Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KydLdL-nr91wlvo3pTu6rKQKdNk.roa
File: KydLdL-nr91wlvo3pTu6rKQKdNk.roa (raw, json)
Hash identifier: pUoCDOFigjf5kLdHrge7SBSV8fkkOErRK8oJNccrRew=
Subject key identifier: 2B:27:4B:74:BF:A7:AF:DD:70:96:FA:37:A5:3B:BA:AC:A4:0A:74:D9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019014BB8EFC0D6086345C32ECC83B917FD2
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KydLdL-nr91wlvo3pTu6rKQKdNk.roa
Signing time: Fri 14 Jun 2024 03:12:34 +0000
ROA not before: Fri 14 Jun 2024 03:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:14:bb:8e:fc:0d:60:86:34:5c:32:ec:c8:3b:91:7f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 14 03:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b274b74bfa7afdd7096fa37a53bbaaca40a74d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:92:90:08:b6:bb:06:df:8d:fd:da:35:86:
c3:63:18:4b:0a:77:0b:96:a1:8d:1e:7d:6c:2c:0b:
b7:df:51:25:5d:d6:11:42:ae:32:eb:8a:87:11:c7:
8d:9f:62:b5:62:28:cd:80:58:84:b5:77:57:74:27:
7f:58:cc:de:1d:2c:64:02:2f:be:86:84:9b:24:6c:
2e:ea:24:2a:13:cc:1c:c6:92:51:e2:11:71:e1:9a:
14:78:99:38:38:f9:15:56:60:b5:6a:72:82:6f:04:
1b:35:5c:f4:f9:1b:c4:d9:c3:2a:f1:45:99:c4:fd:
4c:06:fb:2b:ed:d5:4e:f7:80:91:aa:87:9a:c9:37:
83:16:4e:c1:51:08:ef:ff:06:d5:a2:7d:99:2b:a6:
69:41:05:f8:59:b8:15:c1:6a:6d:f0:9c:67:09:c4:
90:0f:6b:ce:be:86:0a:72:9a:fc:3e:00:52:ab:56:
25:4e:18:58:c8:f6:b0:10:31:be:08:ee:f5:da:f5:
a6:d3:87:17:c0:96:67:38:fb:ca:ff:b3:eb:56:9c:
b2:7d:5e:1c:49:a4:0f:6c:3f:d3:7c:0d:8e:a5:f3:
26:85:96:70:38:6e:e7:03:ea:0c:f9:0a:7a:db:32:
70:49:f6:27:b1:0d:d9:cd:20:10:79:a2:ca:94:76:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:27:4B:74:BF:A7:AF:DD:70:96:FA:37:A5:3B:BA:AC:A4:0A:74:D9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/KydLdL-nr91wlvo3pTu6rKQKdNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:ec:4a:65:ae:7d:16:af:32:c3:78:c6:ca:3b:46:d3:d5:36:
63:28:e1:89:30:ce:45:34:a6:a5:e8:98:a8:f5:1c:bd:58:40:
c9:37:36:5a:42:ff:5f:d2:d0:85:ca:35:0d:fb:2a:e0:36:88:
cd:33:af:64:6f:05:bc:a9:dc:83:3b:79:2a:12:d3:a6:01:02:
6e:5d:9b:11:db:f1:d6:bc:00:f0:58:11:3e:56:24:76:ed:ca:
56:c5:bb:26:3a:34:5e:e7:b1:99:06:b8:09:27:5a:53:65:28:
d4:3e:20:64:02:f7:8b:10:8f:02:56:e4:f0:e7:d1:92:d1:14:
03:69:b0:01:70:90:6e:09:0f:b8:bd:d9:07:3b:d8:b7:05:80:
c8:27:ba:3c:e9:1f:ff:ff:af:f9:17:2e:65:2a:26:06:9c:f4:
a0:2e:54:65:f3:b7:dc:51:39:c4:70:38:71:7f:2a:8f:22:61:
d6:17:08:ea:42:92:be:32:03:36:1e:6d:88:06:dc:ac:50:33:
a2:df:8b:b2:5f:38:73:e9:ed:0f:81:d6:50:c6:fe:1e:c9:f3:
f1:fc:84:66:4d:ff:f9:9c:6e:bf:bd:87:90:ba:3c:92:16:72:
9a:5e:4f:e2:76:30:3a:81:8a:11:23:ad:7a:e2:49:99:c4:65:
32:83:32:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 04:41:31 2024 by rpki-client on console-fra.rpki-client.org