Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/2HR3NhP7TzDjTdf66gAMV3f7iMU.roa
File: 2HR3NhP7TzDjTdf66gAMV3f7iMU.roa (raw, json)
Hash identifier: U/4Zbn2CmHKDL8AXlfHPN3TmHA9OEY6dFCNKJpOxi4U=
Subject key identifier: D8:74:77:36:13:FB:4F:30:E3:4D:D7:FA:EA:00:0C:57:77:FB:88:C5
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 018CCA29B548172396DF2663341ED7B1667E
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/2HR3NhP7TzDjTdf66gAMV3f7iMU.roa
Signing time: Tue 02 Jan 2024 12:33:00 +0000
ROA not before: Tue 02 Jan 2024 12:33:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199402
IP address blocks: 46.28.235.0/24 maxlen: 24
185.123.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:b5:48:17:23:96:df:26:63:34:1e:d7:b1:66:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Jan 2 12:33:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d874773613fb4f30e34dd7faea000c5777fb88c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f2:6d:80:9a:49:e7:d3:84:f1:f2:8b:36:af:
71:1f:39:50:c6:6b:c4:f7:0c:23:4f:5d:03:2f:04:
2c:85:ac:d5:31:04:9e:5f:88:97:11:cd:65:1e:78:
ad:43:81:66:e0:ae:5e:42:fe:3e:0f:23:7a:31:1d:
c1:e9:81:3b:7c:72:d0:f7:82:29:b8:ae:0f:a7:97:
48:64:02:7d:85:56:0d:dc:1a:06:b2:fa:45:69:aa:
95:83:c1:7c:e0:d9:b6:92:04:0a:8d:42:73:80:c0:
cb:1b:d6:a0:ca:ef:e0:03:77:aa:66:a0:8d:85:14:
e1:ce:b2:1d:d1:c3:d8:88:e9:f4:c7:a5:9f:67:0d:
c2:0c:cc:18:9d:36:06:0f:40:49:cb:41:ad:6e:0e:
c9:3f:2c:18:94:02:90:9d:fb:f5:6d:85:ad:69:b9:
c1:95:ce:3c:ce:1f:87:3f:f4:31:36:f4:56:3d:d4:
94:04:fe:b3:48:c0:86:e7:06:db:09:f7:f6:10:7e:
b5:02:89:9f:71:48:c2:86:b5:a4:2c:27:fd:12:10:
62:ca:aa:f4:00:c8:d6:d9:e0:79:41:08:60:c9:1f:
2d:ed:32:2f:bf:3d:9c:5f:6f:cc:cf:01:39:9a:1b:
c8:dd:6f:92:25:50:35:54:2e:a9:c3:82:99:9d:b0:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:74:77:36:13:FB:4F:30:E3:4D:D7:FA:EA:00:0C:57:77:FB:88:C5
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/2HR3NhP7TzDjTdf66gAMV3f7iMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.235.0/24
185.123.103.0/24
Signature Algorithm: sha256WithRSAEncryption
28:23:01:d8:23:87:df:d8:5a:c3:94:c8:16:fa:3e:4f:e1:d6:
aa:01:2e:81:db:9e:e9:a1:b8:55:66:1c:1e:28:41:d7:72:67:
d4:30:52:c9:76:7a:33:1e:ee:7a:5f:b0:e3:02:60:0f:e8:05:
e9:e1:0f:27:0f:93:62:0e:eb:1e:3b:02:8c:28:16:c3:0d:d8:
53:be:7f:79:13:c7:cf:08:35:d3:3a:16:d9:9a:28:30:46:d2:
17:14:33:f2:72:b6:f2:b8:06:2e:1d:f5:2c:20:c0:cc:e8:61:
83:b9:66:0b:69:df:20:5d:de:53:3e:50:0f:eb:76:6a:b4:54:
da:2d:f5:14:17:0f:af:b7:10:d4:06:c6:f9:9b:3d:16:ea:c4:
c8:7f:53:2f:24:26:d2:48:ab:85:f3:d2:d7:b0:14:5d:45:c4:
f6:d5:03:7c:09:11:3b:48:1d:dd:17:b3:fb:56:8b:d0:e3:9f:
9c:ea:45:a3:ce:69:5c:a6:4b:98:a1:a4:46:cf:6a:7e:4c:2c:
1f:59:cb:0d:ca:c8:08:f5:34:24:3a:92:04:54:7a:f3:e6:9b:
b4:a5:36:16:7c:7d:4e:c4:4f:fe:f5:7f:b7:74:e5:b7:0e:17:
e2:e3:c0:e7:3a:10:23:a5:25:34:b6:ae:0a:e4:19:f6:fb:65:
d2:fa:8d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:17:27 2024 by rpki-client on console-fra.rpki-client.org