Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/KjGbcOWDuvuNAlAEHrcueG87Grk.roa
File: KjGbcOWDuvuNAlAEHrcueG87Grk.roa (raw, json)
Hash identifier: a7NhGsGCg+Y/elk/WFRRHVHjRwksfMvL2AqXPKC8KYs=
Subject key identifier: 2A:31:9B:70:E5:83:BA:FB:8D:02:50:04:1E:B7:2E:78:6F:3B:1A:B9
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CCF614A391F73564395C53DF94921B440
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/KjGbcOWDuvuNAlAEHrcueG87Grk.roa
Signing time: Wed 03 Jan 2024 12:51:48 +0000
ROA not before: Wed 03 Jan 2024 12:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215796
IP address blocks: 147.45.96.0/24 maxlen: 24
147.45.97.0/24 maxlen: 24
147.45.98.0/24 maxlen: 24
147.45.99.0/24 maxlen: 24
147.45.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:61:4a:39:1f:73:56:43:95:c5:3d:f9:49:21:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 3 12:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a319b70e583bafb8d0250041eb72e786f3b1ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:dc:65:f0:12:8c:41:85:04:9c:0c:c5:ec:
2f:3c:be:c4:c8:5e:f5:85:6b:d5:44:6a:1f:b7:a8:
24:89:a4:2d:7b:65:d2:f1:bb:73:fd:ed:b1:a9:81:
0d:0e:e1:b2:22:b4:7a:5b:b0:34:89:a4:3d:26:d3:
55:a7:29:3f:5d:1f:fc:d8:71:8d:df:6d:af:de:a2:
22:2e:a1:bb:81:90:20:d3:ad:6c:f6:74:d2:a4:3c:
e6:91:9a:ac:b0:79:77:b3:65:5a:25:47:5f:9a:76:
0f:3c:16:0f:d0:95:6e:26:bd:23:18:38:a9:59:9d:
00:6e:6d:80:90:67:ed:b9:cd:5b:4e:45:68:0d:03:
a8:69:ec:16:53:00:7e:f5:6e:bb:a1:b8:00:17:b0:
b4:51:f4:2f:64:84:e7:94:32:43:07:6b:bd:c8:7a:
71:b3:a0:a8:65:be:13:a3:39:9e:da:07:31:bb:88:
1a:39:08:54:da:e3:33:55:b6:38:1b:30:ae:9b:0b:
02:eb:86:62:7b:9b:d9:d3:43:64:7b:28:f8:be:10:
9f:c5:fc:3a:20:26:ca:21:da:36:82:43:57:78:0d:
1b:56:11:3a:25:3c:23:b6:bd:1d:50:90:3c:8b:c7:
1f:61:85:36:1b:da:ba:dd:92:2a:63:df:3f:ab:e3:
98:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:31:9B:70:E5:83:BA:FB:8D:02:50:04:1E:B7:2E:78:6F:3B:1A:B9
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/KjGbcOWDuvuNAlAEHrcueG87Grk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.96.0-147.45.100.255
Signature Algorithm: sha256WithRSAEncryption
6b:c3:cf:5a:97:06:57:86:72:e1:46:4a:20:6f:6f:52:cf:93:
7a:dc:e5:a2:ef:c1:6a:4c:5d:19:f8:2d:99:62:be:e3:e8:8e:
12:4b:c2:82:01:c6:6d:ad:5a:e8:ca:e8:63:04:cd:b5:8a:41:
70:ad:dc:b6:b3:24:7b:30:ad:e1:46:bc:8d:1b:ad:e4:37:38:
c3:80:d4:2e:29:86:4d:7b:83:19:65:a9:92:79:88:ba:57:45:
b1:b4:dc:78:a2:ab:74:e7:3b:79:56:0f:a7:8c:12:ff:03:b7:
09:90:6a:3a:6c:de:ae:f8:d4:fb:6b:ff:91:14:10:10:03:e5:
d0:6c:8a:3a:f7:d6:2a:b3:93:b3:c8:74:ea:67:11:d9:8b:8a:
05:e1:cc:e5:f6:07:b4:29:8d:0e:40:fd:11:58:05:b5:e1:a1:
ae:95:ad:77:c4:97:f6:3e:0f:d6:a6:f3:da:0b:76:4f:e7:9a:
ed:e2:46:f5:25:25:b5:66:9e:b3:36:21:c6:54:2a:7b:79:09:
cb:4a:0b:df:42:d6:f0:68:94:45:d1:0f:3b:00:cd:d3:0b:f5:
9b:57:ea:29:01:3c:b0:db:b3:01:a9:66:03:4f:21:aa:ac:f5:
37:92:37:d2:4d:b7:26:8a:bd:57:93:ae:25:cc:a2:4c:4c:13:
40:9b:d8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:32:08 2024 by rpki-client on console-ams.rpki-client.org