Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/KRMa5Tivbgv6pqCNpnTuwkFG7jQ.roa
File: KRMa5Tivbgv6pqCNpnTuwkFG7jQ.roa (raw, json)
Hash identifier: Obvoh8CAOxYKwF+TKTP3SbX31WlMVImQMlkkUPGWtGs=
Subject key identifier: 29:13:1A:E5:38:AF:6E:0B:FA:A6:A0:8D:A6:74:EE:C2:41:46:EE:34
Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial: 018FA46E4A8984BAC6CBFE612A69BCA24355
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/KRMa5Tivbgv6pqCNpnTuwkFG7jQ.roa
Signing time: Thu 23 May 2024 07:50:42 +0000
ROA not before: Thu 23 May 2024 07:50:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5400
IP address blocks: 2a00:2000::/23 maxlen: 23
2a00:2200::/25 maxlen: 25
2a00:2280::/25 maxlen: 25
2a00:2300::/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a4:6e:4a:89:84:ba:c6:cb:fe:61:2a:69:bc:a2:43:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Validity
Not Before: May 23 07:50:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29131ae538af6e0bfaa6a08da674eec24146ee34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2e:4d:47:bd:e5:ca:d7:39:18:c7:7e:89:9b:
3a:ee:f2:11:aa:01:ae:c9:83:3d:8b:a6:75:dd:a9:
d2:48:0c:0b:ad:e6:4d:77:0e:5a:0d:6a:96:5d:bb:
55:b1:8b:46:89:be:cb:91:b9:f4:d3:df:81:a9:e5:
1f:c8:64:a8:bd:ad:34:12:2a:53:5f:68:9a:15:40:
b1:5d:dd:ef:d7:94:4f:d7:5d:e5:74:c4:ca:67:72:
a9:85:58:12:c1:21:71:f0:db:d5:c9:f9:91:76:db:
8f:98:93:bd:57:b0:42:7f:fe:0d:d6:28:68:86:84:
d7:90:4f:5d:cd:32:2b:5c:81:9c:95:12:3c:81:06:
f5:d6:a4:1a:6b:ee:e4:1f:9e:2f:e3:22:43:a4:86:
3d:6e:97:1c:87:96:84:1c:7d:60:75:ad:05:35:41:
d6:b2:d7:62:40:1a:36:70:2e:8b:ba:17:05:42:87:
e5:8c:58:ad:f1:70:18:0a:b2:f4:a1:81:ec:55:18:
f5:39:2b:8a:ef:3b:60:34:91:1c:5d:1c:c4:5e:0e:
f7:e8:5b:b4:f1:e0:be:c2:12:61:2b:ff:89:f3:3c:
02:68:b7:15:7c:40:59:c1:b2:c6:a4:45:b6:96:38:
cf:21:77:a8:bd:f6:e3:ec:19:df:81:49:91:52:95:
4f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:13:1A:E5:38:AF:6E:0B:FA:A6:A0:8D:A6:74:EE:C2:41:46:EE:34
X509v3 Authority Key Identifier:
keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/KRMa5Tivbgv6pqCNpnTuwkFG7jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:2000::-2a00:237f:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
17:f7:99:1c:3e:c2:c7:54:0b:c5:23:7e:c4:40:e4:c0:1a:f9:
df:ad:b5:12:61:48:02:ff:df:df:3b:0a:c2:fa:a6:b4:ce:49:
36:95:8c:c9:22:38:66:ec:b6:c0:b3:ec:43:08:2a:c2:71:2c:
43:b2:6e:78:f3:42:c2:ab:99:4d:71:32:f2:68:ef:5a:53:7a:
11:83:12:5f:9d:cf:58:5e:5d:af:c3:7d:30:2c:ab:0a:4b:2e:
34:65:ec:19:4e:63:09:d5:db:37:b6:58:f1:0a:e4:01:47:de:
15:fb:2f:f1:c0:83:ff:7e:ce:8f:c1:5a:3b:bb:64:57:12:f8:
72:df:e1:3e:db:c9:84:47:23:9e:ef:e2:18:e3:dd:10:35:e3:
bc:24:db:06:63:1c:47:53:c8:31:ed:b7:56:b2:aa:37:1f:e0:
77:d2:88:dc:fa:de:d1:73:df:55:66:04:07:27:63:ea:52:42:
a0:07:51:cd:89:bc:87:a1:14:1c:d4:a0:0d:05:e6:15:9e:0e:
11:1f:d0:d2:72:e4:a1:c6:a4:3a:ce:3f:b6:a5:1d:ab:6b:ee:
d2:53:8b:34:33:c8:8a:ce:90:c3:c3:c0:d4:b8:bb:9e:c4:25:
5a:72:4e:bb:d7:d1:54:29:41:cb:c9:a6:c0:4b:70:d7:21:5f:
db:f7:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:58:35 2024 by rpki-client on console-ams.rpki-client.org