Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/kRCdbaC_td_mfrbk4jFMdjaakQQ.roa
File: kRCdbaC_td_mfrbk4jFMdjaakQQ.roa (raw, json)
Hash identifier: h6c/vzZZPk1bxFru2APYmjheszLKHJiOAaJR0tVZf44=
Subject key identifier: 91:10:9D:6D:A0:BF:B5:DF:E6:7E:B6:E4:E2:31:4C:76:36:9A:91:04
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 018EF63D7249229C7C69E70DA5BAE3BDC6D0
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/kRCdbaC_td_mfrbk4jFMdjaakQQ.roa
Signing time: Fri 19 Apr 2024 12:03:25 +0000
ROA not before: Fri 19 Apr 2024 12:03:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 89.36.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:3d:72:49:22:9c:7c:69:e7:0d:a5:ba:e3:bd:c6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Apr 19 12:03:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91109d6da0bfb5dfe67eb6e4e2314c76369a9104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:31:38:2b:82:ac:eb:20:bb:da:5d:3d:99:
14:48:38:19:59:ec:ca:b1:b4:f7:9b:72:a5:15:33:
e2:62:41:a0:fa:15:b0:d5:ae:19:c8:f3:0d:43:76:
e9:1b:59:8b:d5:53:d8:a6:f4:13:16:ec:86:86:0c:
4b:d4:61:f3:3e:c6:ad:23:96:1f:b2:6b:17:3b:d2:
b2:88:3a:92:2e:17:28:6e:70:1d:63:23:5e:6c:7d:
db:f1:c3:3c:60:e7:05:23:bc:0a:9d:a2:d5:99:79:
a6:02:d0:89:4a:38:37:81:ca:09:84:41:77:9a:d5:
cf:1e:7a:fa:f8:cf:ba:a3:3e:b2:2e:10:f8:60:96:
77:89:74:10:9e:ee:d1:0b:ec:c2:ea:75:b0:c8:2f:
65:87:2f:c1:76:d4:7f:ea:52:75:72:fd:e1:16:ad:
35:96:63:f8:3b:e9:e2:66:b8:a1:d0:47:a1:d7:d0:
67:d9:73:5a:0a:2c:fd:4f:7e:92:08:ee:b7:31:b5:
22:ff:8c:0d:31:b3:14:83:83:fd:b6:5b:85:c2:c5:
ec:2f:44:45:09:75:a3:dc:03:ca:8d:96:66:13:69:
89:16:5d:7e:88:d2:2f:f6:d6:02:88:2d:cb:94:e1:
88:9c:d7:b6:0e:6e:da:3a:70:15:62:d1:ad:b5:51:
2c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:10:9D:6D:A0:BF:B5:DF:E6:7E:B6:E4:E2:31:4C:76:36:9A:91:04
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/kRCdbaC_td_mfrbk4jFMdjaakQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c5:78:e4:b9:a8:0b:46:f9:e2:39:0e:c8:15:20:de:42:6f:
93:65:ff:65:42:35:36:f2:26:45:97:45:8d:a0:2a:5d:88:70:
04:cb:60:12:1e:e2:67:03:de:74:8c:70:ea:ca:c5:40:4c:e6:
16:08:fa:06:ad:32:2b:23:d8:1a:22:1b:40:ac:5b:35:6b:43:
d4:c9:97:8f:e3:32:e9:47:39:a3:a8:81:f0:db:41:b2:c8:25:
ee:e0:3b:fe:02:14:e3:3a:35:cc:51:d2:50:92:b9:4e:17:62:
b1:39:dc:ad:a1:56:88:e5:f7:3e:46:af:c8:31:b9:b3:28:5e:
ef:e0:cb:39:d7:c5:19:60:26:10:f7:11:84:21:66:cf:80:4a:
0d:01:a3:2e:9c:ab:32:57:89:2b:45:37:82:81:1a:0a:da:4a:
22:f9:4c:82:38:97:22:2a:b7:ad:66:46:44:ec:87:65:51:85:
1e:b8:a3:6a:4a:b0:4d:c0:8b:e2:28:94:f2:95:9a:cc:da:84:
ef:00:13:72:02:12:58:a9:35:85:e0:9c:ec:d3:cf:9d:7a:11:
b1:0c:82:87:21:5f:bc:1a:8c:c0:ab:70:b5:4d:4b:8c:14:8b:
13:7a:f1:7b:06:06:54:d1:87:d4:52:ee:ba:c0:2e:f7:50:f7:
bb:63:3a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 10:10:39 2024 by rpki-client on console-fra.rpki-client.org