Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/p2XgZRftuXbkyYprJT-DqxtHS9M.roa
File: p2XgZRftuXbkyYprJT-DqxtHS9M.roa (raw, json)
Hash identifier: MPXlnMODjBG4sxcK9Xlq2Vnt63961YoyJGIpBsGQTNs=
Subject key identifier: A7:65:E0:65:17:ED:B9:76:E4:C9:8A:6B:25:3F:83:AB:1B:47:4B:D3
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 018CC56E2BAA540383F79F37A42ACD6877C3
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/p2XgZRftuXbkyYprJT-DqxtHS9M.roa
Signing time: Mon 01 Jan 2024 14:29:40 +0000
ROA not before: Mon 01 Jan 2024 14:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198022
IP address blocks: 46.38.248.0/24 maxlen: 25
37.120.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:2b:aa:54:03:83:f7:9f:37:a4:2a:cd:68:77:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Jan 1 14:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a765e06517edb976e4c98a6b253f83ab1b474bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:0b:14:ec:fd:fb:df:5b:70:d7:f0:e7:10:
ae:8d:ae:e0:c1:fa:10:50:1f:50:6c:45:4b:de:11:
b2:ab:f3:92:15:71:12:81:83:c0:cc:49:a1:ee:05:
54:ac:2e:be:09:00:29:8c:97:00:b4:3e:53:e2:81:
af:f1:0f:df:5d:d4:ae:b6:c7:71:61:f5:12:93:1c:
19:e1:a4:09:6e:f2:d5:0c:4b:f9:f8:be:2a:c6:5e:
99:78:e9:3a:bc:42:9f:56:d8:39:0d:ad:2f:c0:c0:
00:48:cf:7e:ba:2f:e7:34:93:4d:bf:69:bd:bb:35:
a8:8d:72:aa:19:72:7e:ce:98:f6:41:b3:ba:6e:3a:
ce:64:6b:62:97:72:39:4a:f4:e3:55:f5:62:f7:e1:
c9:01:3f:d8:ce:57:01:15:2e:30:dc:7a:bb:55:2e:
8a:57:ca:cc:90:0c:c0:fc:ba:7d:6d:4b:ff:4f:95:
70:8d:f2:30:a8:9a:68:cb:9b:bf:63:2b:9d:3a:fd:
1d:03:22:19:da:3e:03:59:cf:35:99:3e:fc:0e:f3:
50:78:60:c4:f8:a8:a2:53:6c:14:50:bf:0a:12:66:
24:68:58:cf:18:4a:5d:30:32:94:4b:36:e0:b7:95:
72:30:d8:17:48:cb:39:a8:65:fb:91:56:9b:db:53:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:65:E0:65:17:ED:B9:76:E4:C9:8A:6B:25:3F:83:AB:1B:47:4B:D3
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/p2XgZRftuXbkyYprJT-DqxtHS9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.120.180.0/23
46.38.248.0/24
Signature Algorithm: sha256WithRSAEncryption
18:46:f7:55:dd:a4:9b:f5:23:38:b1:92:89:55:63:dd:1c:7e:
1c:b9:6c:83:13:87:62:92:81:a2:03:c0:d5:96:db:9a:1a:36:
a0:24:03:b4:e4:81:de:fc:a9:b6:1b:cf:66:98:d4:91:0c:da:
df:13:63:9e:f1:c4:6c:dc:0c:2e:0a:8f:97:7f:be:a4:b0:1a:
3f:43:22:02:1d:a7:d6:4d:91:e8:59:a6:f8:38:9f:6e:4e:ba:
62:fc:d3:12:47:27:c3:7c:20:4e:d5:74:26:33:f3:b2:af:68:
5f:93:79:6a:40:0e:91:7b:0d:32:4b:42:a5:28:d7:a8:35:54:
e8:c2:e1:1b:9f:67:ef:5f:39:2f:b3:40:4e:c9:6a:a9:09:10:
81:93:56:c9:0a:eb:7b:f1:fd:e6:d5:be:cb:a4:14:54:9f:7d:
41:da:80:5a:fb:21:47:be:9a:14:f9:f4:76:fe:12:e6:77:7a:
28:d3:46:20:42:71:cc:49:9b:7b:96:15:26:6d:78:24:ab:3d:
47:5b:b1:3a:e4:06:64:3c:37:5e:07:13:99:8a:25:bc:ec:64:
a7:df:f9:f9:a3:5c:d6:4d:8b:21:0b:1a:9d:27:76:90:7f:4a:
f6:46:64:af:c3:5b:26:db:66:44:0e:c8:bd:1f:7c:3c:5c:c4:
0c:03:c6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 13:16:13 2024 by rpki-client on console-fra.rpki-client.org