Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/2XdbMIp8-ictvk-8ErMDKnjS5aA.roa
File: 2XdbMIp8-ictvk-8ErMDKnjS5aA.roa (raw, json)
Hash identifier: 9itF+wGS/Gv7Kax/CB4oFtKUAlJl0c+GTcHfvt7DgAo=
Subject key identifier: D9:77:5B:30:8A:7C:FA:27:2D:BE:4F:BC:12:B3:03:2A:78:D2:E5:A0
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 018CC5008FB45F5DE4A60B85851F53BA3A81
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/2XdbMIp8-ictvk-8ErMDKnjS5aA.roa
Signing time: Mon 01 Jan 2024 12:29:57 +0000
ROA not before: Mon 01 Jan 2024 12:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197497
IP address blocks: 83.139.46.0/24 maxlen: 24
83.139.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:8f:b4:5f:5d:e4:a6:0b:85:85:1f:53:ba:3a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 1 12:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9775b308a7cfa272dbe4fbc12b3032a78d2e5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:67:0a:9e:93:fa:f3:b1:c2:99:56:e6:62:
34:f1:47:1a:52:be:71:a7:96:00:5d:78:1e:41:2a:
45:72:58:d4:fe:7a:ba:25:98:68:b9:76:09:38:9e:
5d:d9:31:a0:f6:cd:a2:e8:16:be:b8:4d:a0:ac:cb:
96:75:e5:3d:ff:11:93:00:3b:fc:67:14:85:09:97:
15:73:ff:10:26:03:80:94:da:49:a0:2d:c5:11:17:
31:c7:92:56:fa:ed:f5:9d:99:e8:47:bb:5b:04:46:
fc:9a:21:d3:ce:55:a2:36:b4:71:6b:7c:87:27:1f:
57:5f:30:2c:5d:ef:13:8d:d2:f4:c9:c7:be:d2:dd:
d0:8c:dc:a7:d5:34:69:34:f2:c5:c0:0c:6e:49:be:
8a:ad:d3:63:f0:9c:55:c4:da:e6:66:74:94:09:b4:
ec:0b:01:de:a0:22:60:18:70:4b:ea:e1:a0:1b:be:
37:09:d8:8a:57:eb:b6:21:87:4f:e4:26:65:b4:c8:
b9:8b:ae:77:89:bf:ca:3b:83:a5:69:70:ef:07:c8:
53:98:a5:05:d2:7d:5e:d4:23:bd:39:6b:cd:5f:82:
96:c4:6a:25:f3:07:fa:61:c9:07:40:0f:5b:bc:3d:
8c:cf:10:12:66:c2:65:e3:cc:b4:36:de:93:10:18:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:77:5B:30:8A:7C:FA:27:2D:BE:4F:BC:12:B3:03:2A:78:D2:E5:A0
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/2XdbMIp8-ictvk-8ErMDKnjS5aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.46.0/23
Signature Algorithm: sha256WithRSAEncryption
22:83:44:16:cb:33:d4:f7:10:2b:60:9e:1b:f1:12:b7:30:5d:
9a:b2:7a:65:df:98:22:c3:0b:b2:21:e0:43:60:ad:df:b6:df:
94:6b:b5:10:46:30:f3:39:37:16:13:b8:7f:85:99:2b:52:10:
32:7c:3c:0d:bb:91:f5:8f:ce:ce:9f:42:da:96:bf:4a:2e:c3:
48:df:de:3a:90:67:f7:e7:ae:84:9e:d5:f4:6d:a9:92:a4:b0:
2e:5c:de:23:d1:10:ee:da:d2:f1:8d:4b:ee:34:89:7f:9e:b2:
6f:0a:95:44:e2:3a:81:c6:0d:fa:50:b2:db:d0:5a:ec:d8:07:
8a:31:5f:4f:de:9a:8d:92:64:e6:cd:16:2f:a2:a3:b0:5b:4d:
84:5e:bb:57:f5:eb:68:50:e3:d4:de:69:3d:9d:f0:4c:53:28:
28:80:24:d5:63:84:5d:32:32:a2:d6:d2:bd:a3:8f:db:e7:2b:
1e:ee:3b:4a:0f:4a:79:22:7e:99:82:1c:99:51:f2:44:8f:73:
56:e9:83:67:cf:ef:19:d6:ed:14:32:af:10:69:15:99:e3:d8:
00:cc:92:91:80:36:43:cc:d0:73:5c:e2:c7:34:51:c1:b9:20:
7d:d1:3d:94:7b:62:7c:19:dc:6f:e9:82:b1:a9:16:8f:51:f7:
e5:13:b6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:35 2024 by rpki-client on console-fra.rpki-client.org