Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/KuVaD5b6TwFNAgxCjYNE-_8uAOw.roa
File: KuVaD5b6TwFNAgxCjYNE-_8uAOw.roa (raw, json)
Hash identifier: vgRtNq+eiEAorToMcucP+Zw4x4yJ7B+sfs6iS4tRRlw=
Subject key identifier: 2A:E5:5A:0F:96:FA:4F:01:4D:02:0C:42:8D:83:44:FB:FF:2E:00:EC
Certificate issuer: /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Certificate serial: 018CD9E144C1178E594880794D1AB32F393E
Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/KuVaD5b6TwFNAgxCjYNE-_8uAOw.roa
Signing time: Fri 05 Jan 2024 13:47:48 +0000
ROA not before: Fri 05 Jan 2024 13:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31367
IP address blocks: 212.69.186.0/24 maxlen: 24
212.69.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d9:e1:44:c1:17:8e:59:48:80:79:4d:1a:b3:2f:39:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Validity
Not Before: Jan 5 13:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ae55a0f96fa4f014d020c428d8344fbff2e00ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:da:00:7b:f3:6f:88:0f:04:01:4b:07:ad:
29:66:46:57:df:0c:1d:53:8b:70:af:df:dd:75:79:
b9:ea:e7:0e:64:00:33:7f:62:06:91:52:87:5a:78:
a9:d7:3b:22:2c:51:11:21:2a:9a:b6:8d:66:96:c7:
8d:56:9b:e9:a6:99:ef:7b:ba:a2:55:e7:b7:f2:0d:
ab:cb:8f:2e:be:da:f5:8c:c2:f5:cb:7f:b1:1e:8f:
73:3a:89:11:9c:6c:6d:be:29:46:a4:65:99:a3:b1:
b1:16:28:3c:fd:de:c5:74:f8:c9:c1:df:5e:73:6f:
97:58:37:0a:c7:a6:d4:09:3f:fd:33:50:79:62:44:
58:6b:75:b0:e0:b6:e6:a3:d1:53:ea:14:99:b2:74:
b5:3f:8a:33:cb:e7:21:92:62:dd:8e:1e:ed:1d:1f:
c1:35:41:ab:16:e1:3c:cc:51:ad:eb:25:e9:39:a6:
c8:6b:19:02:15:7e:e2:10:31:b4:70:46:11:d2:3d:
37:94:d7:36:91:83:d4:bd:9b:e9:e3:c6:6d:cc:1e:
e3:2c:48:8e:e5:f0:20:18:f2:18:25:f9:43:7b:bd:
09:12:97:41:b3:13:73:c8:ef:25:b2:66:cb:50:0b:
49:1e:f2:d8:f2:65:0b:0f:a8:a6:62:f4:58:ee:d8:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E5:5A:0F:96:FA:4F:01:4D:02:0C:42:8D:83:44:FB:FF:2E:00:EC
X509v3 Authority Key Identifier:
keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/KuVaD5b6TwFNAgxCjYNE-_8uAOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.185.0-212.69.186.255
Signature Algorithm: sha256WithRSAEncryption
71:eb:d7:c3:2d:14:61:5f:a0:68:b2:5f:fc:a6:5a:c8:98:08:
3d:62:71:3d:8e:4a:32:49:fe:25:ab:87:b5:76:ad:ea:7a:c9:
4d:6b:3c:7b:2a:f8:61:ed:05:4d:8b:70:3f:f4:a5:a8:02:d5:
c2:0d:e2:af:98:86:b8:1e:1c:cf:44:05:41:8b:3a:93:a1:d9:
08:e9:b7:a0:ff:d2:cc:71:f5:40:99:32:22:6e:b3:14:41:9a:
bb:5f:9d:53:9c:6f:6e:eb:f9:1a:68:7b:e8:73:ea:b6:57:39:
f2:2a:4c:8a:4b:84:12:4c:7a:c2:ef:46:de:57:6a:66:e8:df:
80:ef:f7:1f:dd:ce:be:d8:db:d6:74:fe:27:8f:6b:b0:51:13:
07:a8:86:94:e7:dd:d0:65:8d:b2:df:c5:8f:c7:ee:64:82:34:
de:ee:a7:a3:8a:35:70:5a:3d:60:df:70:12:69:a4:81:f6:ae:
2f:b7:59:33:b1:0e:cf:ae:04:da:eb:68:e5:a0:21:a8:a2:92:
67:33:b3:4d:c1:24:b9:59:44:fe:f3:45:72:8c:1b:c9:8b:e7:
ce:d0:9d:c5:19:ba:c0:50:fa:a0:b6:83:be:bf:66:0f:2d:42:
47:01:d8:03:b7:72:02:5a:e1:4b:bc:94:57:f3:d2:62:fb:cb:
dd:d3:d5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 02:06:20 2024 by rpki-client on console-ams.rpki-client.org