Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/2s1gde1NvcjzB4v2l9eHjERkAbc.roa
File: 2s1gde1NvcjzB4v2l9eHjERkAbc.roa (raw, json)
Hash identifier: pLFs+wE++qmlgNekJfy131OAkNxUPdQQ+oX3UqrEwKw=
Subject key identifier: DA:CD:60:75:ED:4D:BD:C8:F3:07:8B:F6:97:D7:87:8C:44:64:01:B7
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 01905162E6C5AF0CBF43766C5F60422FCFC3
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/2s1gde1NvcjzB4v2l9eHjERkAbc.roa
Signing time: Tue 25 Jun 2024 21:52:34 +0000
ROA not before: Tue 25 Jun 2024 21:52:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29884
IP address blocks: 137.174.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:51:62:e6:c5:af:0c:bf:43:76:6c:5f:60:42:2f:cf:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Jun 25 21:52:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dacd6075ed4dbdc8f3078bf697d7878c446401b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8e:5d:8c:8a:9a:92:1f:39:4d:bd:4f:22:d0:
23:dc:37:cb:c4:28:73:7e:fe:6b:e8:fb:b1:9e:c0:
66:54:89:f4:96:47:89:ff:4d:50:3b:ee:c2:eb:4c:
d3:13:a6:57:ff:65:97:ee:c6:96:1b:b1:bc:48:22:
16:4e:b4:76:05:70:f3:51:69:f4:64:5b:4d:e7:e1:
be:ac:bd:60:21:4f:30:f5:77:b7:ca:e1:bf:a2:4e:
f0:21:af:cf:e3:1d:4a:14:1c:28:81:c1:29:8f:37:
82:ee:f4:25:bf:73:04:cb:80:ba:9a:49:30:64:bc:
89:f0:7c:81:d2:a8:52:09:52:3e:15:22:fa:2a:68:
d0:94:65:67:1f:85:e4:4a:ed:d5:ab:52:25:33:ed:
a0:dd:4e:3e:2f:79:77:10:74:e1:9c:4b:33:7b:fb:
23:10:c8:2e:90:a8:70:67:05:e5:93:53:99:fb:ef:
4f:d1:bb:3a:a1:3c:4a:46:d7:8b:5d:23:06:4a:5f:
b5:e1:0a:04:7d:77:ae:23:6e:09:f6:b3:5e:c2:b4:
a0:25:ca:cb:06:02:db:31:aa:0d:94:19:af:c4:86:
a1:65:7a:e8:97:bd:db:5c:fd:5e:e1:9e:d5:ce:3e:
2a:87:96:22:fc:a8:f0:9c:e7:17:c3:e7:f9:2a:25:
d6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CD:60:75:ED:4D:BD:C8:F3:07:8B:F6:97:D7:87:8C:44:64:01:B7
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/2s1gde1NvcjzB4v2l9eHjERkAbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.174.128.0/21
Signature Algorithm: sha256WithRSAEncryption
18:59:2f:31:49:c7:73:33:92:1e:ff:92:28:ea:97:2f:d8:ef:
d9:43:45:aa:5b:29:4c:93:8a:9a:c0:85:d4:f4:79:b6:81:1c:
1b:c2:59:94:3d:88:01:5f:0b:c6:8c:ce:68:20:0b:c4:ea:27:
86:52:12:9d:5f:39:ee:a8:13:7b:45:3c:3a:ef:f8:d9:a2:ef:
0c:9f:03:51:de:bf:8a:14:d1:e6:f2:79:8a:fd:e7:a8:33:9a:
54:84:fe:c6:5e:55:b8:47:d1:fd:f4:f4:a9:17:a4:f2:64:35:
25:bc:ad:33:14:91:1a:4d:bf:cf:df:47:f7:31:18:1a:c4:bf:
fa:c9:a6:69:ab:03:2f:6c:29:c8:fa:fe:49:ea:89:eb:b6:7b:
b2:e6:39:de:68:58:82:18:d1:e3:f6:bb:d9:ac:e7:56:e8:e3:
94:9f:d2:87:a7:bc:a4:ae:a0:a6:51:ac:26:b2:9d:3e:ce:a6:
95:6f:a8:59:91:fd:bf:d3:73:0a:4a:59:e0:0e:34:4e:bc:c7:
79:ff:5a:89:41:07:8d:b3:c4:9b:2b:50:d5:b1:f6:69:6a:c2:
6d:d1:fe:80:bc:b5:d3:cf:c3:ef:a3:d4:b9:6e:b7:45:bb:0b:
ba:e4:b6:13:a2:10:8b:57:cf:88:93:03:a6:6d:29:f2:a3:33:
16:21:8d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:40:49 2024 by rpki-client on console-fra.rpki-client.org