Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/2MAeCz_jXQzzf-GDunct4df8rNk.roa
File: 2MAeCz_jXQzzf-GDunct4df8rNk.roa (raw, json)
Hash identifier: xZgN2VB4k/95iScKJlIkEsDmdbOysGxdo9fT6KXDSYw=
Subject key identifier: D8:C0:1E:0B:3F:E3:5D:0C:F3:7F:E1:83:BA:77:2D:E1:D7:FC:AC:D9
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 018CC7958ABD348B35AD696775D813619BAE
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/2MAeCz_jXQzzf-GDunct4df8rNk.roa
Signing time: Tue 02 Jan 2024 00:31:55 +0000
ROA not before: Tue 02 Jan 2024 00:31:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197968
IP address blocks: 45.135.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:8a:bd:34:8b:35:ad:69:67:75:d8:13:61:9b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 2 00:31:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8c01e0b3fe35d0cf37fe183ba772de1d7fcacd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:b2:5d:db:65:6e:1b:26:e6:43:59:ed:50:
25:8a:39:9a:cb:ea:84:b4:06:f6:79:64:e6:97:c2:
62:ea:c5:69:47:40:3d:0f:ef:84:85:4b:a6:db:c9:
1e:0d:4c:2e:48:f9:b1:41:a8:06:98:1b:04:27:38:
8d:82:b8:38:14:64:12:ad:85:da:ff:83:2c:59:f0:
94:82:df:16:1f:88:ea:e7:c6:8a:ed:47:b7:1b:14:
1c:1a:9f:6b:c4:c9:93:38:46:38:18:ca:62:98:41:
02:52:f4:3c:25:75:e3:d3:e6:ec:ab:c2:b0:3e:4e:
be:5b:2a:e5:42:a8:e9:00:04:26:b2:b5:bd:78:31:
a0:5b:26:b8:ae:1f:49:d9:03:35:d7:4e:a0:87:9b:
d1:46:85:eb:53:28:df:c9:31:42:3f:6b:28:30:c0:
73:28:d6:17:ff:5b:7d:7d:d9:bd:e9:d9:90:10:c9:
88:92:ae:b8:b0:2b:d0:f7:e8:65:4c:71:82:c1:a2:
f6:1d:d6:49:69:bf:10:9d:3f:24:98:21:f1:6d:14:
60:3a:a8:36:5a:c0:b4:97:44:e0:25:95:41:1f:fe:
9d:2e:fd:a7:5a:d9:0c:2d:01:c4:a4:01:c4:db:f4:
fc:be:a2:e7:bb:41:47:c3:65:cc:a7:dc:e5:ad:1d:
6b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C0:1E:0B:3F:E3:5D:0C:F3:7F:E1:83:BA:77:2D:E1:D7:FC:AC:D9
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/2MAeCz_jXQzzf-GDunct4df8rNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e2:8b:fb:67:b0:38:1c:85:1e:01:d6:3e:d0:89:05:7b:fa:
4f:aa:6c:3d:f3:37:5c:93:33:b7:32:26:0f:fa:96:6f:18:9d:
9d:f3:11:4f:e5:f4:c1:0c:ec:2f:2d:12:36:23:2b:09:97:fb:
7e:a2:be:6b:1d:4d:e4:36:78:10:78:8d:a7:21:6d:e4:f7:74:
fd:78:d9:1c:d8:17:3e:91:30:c3:4c:83:c7:a6:7c:75:c2:52:
c2:56:6c:83:25:c1:e6:a9:d5:cd:08:9b:6a:37:97:67:69:f6:
8a:60:86:f6:ee:65:2d:ab:dc:26:00:9f:73:b8:78:0b:d3:29:
98:d6:7f:3d:25:58:98:05:60:00:f3:5b:f9:20:52:ad:50:c3:
75:ac:f6:86:7c:b9:24:1d:01:21:fd:9b:dd:3d:54:99:5d:76:
8f:48:72:0d:9c:3a:af:75:14:7b:79:7f:2c:48:ba:86:c5:84:
70:dd:50:57:59:42:11:d5:fa:9c:52:01:aa:b9:9f:d8:35:3b:
56:8a:98:e9:f4:fc:15:31:f4:39:9c:a7:8a:73:7a:e7:e8:6c:
8b:df:43:05:a3:ce:f9:6a:dd:eb:ce:60:fe:30:ac:85:94:14:
be:c9:cd:5e:45:22:c9:1b:92:b1:be:72:78:44:62:dd:a3:65:
cb:b1:a1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:58:27 2024 by rpki-client on console-ams.rpki-client.org