Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KxtJbvJ7KOBPYvEbWDWqXmRQgV4.roa
File: KxtJbvJ7KOBPYvEbWDWqXmRQgV4.roa (raw, json)
Hash identifier: Huf1dUcAyDvI80OvFEyRWYDLFnA0Thu+Vxj4BsNpoDU=
Subject key identifier: 2B:1B:49:6E:F2:7B:28:E0:4F:62:F1:1B:58:35:AA:5E:64:50:81:5E
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018F6CA09EC8212E48862EE7226326F4AB2C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KxtJbvJ7KOBPYvEbWDWqXmRQgV4.roa
Signing time: Sun 12 May 2024 11:46:56 +0000
ROA not before: Sun 12 May 2024 11:46:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152672
IP address blocks: 45.86.73.0/24 maxlen: 24
45.89.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6c:a0:9e:c8:21:2e:48:86:2e:e7:22:63:26:f4:ab:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 12 11:46:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b1b496ef27b28e04f62f11b5835aa5e6450815e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:c2:ea:df:c6:67:38:c1:bf:5c:44:d8:dd:
5f:59:07:6e:a6:c2:8d:a5:21:87:cb:af:35:7b:c1:
90:d6:0c:1c:65:8f:a5:d3:35:96:3f:53:dc:28:d7:
00:1b:7f:fb:c4:7b:1a:ac:cd:4d:8c:b9:f3:81:ff:
f8:57:ec:41:0f:8e:b1:af:2b:a7:fb:d2:b3:1c:1f:
68:50:21:17:48:f1:e1:20:39:97:a2:df:6a:c4:0f:
44:7c:32:7e:93:55:61:b7:49:26:60:51:a6:20:d5:
f9:9c:52:e8:30:c0:75:af:13:7c:4e:2f:82:0c:d9:
68:ba:87:40:61:1c:d0:be:ea:d0:c1:c4:1a:78:e9:
4d:0d:49:c8:31:3c:40:f1:0a:74:c8:fc:d6:71:74:
53:47:08:fc:41:fc:b5:0d:86:ed:95:95:63:e6:13:
3a:c2:7f:1a:53:53:aa:17:43:f6:5a:15:25:83:d8:
4d:be:27:bd:78:59:d6:39:e9:50:33:d7:fb:05:73:
ea:d9:c8:7c:9f:87:41:8a:37:24:9b:7a:de:84:87:
5a:ae:35:50:85:64:bf:2f:7a:7e:54:63:ff:02:58:
a3:5e:75:44:b3:d6:43:5f:cf:85:00:9e:17:b1:51:
cd:f8:9c:99:49:bd:07:19:13:f2:a9:fa:5c:f9:32:
71:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1B:49:6E:F2:7B:28:E0:4F:62:F1:1B:58:35:AA:5E:64:50:81:5E
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KxtJbvJ7KOBPYvEbWDWqXmRQgV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.73.0/24
45.89.104.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:39:d2:1f:d5:b9:67:a6:cd:1a:20:61:65:c4:f7:f4:22:4e:
06:67:39:15:4b:af:ff:8f:6c:26:28:a5:02:77:75:0d:6f:00:
f9:85:0a:bd:53:ac:bd:b9:83:33:76:81:7d:73:cc:94:b6:61:
d6:a1:d7:4d:02:9e:38:b9:da:34:b3:ce:cb:4a:a7:24:d6:2d:
3b:af:54:04:9e:a1:f5:9e:f8:d6:46:c2:8c:40:38:cf:27:fa:
74:49:07:4b:f3:57:61:2d:51:3c:dd:a4:85:50:2f:ff:92:84:
f3:6f:96:a4:6c:4a:04:87:7c:73:d1:8c:f4:98:10:02:76:39:
57:6b:e4:c8:77:3b:82:00:c4:96:bb:d9:46:e9:33:00:4d:58:
1a:a1:8c:b5:cf:a0:5e:49:f0:39:30:b6:e4:da:b8:22:bf:87:
70:11:5c:7a:ca:20:9e:12:53:67:8c:17:20:68:7b:5d:ae:ec:
a7:74:9e:21:08:0d:d6:0e:81:cd:66:51:2a:08:5b:ac:ec:e9:
60:9e:88:fa:4b:52:4c:48:96:cd:a8:79:e7:74:2c:3e:21:00:
08:ce:fd:b8:1a:b7:69:40:b0:3f:17:b5:27:8e:f0:fc:24:8f:
79:d8:c5:6b:c4:16:08:dc:ee:9d:0e:68:d5:70:ef:6c:01:5b:
78:90:4d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:27:11 2024 by rpki-client on console-fra.rpki-client.org