Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KG2zWx0LLhjVHQ-p31xkwb0kcv0.roa
File: KG2zWx0LLhjVHQ-p31xkwb0kcv0.roa (raw, json)
Hash identifier: l0lt0hKb8pGZFCTQZhStF9Js4NZwCrPwgobG+JH6lKo=
Subject key identifier: 28:6D:B3:5B:1D:0B:2E:18:D5:1D:0F:A9:DF:5C:64:C1:BD:24:72:FD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018F358E6AA976F65828E1545984319F4B62
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KG2zWx0LLhjVHQ-p31xkwb0kcv0.roa
Signing time: Wed 01 May 2024 19:07:56 +0000
ROA not before: Wed 01 May 2024 19:07:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216093
IP address blocks: 194.87.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:35:8e:6a:a9:76:f6:58:28:e1:54:59:84:31:9f:4b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 1 19:07:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=286db35b1d0b2e18d51d0fa9df5c64c1bd2472fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:a6:29:e8:26:e5:a2:ba:4e:70:2e:60:b8:
2f:c6:02:58:80:62:d6:4a:0d:a4:b3:1c:76:f1:34:
39:a4:f3:83:dc:0a:82:2a:44:4f:b7:b8:8b:01:14:
44:82:36:fc:ff:c5:ee:24:b8:65:24:0f:e6:32:28:
d2:95:c3:a6:f2:ef:28:32:9e:68:2a:7b:6e:6e:e2:
54:6b:24:9c:92:eb:6e:4c:af:f7:33:cc:65:f2:3a:
4c:03:8e:e4:26:7b:7f:a7:cb:5c:09:0c:69:ec:c6:
af:1a:b1:a0:94:2a:47:0d:34:18:ac:ea:f9:8a:0d:
60:5a:2a:28:98:14:5e:6b:ce:78:41:e5:e0:e8:4b:
88:55:ed:e7:fa:d1:be:90:b8:e3:f3:13:b7:eb:f2:
c1:95:30:8d:81:e4:c1:3b:bc:33:83:75:5f:54:bb:
2a:0c:b8:64:97:b8:d6:4b:15:be:83:35:0a:e8:35:
67:05:0c:3a:a9:bf:f3:ae:4f:d6:51:9f:8a:e8:a0:
99:2d:9c:f5:48:57:e9:0d:74:a5:1c:a5:d4:8f:c5:
a1:d9:23:b6:07:aa:6b:ee:33:ae:7f:ed:af:4c:a1:
52:d3:90:e7:c8:74:93:ea:d6:e5:49:43:48:ea:58:
7d:a8:24:a6:9e:28:0e:9c:59:ef:14:67:4b:14:7e:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6D:B3:5B:1D:0B:2E:18:D5:1D:0F:A9:DF:5C:64:C1:BD:24:72:FD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KG2zWx0LLhjVHQ-p31xkwb0kcv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.28.0/24
Signature Algorithm: sha256WithRSAEncryption
86:99:06:22:d9:2a:a4:4c:42:58:82:f2:f8:a9:78:15:53:cb:
70:e2:7c:01:c0:a5:9c:c5:c1:8d:07:86:6f:2b:07:31:09:5e:
3a:65:03:fe:ee:7b:6b:46:1c:39:ca:01:29:52:f2:09:ab:c2:
e2:4e:1c:1a:84:29:6f:75:01:33:3b:cc:3e:fc:d9:af:86:a7:
4e:04:64:d4:b7:51:ad:f1:4f:cd:ee:40:ac:ba:46:a2:ff:80:
40:1d:ee:35:a0:14:c8:7f:2d:7c:37:44:25:81:6b:c5:51:cf:
57:84:3b:f1:bb:1f:29:30:1b:a3:2f:07:c4:9d:df:c1:be:3e:
81:ae:3d:2a:ab:ef:4e:f7:af:d2:1f:b6:ee:74:81:96:d6:71:
4d:ca:8f:40:d9:88:78:ca:32:49:04:c7:94:00:3d:de:2f:07:
4f:bc:d5:2e:e8:ed:2e:a0:ce:19:17:ef:a1:13:85:4b:fa:23:
b2:2e:f1:ef:57:b8:c9:e5:7a:dc:71:8e:1d:0c:af:c8:90:e5:
a6:d6:e5:58:cd:72:12:e7:0e:2c:e7:c5:62:f8:ff:18:e4:65:
1f:aa:10:1b:e1:b6:25:9c:34:1c:0c:01:a8:72:e9:3c:ab:a2:
17:0d:ce:cf:d4:35:5c:ee:7f:ea:f8:23:1b:33:5f:1e:8d:ad:
ea:47:aa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:45:39 2024 by rpki-client on console-fra.rpki-client.org