Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2PXDps5ra3lI9rfq2IpbCuDvMMM.roa
File: 2PXDps5ra3lI9rfq2IpbCuDvMMM.roa (raw, json)
Hash identifier: /rBz/o4BCy48oH9J/t/3w+zBu6b9XNoxSAHrknIUoyM=
Subject key identifier: D8:F5:C3:A6:CE:6B:6B:79:48:F6:B7:EA:D8:8A:5B:0A:E0:EF:30:C3
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018E5FC31A49B7D0C9742DF96B17B7336770
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2PXDps5ra3lI9rfq2IpbCuDvMMM.roa
Signing time: Thu 21 Mar 2024 06:46:45 +0000
ROA not before: Thu 21 Mar 2024 06:46:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8342
IP address blocks: 213.24.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5f:c3:1a:49:b7:d0:c9:74:2d:f9:6b:17:b7:33:67:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Mar 21 06:46:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8f5c3a6ce6b6b7948f6b7ead88a5b0ae0ef30c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:af:c6:db:27:b7:2d:c0:85:93:8a:19:5e:
74:b7:b8:8d:3a:26:e4:8b:ed:2e:bf:36:bf:d4:02:
a0:ca:8e:ab:12:a6:96:f2:dc:33:e4:78:46:a4:2f:
13:dd:22:da:ce:6b:89:d8:b8:0c:21:30:09:c6:9a:
75:4b:c9:b0:46:16:ee:57:39:86:68:26:0c:32:ed:
5f:c0:ab:bf:66:23:43:79:15:1d:d2:ee:1e:50:06:
87:17:08:3e:19:72:4d:9f:8f:12:35:47:5a:0d:b5:
36:61:e3:7d:c7:f1:57:6a:96:08:65:ff:b4:70:db:
2d:12:7b:26:55:93:14:09:84:3c:22:88:a4:55:53:
b4:d6:37:4c:0b:91:09:56:d8:d0:fd:60:34:45:47:
07:f0:89:80:aa:dd:6e:72:57:d0:fa:40:4b:56:88:
08:dd:6a:c4:ed:81:22:80:62:e8:80:a0:b3:aa:02:
96:50:68:65:05:42:62:4a:29:03:bc:13:fb:a1:38:
47:fa:64:10:0a:ab:49:08:e1:2b:ca:37:90:02:41:
bb:74:aa:d7:59:37:22:13:76:11:1d:8a:d1:b9:06:
c0:a5:82:4c:7d:5c:4b:42:28:e4:9e:eb:70:09:65:
fd:2d:cb:cd:12:8c:bb:f7:8d:ff:96:27:57:d8:57:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F5:C3:A6:CE:6B:6B:79:48:F6:B7:EA:D8:8A:5B:0A:E0:EF:30:C3
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2PXDps5ra3lI9rfq2IpbCuDvMMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.24.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:4b:08:ec:28:8a:41:2b:0d:af:d7:c3:b8:78:04:95:2d:ef:
03:83:fa:cc:f1:2f:c5:26:e9:18:67:18:00:70:3f:d8:9c:14:
c5:c4:6b:a1:8b:99:37:05:b5:44:90:e7:6d:e6:c3:b2:ca:3d:
e4:a3:07:41:44:7e:49:19:96:92:49:e8:d8:a9:d0:ac:2b:86:
66:45:67:c5:5d:10:8b:78:71:25:dc:d0:b5:49:cf:09:6f:40:
f9:66:6f:fe:80:5e:be:11:55:42:ba:0d:e1:00:16:33:38:b8:
44:6d:0f:13:ef:07:9e:d5:03:0b:25:8f:3b:1e:f8:e2:29:5a:
c8:63:9c:7a:7f:05:6b:ae:b7:80:61:58:40:dc:48:c7:88:e2:
65:24:80:47:bd:bd:a3:c4:3a:52:f0:5d:79:5c:6b:39:e6:b0:
89:97:4f:eb:ad:1b:8a:5a:93:fd:60:76:35:73:38:60:bf:7f:
47:2e:39:9f:2b:96:cd:b1:a6:e2:ee:4a:28:03:70:97:59:f5:
02:27:d6:01:01:b9:a4:63:f6:3e:45:db:99:d1:da:19:9d:8d:
a6:35:dc:f3:2d:67:04:01:01:77:88:53:ec:11:74:29:f1:8a:
ee:41:c3:dc:fd:b6:dc:ab:65:b2:dd:19:84:75:83:81:88:fd:
43:14:33:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:35:29 2024 by rpki-client on console-ams.rpki-client.org