Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/2PkCH5LDAGvSFM5JmqT8cGDDnt0.roa
File: 2PkCH5LDAGvSFM5JmqT8cGDDnt0.roa (raw, json)
Hash identifier: TQ+rWya7yfNMax7aWUdrZcTWha+boxOc/n1lAOiBHco=
Subject key identifier: D8:F9:02:1F:92:C3:00:6B:D2:14:CE:49:9A:A4:FC:70:60:C3:9E:DD
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018CC348FC08ED7F9DE40B559763C2C29705
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/2PkCH5LDAGvSFM5JmqT8cGDDnt0.roa
Signing time: Mon 01 Jan 2024 04:29:49 +0000
ROA not before: Mon 01 Jan 2024 04:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201374
IP address blocks: 195.251.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:fc:08:ed:7f:9d:e4:0b:55:97:63:c2:c2:97:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8f9021f92c3006bd214ce499aa4fc7060c39edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:28:ca:d3:b2:b0:d1:da:70:0d:d5:05:5c:
db:7c:20:4a:9c:2f:2a:84:9d:50:ed:e8:e4:c9:59:
ae:0c:82:fe:d0:0d:5f:b8:3f:f9:ec:55:a5:3c:fe:
5f:7d:c7:b7:2a:ea:bf:19:8b:b7:60:e3:85:3d:23:
90:b8:a5:ca:b8:d2:23:23:86:98:16:7f:0c:d3:d4:
e5:c2:fe:b3:ef:d8:c0:78:0e:cc:82:ac:8c:4f:9e:
85:37:73:bd:6a:41:1e:74:49:1a:e6:5e:00:95:c8:
1d:99:9a:73:d5:7d:0f:30:f8:d6:9d:08:cf:90:57:
b1:77:73:13:d1:aa:82:63:36:70:90:4e:3e:f3:90:
c3:b3:67:e3:c8:e6:e1:33:11:03:2e:24:4d:67:40:
50:ed:a8:72:de:b9:c2:e3:02:d1:45:bf:71:92:9d:
d1:1b:f7:bc:0d:39:e7:4c:2e:c0:e7:97:4e:f9:a3:
e3:c5:61:00:13:a9:2a:d5:91:3a:bd:2d:f2:99:5d:
65:7f:a3:f2:da:80:bd:d5:a9:d4:e8:1f:0d:1b:f6:
62:0d:79:e8:76:bc:b4:00:5c:de:27:3c:db:4f:bc:
35:4f:b4:7a:26:12:9d:08:cc:7b:c4:18:3c:2c:8f:
01:86:c8:39:b3:59:0e:5d:ab:72:21:30:24:4e:d0:
ca:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F9:02:1F:92:C3:00:6B:D2:14:CE:49:9A:A4:FC:70:60:C3:9E:DD
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/2PkCH5LDAGvSFM5JmqT8cGDDnt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.251.32.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:26:83:42:18:0b:75:17:b3:97:d9:85:9c:8d:60:55:84:ac:
4a:f6:68:ac:f8:8a:11:99:35:df:61:68:c3:05:8b:d8:6b:7a:
e6:ed:be:7a:60:82:a6:f2:2e:ed:f6:b5:7e:45:a8:59:e2:4b:
e6:fc:80:43:9a:2c:1c:06:64:f7:e5:2c:0c:8c:de:bf:a2:ba:
f7:13:47:eb:fb:7a:c7:7a:f1:76:9d:5e:14:28:34:00:df:53:
03:85:69:a1:31:c1:5b:48:16:9e:5f:98:98:92:f6:eb:10:16:
6e:bd:75:1f:35:d0:1e:d2:99:f7:da:a5:78:ec:b1:10:d7:18:
36:c2:84:c0:e2:ce:8a:23:e1:7f:fc:4b:57:d6:75:18:75:64:
d4:58:b1:72:b9:54:cc:e9:a1:87:ec:03:d5:07:4c:32:2a:69:
30:5e:db:88:01:95:23:d5:fd:0a:d3:38:3a:c6:a6:ad:8e:11:
f1:51:5e:92:12:c0:3f:78:c7:20:96:bb:61:63:9a:4e:94:f4:
d1:3e:cb:5f:fe:d0:ea:00:ed:9a:34:7a:19:2e:7b:a7:6d:8d:
12:13:28:97:2c:26:29:ab:09:f2:ef:09:7f:d4:17:90:a9:2f:
9f:88:3e:a3:c6:69:36:37:c6:9a:88:bb:4f:27:87:53:9b:a6:
08:fd:c9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 11:33:26 2024 by rpki-client on console-fra.rpki-client.org