Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/KAy7laKpLCI-nydxNT1tGu4a8t4.roa
File: KAy7laKpLCI-nydxNT1tGu4a8t4.roa (raw, json)
Hash identifier: Op4fshISqulTDBTseXOsf1kksM/VoCgH71zs9tvGPcs=
Subject key identifier: 28:0C:BB:95:A2:A9:2C:22:3E:9F:27:71:35:3D:6D:1A:EE:1A:F2:DE
Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Certificate serial: 018CC26D3E2884322FC8361E9BE9CDBF6EB3
Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/KAy7laKpLCI-nydxNT1tGu4a8t4.roa
Signing time: Mon 01 Jan 2024 00:29:48 +0000
ROA not before: Mon 01 Jan 2024 00:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49324
IP address blocks: 194.61.192.0/20 maxlen: 20
194.61.192.0/19 maxlen: 19
194.61.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3e:28:84:32:2f:c8:36:1e:9b:e9:cd:bf:6e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Validity
Not Before: Jan 1 00:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=280cbb95a2a92c223e9f2771353d6d1aee1af2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:32:a0:d2:ca:70:6c:0d:8e:33:d1:e2:b1:76:
98:a0:e4:16:91:04:cd:cd:34:db:d4:58:5f:9e:be:
39:65:5f:65:e0:46:36:32:c6:90:d4:1a:8c:15:04:
13:4a:8a:1f:8a:9e:dc:07:76:fa:44:8d:27:55:5a:
c2:4f:6c:87:e8:6a:91:f4:5a:65:0a:68:7f:f6:e7:
4e:9b:7d:42:8a:b9:fb:c7:15:4f:27:cf:a5:b7:ce:
af:ab:20:5a:1c:4e:38:6a:a2:b8:f7:47:80:d7:88:
4a:12:fe:1e:1b:76:69:84:f8:9d:97:4a:56:35:a6:
95:c0:fb:a3:fa:01:f0:c2:b8:82:d5:db:3c:fc:f3:
40:f5:c9:c7:e8:63:e9:61:70:b1:35:14:e5:ed:aa:
67:b0:b5:96:80:37:0e:2d:78:c6:99:b2:1c:a7:f6:
fb:3c:3b:cc:d4:0b:bc:28:a5:40:00:51:fe:09:77:
75:4e:b4:b1:9e:53:f9:86:b6:f3:1f:50:18:82:35:
b2:4f:54:a8:1f:22:f1:cc:25:86:0d:b0:17:29:07:
7c:75:68:2f:67:b2:5b:9a:aa:c6:8f:98:8f:3f:ac:
a4:35:79:19:03:84:f1:bc:49:7b:13:db:03:fb:3a:
a9:2d:fa:da:d5:9d:85:52:cf:66:fc:6c:1e:fe:1a:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0C:BB:95:A2:A9:2C:22:3E:9F:27:71:35:3D:6D:1A:EE:1A:F2:DE
X509v3 Authority Key Identifier:
keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/KAy7laKpLCI-nydxNT1tGu4a8t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.192.0/19
Signature Algorithm: sha256WithRSAEncryption
61:b1:ef:36:a7:48:4d:9f:66:94:f5:d3:51:3c:88:4f:06:1f:
9c:ad:fa:ac:d0:84:ba:ad:13:89:16:32:c2:3b:e9:b6:31:64:
7c:71:9d:35:e7:63:bc:19:62:d8:71:1a:ad:99:f5:30:32:63:
62:74:50:1b:f5:50:9e:0d:cf:74:55:22:7e:c0:65:e8:66:27:
75:70:e8:32:34:e8:84:39:f4:98:82:41:dc:a9:14:3f:48:b2:
f0:ea:14:b6:22:fe:30:4e:81:b2:cc:34:ad:5c:76:ae:a7:f7:
de:47:ab:d8:51:72:b8:94:a8:16:b1:4e:c5:83:e6:bf:1a:6f:
cb:fe:9a:4d:d1:34:be:9e:fc:c3:94:a0:7d:c8:0a:bd:34:44:
bb:df:66:66:f5:04:ad:eb:79:31:0f:91:b4:29:a3:26:3d:d5:
79:64:4f:23:99:3b:92:f1:6b:45:15:51:bb:fb:4c:f4:6a:d5:
b1:7a:11:9e:13:c4:4a:44:61:44:9f:b4:66:50:06:f5:f9:60:
63:f5:23:24:b0:ca:71:1c:6f:a7:7f:0b:9f:72:e2:6f:18:a2:
6c:d4:15:00:f3:54:5d:b5:e7:95:6f:d5:82:6e:71:d2:6f:36:
ac:84:ba:54:b6:07:e4:ad:68:c2:2b:9a:39:04:af:50:de:fb:
1f:8b:c9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:24:36 2024 by rpki-client on console-ams.rpki-client.org