Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/KNXHUtfBr2WNUIlcSIE1exE6bXs.roa
File: KNXHUtfBr2WNUIlcSIE1exE6bXs.roa (raw, json)
Hash identifier: ezIFPjZdzJQvNC7iqy3NBZLChvVi5hCDNBwqlePub0w=
Subject key identifier: 28:D5:C7:52:D7:C1:AF:65:8D:50:89:5C:48:81:35:7B:11:3A:6D:7B
Certificate issuer: /CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Certificate serial: 018CC2DB1B9EB1D3585BA642B1D3887CD1F9
Authority key identifier: 5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/KNXHUtfBr2WNUIlcSIE1exE6bXs.roa
Signing time: Mon 01 Jan 2024 02:29:48 +0000
ROA not before: Mon 01 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57375
IP address blocks: 185.232.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:1b:9e:b1:d3:58:5b:a6:42:b1:d3:88:7c:d1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Validity
Not Before: Jan 1 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28d5c752d7c1af658d50895c4881357b113a6d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:bf:c4:44:6b:d5:70:84:97:dc:45:d4:f9:
30:08:54:a2:27:3a:da:d0:7c:fd:27:dd:e0:85:38:
3f:de:87:f3:ed:42:b7:90:d7:0d:7e:9e:42:d8:3d:
a2:6a:ef:6e:f0:e7:18:1c:fe:4e:d5:be:ed:96:4e:
ce:b0:d0:41:07:20:aa:4c:2b:0c:4a:41:e2:5d:1f:
67:95:e1:a9:be:d1:7c:81:b5:d8:fb:25:dd:39:72:
3b:bf:13:4b:39:17:55:da:ae:c7:8e:7b:3a:b8:64:
6d:c7:b7:25:d4:6c:04:91:72:f1:91:74:e1:f3:30:
9b:1d:e4:5f:21:79:d5:4d:f9:dd:93:cf:36:d7:3b:
66:31:f2:a7:de:f4:fe:b0:cd:83:c7:e6:ab:25:91:
3f:7f:76:9d:a2:68:fb:4b:3d:1c:2a:4c:0e:3c:6d:
5d:0b:53:ce:48:33:98:ee:1d:0e:b6:21:dd:48:59:
b2:bf:b7:14:9b:74:ae:86:4d:35:3c:95:28:72:48:
90:49:e6:3f:2d:4d:36:18:a0:f4:76:c8:7e:d7:30:
78:23:e2:b1:db:5a:26:21:dc:0b:f5:9e:f0:d0:20:
04:73:7f:5c:ee:0f:5d:9c:98:17:99:a2:9c:a0:da:
db:48:eb:e7:22:7a:1d:88:a1:b7:c8:ea:af:07:d4:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D5:C7:52:D7:C1:AF:65:8D:50:89:5C:48:81:35:7B:11:3A:6D:7B
X509v3 Authority Key Identifier:
keyid:5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/KNXHUtfBr2WNUIlcSIE1exE6bXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.233.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b2:26:c7:e7:e3:80:e4:50:ff:7a:99:35:31:b8:ce:d2:ec:
49:ae:a1:c3:22:1e:e0:6e:33:16:e5:ec:c8:53:c3:0e:10:b1:
55:6e:2c:ea:f5:11:a8:ea:9b:71:4b:37:ad:80:d8:05:9b:e1:
1a:05:ac:a1:00:28:14:62:66:57:f2:dd:97:93:c4:11:10:ff:
90:06:db:b7:9c:4d:52:fb:a5:be:b6:23:d1:5c:18:94:7f:9c:
8b:b2:d6:16:bb:e8:9f:a1:7d:d7:b3:24:eb:e9:21:4e:b7:af:
09:28:d0:10:84:85:d6:12:8f:2b:c1:cf:9b:5d:4b:fb:3f:22:
ec:a6:17:0c:5e:f5:18:aa:4b:85:0b:94:c3:e2:58:49:b3:ab:
4f:c5:e1:e5:64:99:65:5e:35:09:e5:4e:36:e1:60:cc:83:cc:
e8:29:89:ee:95:01:85:f8:69:7c:6f:2a:3a:c4:8b:11:c2:79:
0b:c0:db:91:45:fb:c5:8a:59:f5:77:a8:ce:51:be:ca:e4:ec:
e2:fa:39:37:49:56:0b:e1:42:3f:c1:20:81:9e:98:a6:95:bc:
d3:7f:42:19:7c:13:4e:b7:00:2c:ef:03:e4:e6:8b:0d:b4:f8:
a8:26:d5:b3:21:65:8e:47:5c:9f:dd:32:59:a7:8a:69:3c:50:
a6:c3:c8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:16:01 2024 by rpki-client on console-fra.rpki-client.org