Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/KZhg2a-gVKf281hl9ixBZ5OH50g.roa
File: KZhg2a-gVKf281hl9ixBZ5OH50g.roa (raw, json)
Hash identifier: bEci4Gz3A/OfYu/SOWalohuK8KM+d49JCoMleZ7j5js=
Subject key identifier: 29:98:60:D9:AF:A0:54:A7:F6:F3:58:65:F6:2C:41:67:93:87:E7:48
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018CC9BCD505FE063B86243D329CEA714E7B
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/KZhg2a-gVKf281hl9ixBZ5OH50g.roa
Signing time: Tue 02 Jan 2024 10:34:04 +0000
ROA not before: Tue 02 Jan 2024 10:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41786
IP address blocks: 2a02:2698:2400::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d5:05:fe:06:3b:86:24:3d:32:9c:ea:71:4e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 2 10:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=299860d9afa054a7f6f35865f62c41679387e748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:4e:b8:70:58:68:ad:6a:71:00:ee:1a:97:
09:82:e2:6a:b3:b3:e7:8f:50:d7:1d:2a:de:63:04:
25:c2:cc:1c:49:0f:9b:cd:c4:c4:25:1e:a2:69:53:
6d:79:7e:89:3e:4f:dd:36:c2:24:bc:9a:49:90:48:
38:be:f6:1e:52:20:33:84:47:46:83:f2:96:54:c7:
db:7e:4f:37:e4:f7:cd:2e:6f:a6:ab:c5:2b:be:3e:
c8:7b:33:8b:a4:68:0f:ab:49:96:77:ee:c0:8a:82:
b3:23:5f:56:e2:10:41:f5:14:1e:57:bf:82:15:7e:
e1:27:3f:63:94:47:69:18:6e:5d:25:90:fa:55:99:
d2:2d:19:45:8b:c9:bd:c7:ff:9f:1f:fa:06:28:30:
e6:0e:68:4c:b5:b1:2d:f3:99:37:01:47:b0:e2:45:
60:15:b0:d4:f1:6f:04:58:46:cc:02:c8:9d:ff:f9:
3d:6a:c9:17:d3:aa:c0:80:5d:1d:6c:26:98:ff:81:
1b:52:f0:43:a7:da:12:5f:5c:a1:f0:32:ef:ea:ab:
8c:57:39:3b:76:e1:ec:6a:d6:bf:b7:6c:e1:c2:3e:
5d:e0:17:6e:cc:d3:86:0a:95:16:d4:8c:3c:d6:79:
de:18:51:e8:a2:1f:d5:4d:cd:76:de:fc:a6:48:20:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:98:60:D9:AF:A0:54:A7:F6:F3:58:65:F6:2C:41:67:93:87:E7:48
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/KZhg2a-gVKf281hl9ixBZ5OH50g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:2400::/38
Signature Algorithm: sha256WithRSAEncryption
cd:80:96:84:02:55:b2:b1:e6:36:4d:51:e4:b1:1b:e9:1d:a9:
8d:35:63:ff:2d:f1:12:ed:06:20:d8:05:4c:e0:41:4e:15:84:
77:ea:53:2a:b2:dd:bf:b4:3e:c5:b8:e8:c6:7a:53:6f:64:87:
1f:75:17:b3:6d:2c:71:3b:10:e2:7c:63:d7:8c:3b:97:50:a0:
13:d5:1a:c2:84:17:70:be:b1:8b:bf:35:6e:c4:fe:a4:a5:42:
13:2c:d5:8e:06:d9:e7:38:df:5a:ae:79:f5:d8:fe:77:f5:f3:
f2:15:2d:3f:a4:4d:cd:32:73:60:db:12:8f:24:cd:d8:a4:d9:
18:3e:6f:cf:59:79:86:f9:ea:0d:70:e4:29:54:34:7a:01:b6:
f4:ae:73:6e:ef:51:b4:aa:1d:c3:51:41:1a:f6:1c:34:67:54:
7a:5f:84:30:dd:d5:b2:4c:16:07:6d:f8:fd:89:5a:99:59:a1:
21:b1:01:e3:75:49:93:1a:b7:92:12:8e:57:c1:70:c3:02:99:
4c:bc:f1:a7:88:8d:49:89:54:f7:e3:1e:9f:58:50:58:3a:48:
18:24:81:8d:36:8e:0b:2d:94:44:64:de:81:fc:42:12:17:79:
18:6e:9f:b0:92:ab:c9:bf:be:00:5e:e1:c7:74:8d:6a:70:73:
68:ca:61:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 04:25:00 2024 by rpki-client on console-ams.rpki-client.org