Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/K_7dflX5vkSZA4IPu1TZoGrz_OE.roa
File: K_7dflX5vkSZA4IPu1TZoGrz_OE.roa (raw, json)
Hash identifier: +osrSgnaLm1qWkEKNJl/HDt1ZICdSIIQ85scAEunMLs=
Subject key identifier: 2B:FE:DD:7E:55:F9:BE:44:99:03:82:0F:BB:54:D9:A0:6A:F3:FC:E1
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 018CC9BC9208169B755CC2DDC344F9D73608
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/K_7dflX5vkSZA4IPu1TZoGrz_OE.roa
Signing time: Tue 02 Jan 2024 10:33:47 +0000
ROA not before: Tue 02 Jan 2024 10:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50518
IP address blocks: 83.231.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:92:08:16:9b:75:5c:c2:dd:c3:44:f9:d7:36:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 10:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bfedd7e55f9be449903820fbb54d9a06af3fce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:ba:fe:ad:ea:5f:57:cd:f1:77:5c:7d:ec:
5a:8c:50:dd:cc:47:b0:c7:13:cd:c7:d7:b3:8a:d7:
8c:4b:fa:bc:b3:cc:fa:a8:70:60:b7:47:75:5c:8a:
db:e7:b1:64:88:30:60:ac:20:eb:2f:99:6f:df:d9:
2a:39:97:78:a1:67:2c:48:ba:93:62:e2:d4:2f:65:
21:f4:51:f9:10:36:1a:1b:3a:d2:c4:8e:94:82:7f:
f9:27:a1:f0:dd:ce:07:60:29:df:31:8d:42:cd:b0:
bd:e4:5b:f4:a3:5b:1c:4e:7a:14:4a:72:a1:a0:d6:
49:a8:0e:43:5a:96:f4:ab:a4:4f:ea:f1:cc:78:2c:
fd:b4:b7:69:88:c9:b1:0d:09:07:19:b2:88:48:81:
92:18:79:2e:42:53:b1:a0:3f:d5:d3:cd:df:9c:21:
68:70:3e:76:f8:49:69:6b:98:e3:40:60:ac:09:77:
de:95:15:cc:af:ee:99:b5:06:78:c3:f3:c4:cb:92:
24:ea:db:57:fa:90:37:32:ab:04:c8:33:dd:02:6d:
61:a8:74:49:5f:66:5c:9a:cd:76:64:4a:6d:bb:5b:
8e:3b:0b:a7:8e:d0:e0:90:bb:1f:86:91:b0:ae:68:
2b:47:ff:ce:6c:df:27:cc:6d:4f:90:14:5a:7f:5f:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FE:DD:7E:55:F9:BE:44:99:03:82:0F:BB:54:D9:A0:6A:F3:FC:E1
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/K_7dflX5vkSZA4IPu1TZoGrz_OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.231.152.0/24
Signature Algorithm: sha256WithRSAEncryption
55:2c:1e:b5:22:49:b0:41:ae:dd:04:1c:e0:46:f4:ad:71:82:
fe:d2:b4:c9:db:99:f1:41:1c:e6:ab:a3:26:32:f0:16:5d:0a:
2d:14:83:12:9f:59:2b:4d:46:0f:f0:34:95:a7:8a:be:ae:3a:
06:c5:2b:f5:18:4c:35:48:3f:a5:1a:fc:85:c1:fb:05:1b:77:
02:54:e3:75:d8:31:68:db:82:9d:db:ad:c6:e1:d4:53:8f:0d:
9f:0a:89:da:56:00:b2:4c:2e:2b:fd:76:17:2e:a7:34:04:21:
89:1a:1b:ed:95:51:69:86:6a:29:2b:5a:e9:e2:2f:9b:9f:b1:
3e:61:e1:03:1a:e4:07:b4:de:8b:a8:97:bd:49:2d:5e:63:56:
6f:f8:75:66:71:9d:e2:ae:98:27:17:7c:0b:58:57:56:3a:2a:
5b:c5:25:20:be:65:ac:79:4b:88:fb:3c:cd:80:d1:04:25:83:
21:d8:28:36:bc:d8:d0:59:67:a4:af:cc:a3:b6:49:bd:da:e5:
81:a5:ce:39:e6:73:c1:6f:0f:a7:5c:e3:74:e6:2c:ed:d7:5b:
17:13:b3:3b:ee:ef:a9:7f:9a:b2:ec:62:3f:e3:c7:2a:ec:b7:
5d:93:65:2e:27:28:f3:d1:e9:55:33:66:6b:7e:22:8b:2c:e1:
21:20:7c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:00 2024 by rpki-client on console-ams.rpki-client.org