Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/kvHoB0TfBx_CWa8k7GEVgHLCut4.roa
File: kvHoB0TfBx_CWa8k7GEVgHLCut4.roa (raw, json)
Hash identifier: ABk41hdyViMlHAz3tVoxFU4oL3ksznnhlxs9xpf8qCQ=
Subject key identifier: 92:F1:E8:07:44:DF:07:1F:C2:59:AF:24:EC:61:15:80:72:C2:BA:DE
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC80307F2855E9F34E15A0FD1A43A21CF
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/kvHoB0TfBx_CWa8k7GEVgHLCut4.roa
Signing time: Tue 02 Jan 2024 02:31:31 +0000
ROA not before: Tue 02 Jan 2024 02:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209797
IP address blocks: 192.71.208.0/24 maxlen: 24
192.71.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:07:f2:85:5e:9f:34:e1:5a:0f:d1:a4:3a:21:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92f1e80744df071fc259af24ec61158072c2bade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f1:c8:0a:cd:e9:b4:54:6a:3d:6c:70:a5:54:
4f:be:9d:a7:96:a6:1d:5c:bf:b2:69:44:38:d1:3f:
b8:7b:65:88:3f:ed:20:39:9c:c9:68:01:a2:f4:7a:
73:4d:8b:89:0b:59:ab:9f:02:40:7c:c3:f5:f1:ac:
61:64:06:15:05:33:d5:ca:49:0e:46:b3:a4:7e:24:
47:d1:31:93:e5:b9:a6:1f:e6:d1:6e:99:79:30:e2:
16:ed:30:3e:ab:8d:5f:da:fc:29:92:a5:59:3f:ad:
e3:ab:39:8c:3f:71:f6:dd:4d:ca:0e:d3:c1:f3:20:
96:06:ac:9a:ac:6e:57:64:23:f7:88:78:3c:d9:83:
d8:f7:e0:e7:8c:06:4a:57:bf:5f:7e:14:8a:a2:7d:
f0:be:0b:d4:ee:7e:2a:b2:ab:86:29:51:9b:6e:39:
67:28:ef:06:14:87:a0:5a:02:48:10:38:98:68:b8:
9c:32:d4:fb:6b:ed:de:0b:03:35:4b:0b:37:8f:2c:
d7:1c:a3:b2:e0:ca:51:31:98:dc:2b:13:4f:53:1b:
d4:a8:81:9b:ae:23:1c:85:ad:f4:23:ad:68:57:63:
21:cb:2f:d0:9b:bf:1a:a8:e7:ea:9a:44:a2:25:84:
3c:94:8c:69:3f:e2:60:4e:b0:4c:cd:7b:d3:05:ac:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F1:E8:07:44:DF:07:1F:C2:59:AF:24:EC:61:15:80:72:C2:BA:DE
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/kvHoB0TfBx_CWa8k7GEVgHLCut4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.207.0-192.71.208.255
Signature Algorithm: sha256WithRSAEncryption
83:7d:dd:31:48:c1:73:d0:d2:7a:58:09:e2:ad:2f:36:87:6c:
d6:30:17:fe:e9:60:69:97:67:90:4c:e8:03:07:86:3b:8d:66:
11:b7:dc:88:b8:44:f1:51:2f:56:c2:7d:79:b4:e6:48:5a:7f:
0e:f3:4c:70:a7:50:1a:e6:3e:ff:47:84:ef:dc:74:93:c9:50:
63:6b:ea:13:13:1f:cd:e7:88:01:ce:9d:c8:00:a9:0b:4c:a2:
28:58:30:38:09:6b:cc:06:8f:c0:be:5f:28:79:94:95:8a:b9:
52:d8:a3:96:79:ac:f6:f5:cc:98:24:89:41:aa:dc:2a:5e:c2:
a1:c6:e8:2e:c1:f0:1a:8b:36:bb:8c:e5:63:e5:09:7b:c5:51:
77:17:bd:68:02:53:59:2e:72:30:46:f6:78:16:11:93:c4:ae:
c3:32:27:30:75:67:b5:73:bc:8c:94:8a:f6:6b:78:e3:15:18:
1d:f7:4b:97:c1:fa:44:c3:fb:c5:d7:c6:10:e0:2e:2f:a3:97:
20:e0:64:43:fa:8a:8b:5a:64:fe:34:65:7c:d6:20:77:a4:e7:
d7:88:73:9a:05:6e:f9:a3:97:7d:25:11:9c:18:85:a8:39:6c:
68:31:1b:43:91:6e:6f:f9:93:c3:91:18:33:2c:ba:8b:a3:a9:
a4:25:08:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:56:51 2024 by rpki-client on console-ams.rpki-client.org