Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/9KclLJnbVlQu-JdDWqK3qYZUVPY.roa
File: 9KclLJnbVlQu-JdDWqK3qYZUVPY.roa (raw, json)
Hash identifier: rsjyA0DtgWMdjnfMK9vOhRiEpL/v5bDGD+7OTuRPXT0=
Subject key identifier: F4:A7:25:2C:99:DB:56:54:2E:F8:97:43:5A:A2:B7:A9:86:54:54:F6
Certificate issuer: /CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
Certificate serial: 018D5A675BD79AF2EACC3B516FDCEC51A840
Authority key identifier: 2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/9KclLJnbVlQu-JdDWqK3qYZUVPY.roa
Signing time: Tue 30 Jan 2024 12:45:39 +0000
ROA not before: Tue 30 Jan 2024 12:45:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49223
IP address blocks: 91.243.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:67:5b:d7:9a:f2:ea:cc:3b:51:6f:dc:ec:51:a8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
Validity
Not Before: Jan 30 12:45:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4a7252c99db56542ef897435aa2b7a9865454f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:d1:9b:3e:d4:ff:7c:4b:0e:60:55:7f:16:
80:46:5c:d4:1c:f2:dc:ad:a9:27:35:25:6f:d2:47:
f0:a2:ac:cc:f1:9c:bf:f2:14:53:be:c3:e1:41:a0:
c8:45:a6:04:88:22:75:b6:46:0b:9a:15:9b:a0:be:
74:66:88:51:db:4f:6d:cc:21:f8:39:f7:6c:2f:a2:
cd:9b:e5:b3:88:1f:33:28:6f:c7:4c:1e:ba:e0:99:
19:ae:ff:c9:f9:9a:18:d5:6c:a0:b2:5a:de:5c:1f:
0a:73:4e:36:71:30:ea:f0:fd:c3:17:37:ac:50:10:
4d:a7:96:d4:ed:e5:d8:7e:5e:70:6c:1b:f3:12:62:
e2:29:63:55:99:ba:5a:38:9f:be:28:c0:28:00:26:
dd:d5:26:6c:45:79:3c:98:e6:b7:da:56:3f:a5:07:
da:c0:ac:8d:33:1b:c9:29:1a:0e:d0:7e:a5:c5:8f:
27:98:5d:53:fb:75:ec:33:9f:ff:09:6e:e3:a2:b4:
19:29:b6:31:64:62:38:bd:f4:54:21:8f:fe:fb:30:
64:47:1a:2d:e2:73:2e:65:41:98:e8:e3:7a:e5:8a:
0f:a6:ed:85:1f:de:37:40:41:3f:c6:e2:17:f4:f6:
b4:9a:63:42:9a:ba:54:6b:e9:96:df:fc:26:17:3a:
67:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A7:25:2C:99:DB:56:54:2E:F8:97:43:5A:A2:B7:A9:86:54:54:F6
X509v3 Authority Key Identifier:
keyid:2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/9KclLJnbVlQu-JdDWqK3qYZUVPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.180.0/22
Signature Algorithm: sha256WithRSAEncryption
20:3c:00:ab:a6:44:db:26:39:29:5d:99:df:20:ce:60:56:0d:
48:13:12:70:d4:64:cb:46:49:8a:ab:d8:ba:4c:6e:d8:26:5c:
c4:f2:a2:a3:4c:43:06:a5:1a:75:56:fe:ef:59:e2:f2:ba:11:
30:f3:75:0c:a4:fd:a5:52:6c:bc:3f:06:bd:dc:c3:0d:3f:90:
0a:73:8e:b0:b1:75:5a:bd:5c:d3:8c:17:86:f1:f0:4b:41:4a:
fb:fc:a2:5e:3e:cf:c1:0e:cf:7c:26:f3:ba:84:05:b1:a0:cb:
e1:b6:27:3d:da:38:12:2f:98:ed:52:0a:be:8f:74:30:47:8e:
85:02:96:9a:8a:88:1e:66:6b:9e:d7:87:7c:a2:bb:eb:a4:47:
0e:51:61:f3:c9:0d:94:f2:31:08:a2:45:19:d3:a5:fc:2a:29:
5d:6e:c1:c9:44:e7:e6:98:8e:d2:9b:f0:50:5d:ff:ac:ca:bf:
22:b3:1d:c0:1e:a6:01:b2:5e:36:bc:68:95:fb:42:94:78:9d:
91:88:17:93:4d:29:5f:8a:45:25:93:5c:ee:91:a5:d0:1c:01:
5b:fc:f1:1c:35:75:90:75:e3:c4:ff:94:22:d0:71:99:32:be:
2a:6b:37:c7:7d:8b:65:1f:69:de:7c:da:83:45:1a:df:8e:cb:
58:68:43:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:10:25 2024 by rpki-client on console-ams.rpki-client.org