Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/2BUHJKu9oiYpWufCjKmqrUKhHac.roa
File: 2BUHJKu9oiYpWufCjKmqrUKhHac.roa (raw, json)
Hash identifier: QSmIK+9NA7scuFctg21uF7/fqhghrehEg3EVmlhROGs=
Subject key identifier: D8:15:07:24:AB:BD:A2:26:29:5A:E7:C2:8C:A9:AA:AD:42:A1:1D:A7
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC7276C8E07E71942EAB17D166C3E0CB7
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/2BUHJKu9oiYpWufCjKmqrUKhHac.roa
Signing time: Mon 01 Jan 2024 22:31:38 +0000
ROA not before: Mon 01 Jan 2024 22:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201893
IP address blocks: 94.42.196.0/24 maxlen: 24
94.42.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6c:8e:07:e7:19:42:ea:b1:7d:16:6c:3e:0c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8150724abbda226295ae7c28ca9aaad42a11da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ea:2b:97:ed:ca:f9:ea:b0:ed:aa:bb:cb:dd:
29:f5:7d:17:e4:78:70:c4:12:17:75:9a:95:ec:39:
fe:f7:91:e9:b8:1b:35:b4:97:89:c5:76:80:87:53:
74:70:29:5e:9d:96:df:71:db:61:41:22:93:a6:59:
97:d7:a2:a5:57:2c:69:ba:3f:c9:34:f9:d0:a1:bc:
e8:9b:1d:30:c7:57:e0:54:05:eb:fa:8e:d4:77:db:
2b:a9:c4:a4:8d:05:15:dc:94:72:07:14:69:ba:5f:
07:2f:c3:e0:f1:85:f6:c5:09:60:92:05:ca:7a:d5:
35:65:4c:6b:47:00:7b:73:48:5d:00:c3:b3:ac:8d:
d9:64:c0:a8:83:01:2c:3a:39:22:cd:26:f6:42:a7:
33:61:c9:1c:4b:9f:ea:e4:98:2c:4a:07:14:d2:a8:
0d:be:03:48:58:a5:30:b5:19:22:5e:cc:a3:da:e5:
9c:b4:07:cc:c0:7b:66:ab:07:47:6d:6a:ea:28:bc:
08:45:30:fd:ad:23:01:89:0d:06:29:30:23:bd:f4:
aa:0d:b0:05:89:fa:d0:76:67:d7:b1:25:8d:40:c1:
cb:8c:bb:44:d7:cd:39:af:e7:ab:09:3d:ea:50:25:
6a:3b:d8:d8:fd:94:fb:d6:c8:6a:c3:0f:cc:6b:4e:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:15:07:24:AB:BD:A2:26:29:5A:E7:C2:8C:A9:AA:AD:42:A1:1D:A7
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/2BUHJKu9oiYpWufCjKmqrUKhHac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.42.195.0-94.42.196.255
Signature Algorithm: sha256WithRSAEncryption
14:82:25:fb:72:42:f3:fe:f0:9e:ec:0c:db:a8:02:a4:6e:1b:
0d:07:15:0e:bb:f2:3b:dc:66:cc:a9:ee:e8:6d:40:e9:e7:8c:
25:d3:18:29:01:f3:0c:37:86:9b:3d:cd:77:e9:67:a3:73:56:
e3:ea:da:31:8b:f6:05:8e:d8:66:f4:2d:27:23:0a:63:ad:55:
87:09:d1:5e:63:96:b1:db:85:6f:7d:cb:e3:f0:89:39:03:ee:
98:e5:b1:34:03:f2:1f:56:0e:6f:9a:9e:fa:1e:d9:ac:68:50:
93:dc:55:60:63:5c:ea:5d:fd:95:ac:89:8d:7b:1e:16:cb:ea:
b6:6c:d9:b4:d4:b6:21:79:26:46:21:f2:fe:43:00:c8:3f:d1:
b9:78:50:f0:d4:61:75:b9:59:c6:66:65:3f:65:24:ee:1a:b8:
24:9a:02:6f:84:a0:bd:44:38:14:52:04:76:1f:3f:f8:87:fa:
1d:45:53:1f:46:d0:01:5b:5c:57:f1:9a:3c:c8:48:ae:20:54:
99:c4:5b:c1:22:22:a6:4d:7e:e6:df:1f:fa:21:59:df:4d:cc:
8c:fa:6b:78:02:0a:09:d3:93:d6:07:47:2a:dc:a8:cb:17:1e:
5d:05:5e:28:e6:b3:ee:9b:27:12:07:12:45:e3:aa:ae:56:3d:
2a:46:6c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 14:38:24 2024 by rpki-client on console-ams.rpki-client.org