Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/h2enuMtI_dmNgc2x2Z3TqgBHb1I.roa
File: h2enuMtI_dmNgc2x2Z3TqgBHb1I.roa (raw, json)
Hash identifier: QWIzNuk+JSvwl/zfyNmVOsrmkhVMPzXTsZVwUFQMwuI=
Subject key identifier: 87:67:A7:B8:CB:48:FD:D9:8D:81:CD:B1:D9:9D:D3:AA:00:47:6F:52
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 018CC64A950393980C5F16477596DA9D78F6
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/h2enuMtI_dmNgc2x2Z3TqgBHb1I.roa
Signing time: Mon 01 Jan 2024 18:30:25 +0000
ROA not before: Mon 01 Jan 2024 18:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212391
IP address blocks: 194.0.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:95:03:93:98:0c:5f:16:47:75:96:da:9d:78:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Jan 1 18:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8767a7b8cb48fdd98d81cdb1d99dd3aa00476f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:62:1e:e2:be:73:21:cd:28:d3:a4:0a:6f:
a7:14:d8:d7:fa:75:3f:eb:93:48:51:bc:6b:4a:30:
45:3a:6d:71:87:03:c1:5c:45:ad:6e:d8:d7:51:db:
f0:3e:32:7c:bf:cc:92:4c:92:a0:8e:55:4a:94:01:
21:2b:e1:4b:cc:56:ae:05:91:4c:5f:5a:bb:b0:3a:
70:81:3b:bf:0d:56:a0:82:d2:1d:01:b3:13:4d:b8:
72:e4:37:df:19:f3:b4:3f:90:37:0c:09:0e:69:d4:
9d:2f:5f:20:6e:ce:6a:1d:75:17:d3:97:9c:24:28:
6a:e2:0a:92:27:ba:a9:b4:c2:57:6c:df:39:03:92:
98:f0:23:45:7e:4e:d4:cc:15:f5:9f:83:2e:fa:66:
67:e1:ca:98:bd:a7:50:94:7b:f6:88:12:e6:05:3b:
5b:bb:99:1d:ce:0b:ee:e7:6c:29:ec:b2:ea:f5:8f:
da:29:e6:63:cf:8c:72:02:18:a8:cb:bc:4f:e5:e3:
ff:25:ce:50:a1:1e:a2:b4:72:9d:d3:da:86:b5:16:
34:cb:8b:9c:1f:5e:34:d3:e1:cf:33:4d:5a:77:c5:
f3:ce:0d:10:39:35:69:97:54:4e:5c:fa:e2:8a:68:
b4:0e:7e:ae:97:b3:a9:d8:99:9f:82:c8:aa:c6:9f:
77:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:67:A7:B8:CB:48:FD:D9:8D:81:CD:B1:D9:9D:D3:AA:00:47:6F:52
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/h2enuMtI_dmNgc2x2Z3TqgBHb1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.182.0/24
Signature Algorithm: sha256WithRSAEncryption
68:c6:64:dd:65:e9:a3:62:73:25:8c:18:81:e7:db:17:35:9b:
d7:9e:9c:b0:d3:73:a6:17:ac:f3:0d:9f:46:f1:67:a2:8d:69:
d0:1f:7e:6a:8b:47:88:c6:d3:0e:79:75:5f:8a:d6:28:50:79:
08:94:44:a7:ab:a1:f5:d5:ec:71:4c:2c:44:cd:07:e0:aa:6e:
34:4c:04:aa:a9:1e:7b:bb:50:73:84:28:23:a3:16:39:7d:97:
e7:ff:0a:71:1c:a8:ed:c1:a4:f1:43:4f:bf:8b:56:2f:c7:3f:
e1:f5:55:0e:83:58:20:8e:cc:31:ef:6e:0e:20:2b:7f:95:be:
14:06:6d:28:bc:35:86:4f:47:27:ef:da:81:ac:cc:77:27:99:
dc:c8:01:86:9d:78:7e:43:32:d4:18:31:89:36:6c:35:7f:e3:
34:77:cc:f7:84:52:4e:5e:0a:72:27:d4:65:3c:52:d4:a8:6c:
a9:03:5d:18:c3:9c:9d:44:34:d0:cf:88:73:2d:d8:ba:5d:0a:
d4:64:a1:bb:d3:05:7c:17:8e:d0:f5:73:8b:92:ed:60:fd:1c:
e1:86:bc:b1:d6:e0:6e:a8:45:0e:03:77:42:e4:8e:c4:5f:80:
83:fb:0b:06:36:cd:95:44:d1:d0:dd:a8:58:7e:81:ef:65:ba:
22:5e:79:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:08 2024 by rpki-client on console-ams.rpki-client.org