Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/K2y-kRLY5GEuKtDdUL8MSb9bcEE.roa
File: K2y-kRLY5GEuKtDdUL8MSb9bcEE.roa (raw, json)
Hash identifier: 0GV82oNiMJWnGJvX9Iir6QWcyUperkwEB9WvqySi+DM=
Subject key identifier: 2B:6C:BE:91:12:D8:E4:61:2E:2A:D0:DD:50:BF:0C:49:BF:5B:70:41
Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial: 018FA620E7E2A6227AE831A108279D58857C
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/K2y-kRLY5GEuKtDdUL8MSb9bcEE.roa
Signing time: Thu 23 May 2024 15:45:25 +0000
ROA not before: Thu 23 May 2024 15:45:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150770
IP address blocks: 185.238.212.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a6:20:e7:e2:a6:22:7a:e8:31:a1:08:27:9d:58:85:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Validity
Not Before: May 23 15:45:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b6cbe9112d8e4612e2ad0dd50bf0c49bf5b7041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:cb:5e:38:79:f1:7b:e8:1f:e6:1f:f0:cd:
f3:72:87:fa:64:70:0a:45:aa:ec:04:c2:02:22:36:
18:14:18:1a:7d:f0:6b:73:f1:fb:f2:87:1c:d2:53:
ef:b0:b8:7d:5d:96:ad:01:5e:3b:d6:aa:3a:8d:e8:
09:ae:77:e9:69:e0:ec:a9:f3:1e:ea:31:14:ce:b3:
0a:d9:0f:68:a4:69:07:a0:44:89:6d:84:ea:9c:7c:
18:b6:d4:4b:e7:a5:38:66:d0:9e:a0:1c:40:3f:c5:
0a:04:96:4a:08:69:38:88:d1:a7:4f:08:dc:24:35:
0e:46:88:d1:85:9f:f7:05:39:68:12:6d:22:84:07:
51:74:1b:44:f5:2e:fe:64:b9:d5:ce:78:d1:39:8c:
23:00:70:09:e5:cf:f1:0e:28:34:45:be:61:0a:f2:
dd:a5:06:73:96:97:84:ac:d0:31:de:38:3f:1b:fc:
ed:4c:ec:2b:77:e4:5d:39:be:9d:11:f1:7a:20:b8:
c9:f4:4f:fc:6c:e5:41:25:b1:ac:6b:61:16:4a:07:
ad:aa:5b:63:f1:fd:99:b1:86:6f:6a:a0:88:7b:8e:
38:ed:1c:bc:5b:91:85:ba:33:e3:3c:df:97:94:35:
30:a3:8f:98:cd:1f:36:f5:2e:fa:49:34:d8:b8:55:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6C:BE:91:12:D8:E4:61:2E:2A:D0:DD:50:BF:0C:49:BF:5B:70:41
X509v3 Authority Key Identifier:
keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/K2y-kRLY5GEuKtDdUL8MSb9bcEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.212.0/23
Signature Algorithm: sha256WithRSAEncryption
71:6b:e7:54:99:6d:bb:24:88:fd:b3:15:84:a7:4c:6e:21:dd:
be:65:b7:c3:4e:7d:53:52:cd:65:39:c0:17:f9:14:31:95:86:
79:9f:71:8a:14:19:4a:ec:af:e1:12:8b:10:89:7e:89:1f:62:
61:50:4d:3a:2f:88:61:26:bb:43:2c:ec:48:06:58:bf:2e:61:
ff:04:38:f8:68:9c:3c:63:e9:7d:6f:5c:c1:11:9e:82:ba:10:
8b:3f:99:4d:4e:6e:36:8d:06:dd:d1:5e:c6:16:24:7d:e9:12:
54:d7:8f:cc:d3:a3:3f:d9:49:7c:c3:fe:c3:89:16:60:b7:4e:
df:bc:5b:40:14:6f:8f:cc:f2:9d:fb:6c:9c:ea:87:49:15:d2:
f6:c9:28:26:da:26:f0:45:fc:e5:de:ed:19:f9:30:52:23:06:
8b:c1:05:4a:ef:c3:86:cf:a4:e2:5c:d2:6a:f1:82:87:4a:10:
c8:4f:78:a6:3c:d2:3c:26:13:99:ac:65:a1:70:1f:d4:92:2f:
16:e5:28:84:55:16:c7:95:3c:18:4c:4e:83:df:8c:05:04:44:
ce:f0:23:1c:67:7a:38:45:f4:ea:38:68:42:ea:0e:21:5b:38:
14:fa:a3:4f:bc:2f:16:db:83:47:66:f5:92:e6:39:62:89:7c:
8e:23:e1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:23:22 2024 by rpki-client on console-ams.rpki-client.org