Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/2jU5tX0MmGcLaNRntJSk1GN-kY4.roa
File: 2jU5tX0MmGcLaNRntJSk1GN-kY4.roa (raw, json)
Hash identifier: ysMRy3ouJMBOpE6F97eM8L+K2Os/Xz+PA4dXklGkvQA=
Subject key identifier: DA:35:39:B5:7D:0C:98:67:0B:68:D4:67:B4:94:A4:D4:63:7E:91:8E
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 018CC801FCE13570536D56374F22CD12A3D5
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/2jU5tX0MmGcLaNRntJSk1GN-kY4.roa
Signing time: Tue 02 Jan 2024 02:30:22 +0000
ROA not before: Tue 02 Jan 2024 02:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29122
IP address blocks: 82.101.64.0/18 maxlen: 18
217.30.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:fc:e1:35:70:53:6d:56:37:4f:22:cd:12:a3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Jan 2 02:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da3539b57d0c98670b68d467b494a4d4637e918e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:45:b7:1c:8c:a7:66:41:f7:88:86:c2:15:
bf:fc:c0:d3:07:ce:57:7a:ab:af:1a:95:2c:9b:fd:
ec:78:5a:17:2b:b2:e1:47:29:7a:0e:d3:79:4f:18:
d8:a8:e8:cc:b0:e6:be:93:05:9b:fe:0f:47:af:ec:
ed:f2:76:27:31:ea:06:1f:20:5a:05:2d:e5:59:1f:
aa:35:a1:4f:75:4b:74:f8:52:26:df:53:f3:9a:1b:
75:98:af:e8:b8:52:ba:c5:f1:f0:80:96:4b:5c:75:
59:49:fd:d6:f7:98:7f:35:63:75:ce:8a:fc:21:de:
1b:d0:d5:ba:06:a1:39:2d:02:d3:08:1f:d3:58:b4:
b0:ce:08:67:80:22:a0:50:b2:59:3e:a7:40:ff:24:
50:2a:dd:5d:f1:14:96:dd:5e:24:cf:75:31:84:30:
42:3b:f1:d7:62:72:9c:4f:71:8f:71:53:ce:d7:ec:
ac:3b:fe:31:60:dd:6c:16:ec:66:a0:42:76:bc:f0:
09:fa:45:99:cb:04:c3:c5:1c:bb:7f:06:eb:7d:56:
ff:8b:42:42:18:a8:34:63:78:25:ed:b3:13:3f:77:
80:6e:98:97:44:ce:1f:01:73:e1:a0:71:4d:b0:3f:
75:3a:54:4f:f8:fc:52:b0:fb:72:e6:15:df:5a:08:
1e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:35:39:B5:7D:0C:98:67:0B:68:D4:67:B4:94:A4:D4:63:7E:91:8E
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/2jU5tX0MmGcLaNRntJSk1GN-kY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.101.64.0/18
217.30.208.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:ab:aa:6a:6b:84:a8:57:0d:f7:16:ac:62:35:63:3a:0c:cc:
1a:20:f2:ad:52:e0:bb:12:6b:f6:e7:82:80:65:f2:74:57:3a:
58:4f:78:dd:15:b9:b5:46:6e:ed:7f:ae:6f:f0:ff:4d:63:ae:
e7:aa:f7:4f:5a:b0:6a:31:6a:f1:6a:2b:dc:cb:34:37:2e:68:
73:f7:b5:40:5f:49:79:52:6a:d8:38:77:9c:6f:1a:34:e7:dc:
9d:46:91:dc:ba:f9:7d:25:98:f7:7d:fb:2e:14:2c:58:40:d3:
18:d1:25:21:8b:63:6e:51:40:99:19:51:43:c2:eb:d7:c6:24:
40:1d:b8:7f:f4:93:3f:a7:ab:af:a2:65:5f:fb:32:3a:cf:8e:
6b:3f:33:92:f3:14:00:14:cf:ef:52:da:63:8b:30:c2:de:f7:
6e:d0:e8:b6:57:53:1d:3a:3d:d6:f2:9f:67:91:6e:92:2c:c2:
9b:a4:58:56:dc:7a:a0:02:9c:5c:c1:53:0e:9c:3e:8f:14:ed:
e2:60:a2:ca:6d:74:2e:7e:78:7e:20:7e:9d:a7:45:c1:7a:c1:
3d:da:7c:8e:62:f5:83:3d:83:da:d4:3c:e5:4f:5d:ab:63:31:
80:bd:39:82:f0:e2:85:9e:c3:d4:b7:29:50:fd:e8:f8:3a:6a:
79:99:85:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 03:00:58 2024 by rpki-client on console-ams.rpki-client.org