:d9:03:a9:1f:32:a3:a0:d2:fd:
1f:e3:8f:07:93:dc:21:1f:30:9f:17:04:12:4c:75:
5d:b8:6f:d4:3f:01:55:fb:b7:e0:b9:8d:75:6e:18:
08:58:99:5c:c4:9b:97:75:31:e8:43:bf:bb:20:1e:
9f:06:ab:3a:8f:0e:21:fa:5c:d0:a6:f7:aa:b5:65:
86:78:52:cb:6f:ec:6a:00:a7:45:d6:b1:47:ba:c8:
63:02:32:4c:f2:b8:0f:60:8b:59:c3:62:3f:66:d7:
b7:63:5b:90:b7:46:d0:21:7d:31:57:51:f0:96:80:
a3:3d:5c:57:79:cd:22:9b:84:91:05:0a:bd:18:28:
a4:07:dc:87:0a:51:97:f2:4a:d5:5b:d5:35:bc:80:
5c:06:68:39:ad:05:4a:17:e9:fa:3d:c0:cb:11:50:
3f:b7:3c:58:f6:04:a1:5f:17:10:6f:c6:79:42:ed:
40:c6:67:e2:26:fd:39:cc:ba:71:f7:7a:6c:a0:8f:
1a:70:62:c0:d6:d0:5a:9e:75:aa:89:47:0b:f0:cc:
4b:73:b1:a0:51:f4:29:16:76:d6:86:20:e6:f6:20:
63:75:5a:1b:b2:61:47:b6:68:c8:86:9a:a5:93:ee:
4d:a0:00:d1:db:eb:bb:b5:a5:2f:b2:74:f4:80:59:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DD:F8:FD:F7:89:B3:A0:B3:A4:45:08:6C:1D:6F:AC:04:5F:AF:05
X509v3 Authority Key Identifier:
keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/2d34_feJs6CzpEUIbB1vrARfrwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.220.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0b:c9:42:ce:20:45:96:af:b4:b1:f3:31:9d:c4:97:f6:7b:
95:47:a3:dc:98:76:52:79:2f:db:7d:e0:12:00:67:fb:9c:9b:
22:3e:a2:41:8b:7b:fe:6c:2b:19:06:88:eb:ac:9b:db:35:13:
1d:e0:cc:dd:cb:51:db:87:c0:c6:1d:de:93:3e:63:e0:82:87:
04:cd:fd:2c:b4:08:37:03:3b:99:ea:47:96:60:e6:ea:b7:2a:
a3:a5:1e:4d:85:7c:22:8d:47:e6:18:4c:c0:9b:90:37:ad:65:
d7:b8:a9:73:b1:52:92:40:8b:a3:ef:9b:42:bf:15:49:ed:e9:
94:d1:32:92:54:ce:e5:da:b4:70:fb:be:f0:94:f0:8b:10:9d:
2d:f1:8d:25:46:d6:cc:11:b7:7c:28:7d:c6:66:55:0a:06:2b:
65:e3:c4:dc:96:da:37:17:12:31:2c:4a:18:b1:4e:ab:b5:2c:
94:fc:1e:c4:d1:12:15:87:d0:a1:e2:b2:41:88:df:7a:e7:11:
19:f1:d6:91:eb:42:b7:74:a3:1f:12:a4:19:e2:18:09:ec:f9:
d2:e8:09:fb:da:8f:8f:13:40:a9:c1:00:f0:4f:b8:2a:a8:4f:
bb:a2:4b:8b:89:86:f9:c1:78:c5:72:d6:1a:1a:66:32:c0:db:
e5:89:3f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:46:01 2024 by rpki-client on console-ams.rpki-client.org