Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/2KOQHR1FouB_AyRbe0iu2p9HnSg.roa
File: 2KOQHR1FouB_AyRbe0iu2p9HnSg.roa (raw, json)
Hash identifier: dJxjPiBUbMzCr1hc6/GlK6JLn9qB7fKtmd7xOqciYIY=
Subject key identifier: D8:A3:90:1D:1D:45:A2:E0:7F:03:24:5B:7B:48:AE:DA:9F:47:9D:28
Certificate issuer: /CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Certificate serial: 018CC86F564F7A8DF5C53DA19818F08F8C9A
Authority key identifier: A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/2KOQHR1FouB_AyRbe0iu2p9HnSg.roa
Signing time: Tue 02 Jan 2024 04:29:48 +0000
ROA not before: Tue 02 Jan 2024 04:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31086
IP address blocks: 193.17.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:56:4f:7a:8d:f5:c5:3d:a1:98:18:f0:8f:8c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Validity
Not Before: Jan 2 04:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8a3901d1d45a2e07f03245b7b48aeda9f479d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:a6:bb:5a:19:06:63:51:da:0a:74:58:c9:
7f:0f:74:ca:d2:be:ed:48:ba:0a:7d:65:68:5b:2c:
74:54:88:cf:24:97:c6:da:01:a7:e7:a8:8b:c9:f5:
8f:6f:0b:93:a5:d7:4c:3e:3a:33:0a:53:67:3d:55:
5b:47:cc:87:bf:b0:d4:7f:c3:00:b6:ac:35:94:ce:
d1:19:59:4d:58:f0:83:75:ab:58:bc:1e:a8:ac:78:
64:a3:2b:1a:71:55:6a:a6:95:4e:b0:80:06:32:bc:
0d:cf:83:28:8f:0d:a2:86:04:38:53:74:a2:01:18:
0a:f7:ac:80:4f:69:6e:93:61:64:31:36:77:2a:86:
09:d9:92:ca:29:5c:e6:b5:ec:f1:e5:77:ac:9d:3c:
f8:40:4c:fd:f5:1b:cd:f7:43:9c:f2:ce:ff:53:65:
42:84:1a:a6:78:e3:35:fb:a7:b8:31:01:d2:16:06:
eb:51:c9:90:b6:fe:f5:01:3d:98:06:25:e4:93:33:
37:c6:b2:97:5d:d9:41:32:05:82:50:fd:32:6e:b4:
10:ad:9f:0f:25:20:8a:52:90:93:29:46:9c:56:47:
b3:0e:cc:f1:28:94:bb:b6:96:ba:a7:01:88:c1:df:
b1:0d:5e:7b:30:aa:1d:ea:5b:93:cd:c1:5d:ff:c4:
e2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A3:90:1D:1D:45:A2:E0:7F:03:24:5B:7B:48:AE:DA:9F:47:9D:28
X509v3 Authority Key Identifier:
keyid:A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/2KOQHR1FouB_AyRbe0iu2p9HnSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.45.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:fb:84:9b:0c:70:ba:c9:a3:ab:02:ae:c1:3d:3b:99:0d:47:
04:d4:02:b6:02:54:b4:1d:59:77:14:23:f4:6a:0c:ca:55:26:
08:cc:c5:b0:e8:e8:55:f9:5b:9b:02:b0:2d:1b:c0:ab:56:61:
b7:30:e3:2b:45:bf:ca:51:bc:78:af:f3:04:27:ff:82:cc:2b:
4f:4a:5b:4e:b2:69:32:86:7c:1e:55:c4:fc:57:12:dd:bf:d4:
b2:ed:69:46:5c:52:c0:4b:e9:1c:86:dc:4f:3e:60:ad:43:cd:
a6:74:bf:6a:05:29:3d:ed:0c:68:e5:a6:3e:64:e0:24:0f:7c:
b6:ea:f4:ea:37:34:be:fe:00:08:b2:e8:1c:be:9b:2d:82:8e:
99:40:56:6a:01:62:75:3b:95:e5:d0:18:49:30:82:71:b6:d9:
f0:c8:ac:30:14:3e:88:38:a9:cc:29:f4:29:c5:4a:32:fb:e7:
11:6f:4b:4b:3f:d4:6c:f1:da:ee:43:c2:3e:b8:5c:ea:2a:5f:
10:7f:38:9a:9e:74:49:d9:4c:bf:44:23:1a:e4:a1:79:2d:1d:
18:16:a8:c9:b5:43:81:80:40:21:55:00:08:52:0b:3c:b1:3b:
ef:52:e1:eb:ce:ca:71:14:35:86:f0:7a:ac:6e:6d:f1:1d:7b:
cb:34:ec:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:19:20 2024 by rpki-client on console-ams.rpki-client.org