Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/2x5CkKdv6lo1Ksy0zkKQogvcxJA.roa
File: 2x5CkKdv6lo1Ksy0zkKQogvcxJA.roa (raw, json)
Hash identifier: LY8xTzhq94/YbpBe3DkmsoSeRwq2Oa+hAHtwfZIxkbw=
Subject key identifier: DB:1E:42:90:A7:6F:EA:5A:35:2A:CC:B4:CE:42:90:A2:0B:DC:C4:90
Certificate issuer: /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial: 0191988A3EF490E6E654FF1546C3FCF4AC78
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/2x5CkKdv6lo1Ksy0zkKQogvcxJA.roa
Signing time: Wed 28 Aug 2024 10:31:22 +0000
ROA not before: Wed 28 Aug 2024 10:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34834
IP address blocks: 193.58.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:8a:3e:f4:90:e6:e6:54:ff:15:46:c3:fc:f4:ac:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Validity
Not Before: Aug 28 10:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db1e4290a76fea5a352accb4ce4290a20bdcc490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:3f:5b:cc:89:4c:04:bd:83:ad:aa:20:ca:
49:2d:90:23:d0:03:0d:71:fc:43:ed:78:cb:27:01:
ba:d6:b4:41:a1:cd:76:d5:31:c5:42:3a:f8:99:0a:
90:a3:cb:67:fe:a7:25:05:9d:9f:ec:8f:0e:04:38:
6b:b1:0a:ee:9d:2f:69:12:97:f6:b1:c8:ff:ad:23:
01:29:b6:dd:37:5d:b8:41:c2:6f:d1:c4:db:98:e6:
45:99:c4:d9:5e:2d:52:57:1a:ca:d7:47:54:ee:26:
e8:6e:5b:dc:e1:be:b6:0b:c3:55:a7:1a:a9:48:bb:
c0:75:19:09:3b:44:dd:7f:96:b3:66:27:44:d9:05:
eb:02:5d:2f:f9:eb:dd:20:44:d3:48:ef:66:cc:1e:
bf:52:6e:9c:ff:67:a0:8c:90:34:03:ce:f7:11:da:
80:ee:72:67:80:83:f7:52:c0:54:c5:7e:03:b4:72:
f3:70:88:ac:b7:20:10:e7:6a:60:08:ca:7c:5f:9d:
bd:00:8a:51:73:65:94:f9:eb:c8:65:51:67:cf:e0:
86:f4:1d:de:ea:44:62:f9:48:bd:37:a5:8c:d5:14:
41:24:35:26:34:94:44:83:38:0c:6b:d4:d1:1a:c7:
26:a5:08:aa:45:cd:dd:83:58:0c:07:0f:2f:2d:12:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1E:42:90:A7:6F:EA:5A:35:2A:CC:B4:CE:42:90:A2:0B:DC:C4:90
X509v3 Authority Key Identifier:
keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/2x5CkKdv6lo1Ksy0zkKQogvcxJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.244.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f9:72:f9:89:62:ed:a6:e8:ce:53:1e:a7:80:9d:e0:a9:61:
9e:2d:76:c5:ff:1e:a5:3c:27:2f:84:2f:06:34:a9:a5:9a:c3:
48:81:9e:91:46:2a:bd:98:da:48:ac:06:7f:0d:ab:50:1d:d8:
66:21:22:62:58:e5:92:b5:cc:8e:61:d5:fd:82:54:22:79:ff:
3f:93:cd:94:62:7a:d7:a7:29:ed:9a:b6:0b:3d:c3:77:43:5e:
17:42:c6:dd:1a:0e:d5:46:e6:c5:31:94:8f:26:d5:ed:3c:1b:
c3:79:55:7b:ae:81:13:5e:73:bb:2c:dd:57:a4:7a:43:ef:f8:
02:6a:6b:e6:70:68:f7:20:3c:4e:c9:52:53:88:76:66:20:9e:
d8:62:f8:a9:7a:0a:58:75:96:e2:43:e6:51:87:aa:05:32:f4:
4c:69:84:e1:4b:8d:bb:06:b0:64:57:97:82:c6:4a:7a:7b:82:
79:26:9a:25:b5:08:d2:93:d4:73:8f:1b:0e:5d:5e:d3:01:1c:
eb:be:f1:35:dd:38:01:b5:64:22:e2:6d:cf:3c:7d:48:24:54:
75:15:bd:a3:ea:98:9d:5f:2e:d6:f1:dd:38:79:29:7f:3a:25:
d1:c7:e3:3f:ef:14:72:bc:0a:01:d0:47:ec:b2:46:1c:aa:7c:
16:c0:69:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:15:47 2024 by rpki-client on console-fra.rpki-client.org