Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kavJT02QTNs1494sSKhOE94s1JQ.roa
File: kavJT02QTNs1494sSKhOE94s1JQ.roa (raw, json)
Hash identifier: s0xIF2CFdxTaaCnY/nNUjim6tytYFiatiL880NU9ZC0=
Subject key identifier: 91:AB:C9:4F:4D:90:4C:DB:35:E3:DE:2C:48:A8:4E:13:DE:2C:D4:94
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01934EE9905B13C2B558E635ACCD9FB27624
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kavJT02QTNs1494sSKhOE94s1JQ.roa
Signing time: Thu 21 Nov 2024 13:29:09 +0000
ROA not before: Thu 21 Nov 2024 13:29:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 146943
IP address blocks: 5.175.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:e9:90:5b:13:c2:b5:58:e6:35:ac:cd:9f:b2:76:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 21 13:29:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91abc94f4d904cdb35e3de2c48a84e13de2cd494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:f0:35:86:aa:83:44:ee:8a:b8:92:60:04:
e5:4f:e4:60:30:0d:d7:ba:96:cc:8d:e6:77:3b:37:
2b:e1:ae:cd:0f:c5:f9:3b:d3:76:09:2f:d6:c0:ee:
a8:6a:ac:d6:51:f5:a4:2a:19:30:a7:e8:cb:c2:09:
68:a4:fb:9d:59:6d:ed:df:7f:f7:57:ba:fe:64:37:
2a:54:4c:64:e1:ca:0d:07:49:d2:8c:7e:e2:c4:25:
f8:c6:82:a0:29:7b:9d:1e:a1:da:f2:39:2a:26:b3:
86:48:7f:90:2c:b7:af:83:88:09:b0:6a:8a:e6:0b:
23:44:90:1b:15:7f:7f:8b:f0:85:f3:22:49:dc:b0:
a0:4c:b3:e1:0c:c6:b1:2e:f7:03:2e:70:f5:c5:58:
7b:2d:6c:55:a9:31:3b:88:ff:05:37:47:21:73:f0:
16:74:a1:b3:1e:6d:20:7e:23:7f:69:c7:a8:bf:ea:
d5:be:98:52:ff:98:17:09:11:ec:67:6d:58:86:e9:
b4:d0:15:86:94:ab:72:e3:d1:18:6c:40:bc:88:a4:
da:59:3b:f7:15:5e:c6:28:3c:e5:c8:62:ba:45:2f:
89:48:9c:4b:76:d8:1d:ba:f6:9a:b0:42:32:0b:19:
b6:48:55:25:71:2e:10:14:47:f6:60:59:06:35:8f:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AB:C9:4F:4D:90:4C:DB:35:E3:DE:2C:48:A8:4E:13:DE:2C:D4:94
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kavJT02QTNs1494sSKhOE94s1JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.139.0/24
Signature Algorithm: sha256WithRSAEncryption
01:32:10:74:11:82:ea:ee:d2:c8:cd:86:bb:64:c6:ff:5c:be:
25:13:8e:b4:76:65:9b:85:9a:04:cc:4d:8f:9b:02:1a:45:f9:
a0:c0:d5:52:4b:52:31:5f:51:74:e4:9b:fe:9d:54:a7:98:8c:
dd:44:7a:36:96:d7:3e:b8:5b:a0:5d:06:26:02:30:98:05:82:
16:13:0b:ed:82:32:63:a0:a4:ed:15:57:43:90:17:15:f1:cc:
61:2e:b4:e8:37:23:a5:ca:65:12:49:74:7d:51:9d:d7:ea:3e:
ef:1d:4b:8e:81:a3:e7:ae:1a:2c:72:40:23:2d:02:af:6d:ae:
d7:70:ca:f5:b2:0b:6b:3b:74:f4:c6:04:1c:b8:a5:1a:85:66:
89:03:2c:dc:6b:0b:1c:4f:4a:38:bb:3f:9a:72:5d:8b:24:f8:
cf:97:5a:b3:7e:f5:42:59:3a:63:ae:9e:62:b5:9b:eb:42:64:
a2:39:1c:83:e2:ae:0a:33:6f:30:7a:4a:88:1a:a7:25:af:f1:
d1:e3:d9:cd:34:c8:e7:52:d2:34:87:73:b2:48:9d:3e:fa:7f:
79:7b:b4:db:ba:4a:20:d1:a7:ad:cc:f9:3d:be:b5:06:79:bc:
2b:8a:e2:9d:40:a1:50:8d:d1:09:b3:71:13:9f:d1:63:32:cc:
9c:65:36:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:44:44 2024 by rpki-client on console-ams.rpki-client.org