Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/2XLsgkYFF_At_R8CADoSTjOSGLw.roa
File: 2XLsgkYFF_At_R8CADoSTjOSGLw.roa (raw, json)
Hash identifier: kidiW8M3bybXJaTUyZgIMUELgEWmn23t2JlprMH7ukU=
Subject key identifier: D9:72:EC:82:46:05:17:F0:2D:FD:1F:02:00:3A:12:4E:33:92:18:BC
Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial: 018CC86EEEA09B5FA22A4BC7910F6552FEDF
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/2XLsgkYFF_At_R8CADoSTjOSGLw.roa
Signing time: Tue 02 Jan 2024 04:29:22 +0000
ROA not before: Tue 02 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38042
IP address blocks: 2a13:2200::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:ee:a0:9b:5f:a2:2a:4b:c7:91:0f:65:52:fe:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Validity
Not Before: Jan 2 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d972ec82460517f02dfd1f02003a124e339218bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:49:d7:85:d6:0b:e2:84:47:75:63:ef:92:
b9:a6:c3:34:08:fd:cc:a7:81:a3:7f:73:ac:67:cd:
85:ce:11:52:62:66:ae:79:87:3a:2a:c6:08:04:f2:
3e:ef:38:45:df:fe:34:2e:74:7f:9a:16:e5:f9:b6:
62:c1:68:d0:ea:e5:96:0e:87:70:1b:1c:9e:e8:86:
63:85:3d:ab:92:b6:e4:31:0f:21:01:b5:63:e5:1a:
38:35:35:c2:5a:a2:94:f9:30:6f:40:10:4f:82:45:
cb:ef:ba:87:5c:a8:88:c3:58:66:d7:b8:46:40:16:
f0:d9:7f:53:87:62:e4:c2:d0:42:99:cf:a1:f1:0b:
cc:10:c8:b4:2e:50:be:5a:30:9d:0c:89:45:9b:77:
4b:10:b4:22:f7:8b:ca:74:84:65:ec:43:07:91:6a:
ba:0a:93:a0:22:dc:b3:9b:1c:ef:25:a9:a2:c5:b4:
b0:4a:2c:95:4d:95:e5:93:1a:fa:34:d9:ad:ff:1f:
ef:33:dd:c0:9e:65:6f:0b:a1:e5:d3:02:c1:58:c3:
23:d0:27:d2:19:59:d5:cb:e5:32:8b:d3:99:72:8e:
a1:57:95:26:73:6f:03:b5:a8:99:32:c8:93:9a:46:
c4:79:70:cd:02:02:9f:a5:2b:dd:26:48:7a:ab:c0:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:72:EC:82:46:05:17:F0:2D:FD:1F:02:00:3A:12:4E:33:92:18:BC
X509v3 Authority Key Identifier:
keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/2XLsgkYFF_At_R8CADoSTjOSGLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2200::/29
Signature Algorithm: sha256WithRSAEncryption
07:2f:44:08:c5:01:93:35:42:9f:6a:3e:82:5b:65:bf:d2:f3:
eb:e8:32:f0:a9:48:8f:b1:a2:5f:6d:2b:49:f2:0b:16:61:c0:
31:30:a6:4f:42:31:9b:8c:28:c7:39:bd:3f:e6:b1:10:33:8d:
59:15:8e:b5:d7:1f:b9:00:1b:4b:bd:cb:23:3a:57:e7:4b:c3:
8f:2c:35:aa:0e:17:65:b6:7a:a0:0c:12:f0:19:32:c3:77:dc:
ee:3b:0b:00:4d:e7:3c:63:9e:c7:af:81:d9:54:df:20:b1:8d:
f1:e6:3d:43:7c:36:6b:2b:37:39:9d:46:4e:01:62:4e:9f:c6:
3a:03:01:7f:70:8b:5c:03:03:cd:e5:ea:73:8b:6f:1a:71:a6:
70:b8:94:07:55:d6:32:62:dc:04:6d:f1:bf:97:6e:ea:29:25:
96:9d:cf:86:90:74:2d:f0:73:1a:1d:58:d2:ae:1d:4c:18:01:
52:63:2e:fa:2d:bd:75:3e:2d:26:9a:32:13:78:31:a9:94:36:
2f:fd:df:a0:d6:a4:bc:ef:d9:24:44:31:8e:18:a1:37:93:1f:
71:71:9f:d1:95:5e:3f:fa:6b:3c:94:26:3c:22:3c:00:17:1f:
59:88:09:24:dc:9f:c4:3a:3f:d2:57:c0:1f:43:d1:e5:aa:e7:
2c:c7:38:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 18:43:53 2024 by rpki-client on console-ams.rpki-client.org