Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/2tAercNAYd8itwifMlyXk_35WMI.roa
File: 2tAercNAYd8itwifMlyXk_35WMI.roa (raw, json)
Hash identifier: B4pfeMJrQAM+GKn5iBB5sp8tZZQjweWV//31lUTTuuk=
Subject key identifier: DA:D0:1E:AD:C3:40:61:DF:22:B7:08:9F:32:5C:97:93:FD:F9:58:C2
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAE6128ED2FA963810031C52F8B664
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/2tAercNAYd8itwifMlyXk_35WMI.roa
Signing time: Mon 01 Jan 2024 02:29:34 +0000
ROA not before: Mon 01 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206948
IP address blocks: 195.136.92.0/22 maxlen: 22
195.136.147.0/24 maxlen: 24
195.136.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e6:12:8e:d2:fa:96:38:10:03:1c:52:f8:b6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dad01eadc34061df22b7089f325c9793fdf958c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:38:d3:52:b6:24:21:a5:1e:1f:41:41:65:
c5:9c:bf:99:69:cd:a4:75:d5:11:03:e3:08:e7:c5:
cb:e8:aa:5a:94:46:06:2a:70:50:c3:4d:5c:6a:5a:
28:77:0e:95:4f:88:9d:e3:a7:61:db:94:da:18:e8:
5d:f0:f9:ee:1d:8f:c3:78:32:42:70:84:6b:e3:50:
8b:07:d8:a4:28:55:99:86:ad:f8:cf:6c:2d:2d:82:
18:21:19:de:13:23:43:b1:ca:60:6c:6a:b6:61:8e:
94:e2:b4:ee:4f:e3:5a:71:d3:62:6c:ee:34:44:e0:
8c:8b:22:dd:33:fe:68:fa:68:25:e3:ad:d6:15:a8:
73:46:08:5c:ae:22:57:39:75:a7:6b:2d:17:b4:40:
cd:55:0a:e6:f1:6a:5c:f7:8b:e7:b1:6e:7e:e1:f8:
8e:6a:e7:34:93:49:3e:9c:d1:89:26:fc:64:02:c2:
d2:1f:cb:e1:52:03:28:d1:9a:19:ec:70:1b:0b:fb:
c3:0e:05:05:b6:45:23:a5:ff:23:2a:60:cd:f9:33:
cb:1e:c6:48:c7:3c:68:7b:0c:c4:2b:cc:be:e4:8d:
cb:31:77:a1:bb:b2:5c:f8:3b:41:70:0a:f4:01:fc:
00:40:f5:db:5d:25:2c:61:f9:21:6a:86:64:69:db:
31:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D0:1E:AD:C3:40:61:DF:22:B7:08:9F:32:5C:97:93:FD:F9:58:C2
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/2tAercNAYd8itwifMlyXk_35WMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.92.0/22
195.136.147.0/24
195.136.152.0/23
Signature Algorithm: sha256WithRSAEncryption
37:03:b3:bc:be:44:0f:0f:95:36:74:97:e8:d3:59:04:f2:09:
d9:df:f0:20:41:42:56:af:c0:eb:de:ef:f6:c4:e3:f1:4f:3a:
cc:6f:02:0a:ac:1c:fd:78:88:a4:ef:8e:da:f4:dd:64:3e:cf:
92:ef:fe:6e:82:82:cd:39:17:44:91:9f:53:f2:c6:51:ab:39:
61:ef:36:1c:f0:8e:bc:a3:71:cf:51:f2:73:bb:d1:45:85:99:
f2:e9:34:72:bf:9e:64:18:1d:f6:30:45:6b:00:93:9a:19:2b:
cb:e5:a7:9d:f4:15:14:b9:82:56:0b:99:cb:86:5f:be:56:7f:
f8:72:e2:eb:5c:6d:ce:c5:37:d8:a3:d6:12:11:2f:90:b0:b1:
4d:2e:27:b6:28:e7:fd:c1:93:7f:56:db:1f:d1:c4:f5:c0:42:
d5:08:92:d9:2a:66:77:f2:f3:a5:aa:2f:cd:2c:0f:17:96:dd:
39:cb:ba:b0:3f:4e:d8:4d:97:aa:a3:8f:6e:a7:40:df:c7:5e:
9e:16:73:d1:49:f0:1d:98:11:ef:1f:b2:e7:22:7c:0c:96:6a:
a6:b9:aa:78:da:ab:83:30:02:aa:bf:09:2a:ed:93:96:b4:9a:
95:6e:d3:12:66:f5:86:c1:22:0e:d4:fb:f9:5b:28:24:23:ec:
01:e3:23:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 09:30:21 2024 by rpki-client on console-fra.rpki-client.org