Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/a2WW0_7N8tPOLevidLaWxdzOVCo.roa
File: a2WW0_7N8tPOLevidLaWxdzOVCo.roa (raw, json)
Hash identifier: s3Yc575DPaM3Q5O//GaVHB1jatiXf1PeLam3YIIiuIg=
Subject key identifier: 6B:65:96:D3:FE:CD:F2:D3:CE:2D:EB:E2:74:B6:96:C5:DC:CE:54:2A
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 018CCA2BE102B6AE7E02D69C87CFF5B3B48E
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/a2WW0_7N8tPOLevidLaWxdzOVCo.roa
Signing time: Tue 02 Jan 2024 12:35:22 +0000
ROA not before: Tue 02 Jan 2024 12:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211415
IP address blocks: 109.107.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:e1:02:b6:ae:7e:02:d6:9c:87:cf:f5:b3:b4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jan 2 12:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b6596d3fecdf2d3ce2debe274b696c5dcce542a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:5b:de:e1:24:c9:4f:c6:f2:2e:95:05:fd:
b0:e9:2f:46:6d:3e:48:10:4c:0e:85:4d:cc:78:e4:
9f:b6:f0:5e:07:28:68:50:fa:a4:68:4f:75:25:ba:
f5:b7:fb:a0:19:b7:cf:49:b2:5a:1a:44:bd:47:3d:
74:a6:3b:6a:7b:32:ae:45:fe:12:ba:00:c2:7a:97:
b2:b3:9d:75:8c:e1:8e:bd:d9:ba:cf:b6:3a:36:d3:
06:64:58:23:90:12:5c:38:35:32:69:c1:bb:e8:21:
88:ce:bf:a6:ce:9b:5f:60:fa:1f:d1:bf:31:e9:32:
f8:21:8f:f2:fe:84:a8:58:ea:14:94:1f:b3:c2:61:
07:97:1d:09:56:62:73:53:c9:81:79:17:c7:6b:cd:
f2:a7:a7:0f:23:11:09:94:89:8e:c3:fa:d0:0c:aa:
91:c8:cc:24:20:dc:13:97:bb:ad:42:ec:8e:e7:91:
ac:ba:59:a9:89:af:49:e6:e0:69:17:0d:ef:03:81:
45:51:4d:6d:f7:e3:3a:64:df:86:23:7f:4a:ae:cc:
49:73:c7:6f:83:97:20:56:f3:d3:82:c9:f8:4b:b2:
cd:3a:fc:68:0c:97:ba:b0:86:23:1a:cd:41:8a:e7:
16:15:63:3b:af:24:db:0b:22:d6:db:b6:c4:49:a1:
31:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:65:96:D3:FE:CD:F2:D3:CE:2D:EB:E2:74:B6:96:C5:DC:CE:54:2A
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/a2WW0_7N8tPOLevidLaWxdzOVCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:2b:9b:b9:bb:1b:55:b1:b4:ec:af:16:ec:0a:d2:ca:54:cd:
c7:8e:b2:af:01:6a:a8:9e:f6:b3:a2:25:65:e3:f4:c3:d0:07:
16:dd:11:91:c1:5b:9c:f6:cd:a8:95:57:bd:0e:ad:da:42:47:
f6:4a:56:c2:a8:33:af:f7:bc:0d:60:50:4c:d0:47:be:b3:e0:
df:e8:0c:3c:a4:8e:b0:3c:b2:57:5a:39:c8:13:f8:c8:4c:9a:
d0:22:ab:4c:80:91:70:01:08:ff:c4:43:41:49:76:ac:1b:96:
86:50:50:a4:54:a1:eb:e8:4a:03:65:08:b1:63:ce:1d:31:3f:
2c:90:11:d8:24:b3:6f:0b:14:a6:7f:37:1e:28:84:53:fd:9f:
92:ef:e3:7d:62:dc:3f:85:c9:1f:a6:e8:d8:4c:04:75:33:43:
2a:86:ac:d5:59:bb:cf:08:c6:95:86:13:64:da:f6:83:00:3f:
36:59:ef:09:db:15:a2:55:c1:4f:ba:ec:38:9f:50:46:03:ce:
1b:66:86:ab:9a:5e:31:05:aa:18:5f:78:92:8d:a0:7f:e2:6e:
38:c5:cf:fa:35:60:dd:eb:0c:c3:54:f3:86:b9:96:d1:b8:b2:
3a:77:24:0e:be:07:18:44:98:43:e1:a3:13:fd:d9:b4:9c:98:
a1:5a:26:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:59:00 2024 by rpki-client on console-fra.rpki-client.org