Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/2gAUfPyTZwGJ5_JMyedUfdGaeqI.roa
File: 2gAUfPyTZwGJ5_JMyedUfdGaeqI.roa (raw, json)
Hash identifier: weF3xID1uKWo4isZSnZvFL/SOsaDIbA+ZuMM18jYLn8=
Subject key identifier: DA:00:14:7C:FC:93:67:01:89:E7:F2:4C:C9:E7:54:7D:D1:9A:7A:A2
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 018CC5DC799F4D55E415969D0C0DEB5A142A
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/2gAUfPyTZwGJ5_JMyedUfdGaeqI.roa
Signing time: Mon 01 Jan 2024 16:30:09 +0000
ROA not before: Mon 01 Jan 2024 16:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 194.34.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:79:9f:4d:55:e4:15:96:9d:0c:0d:eb:5a:14:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Jan 1 16:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da00147cfc93670189e7f24cc9e7547dd19a7aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:be:49:f5:2d:1d:9f:41:f4:17:0d:d0:94:1d:
78:13:39:90:93:f7:29:02:cd:cf:8f:b4:a8:37:88:
7f:58:4d:e5:99:f9:fd:3d:30:74:df:44:91:1a:6d:
42:1b:83:01:e9:73:dd:33:f5:97:31:17:e4:6d:31:
10:43:04:25:4a:7e:ac:9a:f5:5d:97:1b:2e:aa:e5:
46:e7:09:0e:6b:84:b7:a5:c4:ae:1c:bc:e2:80:81:
33:5f:23:a1:be:a7:a8:19:dd:20:83:cd:75:de:a4:
68:9c:bb:dd:42:27:29:44:c7:42:e2:d2:6e:b9:c8:
9f:8e:44:e8:36:25:80:d5:f7:16:dc:c3:d3:3d:30:
93:91:5c:b2:37:80:bd:b1:14:e9:ad:a8:cf:e3:9e:
f3:21:9a:91:36:64:4c:37:ad:aa:ba:97:6c:57:82:
ac:82:a2:21:aa:96:3e:82:8f:e3:37:0e:4a:aa:d6:
3a:5c:1a:ff:a6:2d:29:11:f3:c5:2c:23:05:a2:94:
0f:7e:77:b5:68:1b:36:f5:f6:48:27:d4:11:cd:3a:
cf:72:9f:ae:42:55:f4:50:c6:7f:bb:b2:6c:73:da:
6b:de:6e:80:3c:ec:39:55:c0:ac:62:39:05:f8:b4:
54:4b:fd:ab:84:67:8a:5f:53:1c:a6:0d:13:be:67:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:00:14:7C:FC:93:67:01:89:E7:F2:4C:C9:E7:54:7D:D1:9A:7A:A2
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/2gAUfPyTZwGJ5_JMyedUfdGaeqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.105.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:aa:bf:80:f1:41:cc:8c:5e:d1:dd:8d:e3:23:c1:cd:87:c8:
28:c6:5e:94:a6:76:af:18:f0:33:62:d5:c7:1b:d0:ba:74:77:
dd:ce:6a:63:73:f4:86:38:87:ef:c6:bb:1e:af:6e:18:a9:cb:
38:ee:ff:cb:71:e3:68:99:5b:f7:2e:7b:f3:c0:19:0d:31:63:
44:ad:aa:06:f1:d3:19:e3:e0:9a:cc:fc:17:a9:bb:94:51:37:
6d:21:ab:08:8a:13:a9:fd:7e:e5:61:ef:f0:74:d9:9a:c2:6a:
69:c9:de:6a:6c:2b:ed:79:2a:99:03:f2:22:7e:c1:88:70:53:
bc:10:10:1a:f6:3f:22:d4:2d:97:e6:4d:3b:1c:f6:b7:d5:0a:
a3:a1:e0:bd:e7:4f:6b:33:8b:2e:1a:7f:9e:e2:f2:27:03:69:
f3:8b:b5:cb:bd:ca:bf:fe:5a:10:14:b9:5a:17:36:be:94:66:
ab:37:ae:99:a9:73:3c:67:a7:e6:48:a4:c9:c7:50:4e:2d:be:
02:8f:d8:86:d1:ce:ed:c1:da:02:41:94:8f:96:67:8b:d8:2d:
69:a4:4d:3c:8d:0b:1f:22:ab:0a:a4:ff:2f:27:bf:a2:5d:28:
3c:b5:df:7a:58:9d:d0:c0:4e:be:1d:f9:2b:d3:98:d6:a1:32:
76:08:af:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:33:49 2024 by rpki-client on console-fra.rpki-client.org