Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2gcElMyev0fLykF9Enn5-NS2dF0.roa
File: 2gcElMyev0fLykF9Enn5-NS2dF0.roa (raw, json)
Hash identifier: 3a6CSGCYQvLhOc0/BBlOiEMpSZA8UdrfgjQm59GKVoc=
Subject key identifier: DA:07:04:94:CC:9E:BF:47:CB:CA:41:7D:12:79:F9:F8:D4:B6:74:5D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01905F41FE8935295E480A78C8CE102764EF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2gcElMyev0fLykF9Enn5-NS2dF0.roa
Signing time: Fri 28 Jun 2024 14:31:18 +0000
ROA not before: Fri 28 Jun 2024 14:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 82.163.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5f:41:fe:89:35:29:5e:48:0a:78:c8:ce:10:27:64:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 28 14:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da070494cc9ebf47cbca417d1279f9f8d4b6745d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:21:0d:0e:db:26:82:a8:fa:3d:54:a6:61:
66:df:71:5a:ce:2e:88:7c:f1:cc:53:93:62:90:7c:
f3:75:4e:5e:59:be:2d:37:68:1c:9c:f3:a4:03:e6:
e9:b0:fc:27:26:17:d4:d3:81:50:09:5e:b7:3e:a5:
a4:f9:38:fc:6b:c2:0e:73:4e:58:36:d1:21:0c:ea:
06:12:7e:e1:e2:69:de:a0:fd:37:1e:44:ff:83:e2:
58:c2:f4:0a:c4:bb:d8:ee:65:f8:4f:cb:ee:59:78:
8b:2b:2c:1a:62:f0:2a:32:f1:13:6c:da:0a:44:60:
56:e8:05:d1:f5:9a:da:ad:dd:7e:d1:c3:ea:bb:c3:
9b:09:22:34:44:fe:0f:16:94:bd:27:69:a5:5d:00:
cb:1e:b7:ea:a4:81:8c:a8:a4:45:1d:0f:3e:f7:2a:
c9:73:8b:1a:a0:0c:d2:9e:b9:39:3e:c6:2a:ff:be:
86:60:c4:28:2e:66:bd:ef:e1:8b:50:2d:f3:fa:b3:
93:7b:ec:a6:1d:84:3f:13:75:02:d6:3e:0f:cd:47:
10:14:50:4f:f5:1d:27:75:35:c7:3f:ae:7a:68:bd:
6a:3f:80:d0:bd:3c:66:55:69:9c:02:4a:02:b2:97:
e7:b3:4a:8b:40:3b:07:d2:34:e9:37:ca:55:8c:ae:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:07:04:94:CC:9E:BF:47:CB:CA:41:7D:12:79:F9:F8:D4:B6:74:5D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2gcElMyev0fLykF9Enn5-NS2dF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:2a:fa:e0:d5:9d:24:fc:25:04:b2:a4:94:a0:e6:52:31:99:
d6:67:91:df:ab:d3:b4:42:62:45:0f:d8:e9:0b:10:df:fd:a6:
1e:06:5e:2f:c7:97:65:e8:03:fb:09:ec:77:98:cb:16:53:53:
93:2c:37:a7:2f:ce:e7:c9:28:fd:45:45:11:c2:ab:a7:22:a7:
7b:1a:62:d3:62:d9:cf:7f:8a:d4:58:ce:37:40:5b:b2:10:a3:
cc:93:eb:fa:18:90:46:8f:67:f5:a8:a9:b7:50:1d:61:31:b0:
66:65:f8:99:ac:63:86:0f:67:0c:57:7d:d9:75:a5:4c:d2:2b:
7d:3e:62:dd:6b:87:64:f7:a2:f5:75:39:42:f8:32:f1:55:2c:
0a:cf:8d:28:0d:14:a2:f0:43:5c:78:07:35:ad:08:79:cd:7c:
35:2c:b8:37:44:d5:87:d3:48:ec:52:14:ec:7c:53:6d:28:9c:
7c:5a:15:84:e1:7d:c9:55:6b:d1:c6:eb:0d:8e:11:d3:f9:24:
4f:7f:d3:7e:dd:d9:4e:f0:b8:90:9b:4d:1b:d2:ec:38:e7:33:
39:c4:05:78:5f:5a:8d:3a:87:37:24:f8:ce:1f:75:77:0c:86:
11:c2:07:d7:30:1d:dd:8e:cb:9f:d8:68:eb:2b:aa:57:97:f0:
93:5d:3b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:22 2024 by rpki-client on console-ams.rpki-client.org