Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/KBFEJCAQDFm-mMHCwXjxQWEV-cg.roa
File: KBFEJCAQDFm-mMHCwXjxQWEV-cg.roa (raw, json)
Hash identifier: cmLD7LGvdFveSWraJTmUrAYks16VUwNtL176BVUM3BY=
Subject key identifier: 28:11:44:24:20:10:0C:59:BE:98:C1:C2:C1:78:F1:41:61:15:F9:C8
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 018CCADE0A80FBC9697438F90BD953E0602E
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/KBFEJCAQDFm-mMHCwXjxQWEV-cg.roa
Signing time: Tue 02 Jan 2024 15:49:58 +0000
ROA not before: Tue 02 Jan 2024 15:49:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400909
IP address blocks: 45.151.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:de:0a:80:fb:c9:69:74:38:f9:0b:d9:53:e0:60:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Jan 2 15:49:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2811442420100c59be98c1c2c178f1416115f9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:49:6b:db:76:0a:e0:65:14:ff:8a:42:cb:
a5:0b:6e:0e:5b:41:b6:e2:ce:3b:83:e4:95:9b:8e:
ed:45:61:45:cc:16:06:75:f2:37:04:81:7c:16:c1:
68:92:39:63:0d:cc:62:45:42:65:31:83:b4:fb:07:
48:82:0e:69:69:6a:e7:2b:d8:27:9e:b7:32:ae:04:
42:a7:97:01:25:cc:bd:8e:cf:80:28:f1:1b:52:6b:
70:4f:c5:19:fc:d1:cb:44:39:8a:c5:d3:25:68:62:
de:e4:cd:c7:5d:42:3c:53:42:60:46:ea:65:4e:6f:
ea:48:42:69:a7:2c:b0:b7:16:b5:cd:e6:3d:17:63:
eb:84:ec:90:9b:c4:a2:51:06:9c:1e:d9:7c:2d:9b:
69:13:78:40:ab:10:fb:61:3d:5b:6e:6a:49:5e:a3:
41:a0:63:a2:4a:35:51:bb:08:54:fc:75:ef:d5:5c:
17:51:64:1a:d1:70:c4:2e:f1:e6:81:43:0e:dd:b1:
53:e0:b8:0d:31:3d:e4:55:3f:6c:fd:5a:de:de:d8:
f6:f9:91:04:15:b2:ee:b3:d1:ba:82:43:d0:74:ed:
43:b3:c9:fc:eb:ff:e1:a4:b9:67:7c:35:7e:6e:59:
d5:c5:88:32:f4:e8:52:46:27:69:0a:cf:5d:59:7b:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:11:44:24:20:10:0C:59:BE:98:C1:C2:C1:78:F1:41:61:15:F9:C8
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/KBFEJCAQDFm-mMHCwXjxQWEV-cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.142.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f8:d9:a9:f5:61:27:0c:f8:91:15:59:07:55:73:35:b0:2e:
5a:ca:3a:5f:cc:38:32:37:3a:3c:a1:42:11:7f:83:f2:7c:05:
c1:bb:8f:d5:96:ed:98:d6:1c:c9:0f:32:d0:c2:cb:b9:8d:70:
a3:bf:20:e8:b6:18:24:a2:47:b3:b7:b5:af:73:83:96:68:8c:
a8:75:9d:db:5b:0a:1c:cf:0f:c9:cb:e2:5a:df:d2:b2:76:6a:
5e:52:7d:07:97:2a:f6:ca:06:24:76:b4:57:ee:7d:78:7c:03:
af:02:4b:a3:3e:98:bb:01:3c:75:60:1c:52:c6:07:ce:9c:8f:
c2:81:18:8b:ea:18:27:8f:f0:0e:d3:e6:a4:b9:04:2f:15:c6:
1b:7b:54:e2:59:be:27:e4:b1:a6:8b:2d:a4:13:f0:65:f9:a5:
a1:f8:d4:15:d2:55:16:08:c0:4f:9d:89:3b:e9:2f:f6:f9:d5:
54:ee:20:95:3f:89:51:74:35:4c:5a:fd:7d:18:96:ca:a7:54:
60:86:e2:25:7c:0d:ef:40:4d:3e:17:4b:55:7e:6b:f6:99:24:
e0:f5:11:c0:93:d2:0c:30:1f:6a:cb:7d:af:72:0b:c6:df:16:
e1:8c:4a:8c:f9:aa:07:32:2f:73:e4:f5:da:43:89:0c:44:b9:
35:f1:1e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:58:24 2024 by rpki-client on console-ams.rpki-client.org