Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/KjG42r7hsWune8v3S014MmWNv6I.roa
File: KjG42r7hsWune8v3S014MmWNv6I.roa (raw, json)
Hash identifier: TPVmjh8y91InJWiEKuBHLKHL9773ucwDIuT+QFl0ru8=
Subject key identifier: 2A:31:B8:DA:BE:E1:B1:6B:A7:7B:CB:F7:4B:4D:78:32:65:8D:BF:A2
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 018CC5DC5160CC1728E32790F8B7E8F16519
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/KjG42r7hsWune8v3S014MmWNv6I.roa
Signing time: Mon 01 Jan 2024 16:29:59 +0000
ROA not before: Mon 01 Jan 2024 16:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203507
IP address blocks: 89.105.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:51:60:cc:17:28:e3:27:90:f8:b7:e8:f1:65:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Jan 1 16:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a31b8dabee1b16ba77bcbf74b4d7832658dbfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:34:21:ce:e5:18:4d:c5:98:e5:e8:1d:86:
86:f4:73:49:65:da:51:6e:67:8a:72:71:f6:2d:c4:
28:f4:7f:a0:e9:bd:93:bb:de:90:50:a9:40:7d:56:
16:79:31:c3:8f:77:bc:a8:a5:e4:02:f7:99:1d:88:
a8:97:d9:9c:d9:b0:61:cc:ec:4d:88:26:83:34:27:
49:d1:ce:e8:26:c0:dc:6f:e5:4f:d3:9e:e3:f8:70:
78:d9:ca:92:4c:76:ec:bb:32:d9:f8:42:47:5e:ca:
6f:cb:98:dd:05:05:ce:c6:47:22:7c:09:27:65:4f:
41:e8:c7:8a:84:15:f1:e1:11:6f:9c:c6:2f:00:3a:
aa:87:ca:dc:d8:15:da:06:b7:17:fa:8e:78:01:00:
92:18:9e:49:84:23:56:7b:ff:5f:77:c6:33:29:74:
2e:88:8a:03:d4:2c:eb:fa:d7:d1:5b:b0:ba:6e:5d:
6a:4d:69:4f:d0:b1:f3:6a:0a:d2:d5:4a:2d:2a:bf:
64:6a:9d:9e:64:76:1e:43:eb:4b:11:9f:53:85:c5:
83:98:0c:d7:ce:bb:35:61:26:e7:60:0f:52:2d:91:
18:e1:3e:e4:d0:ee:2c:87:db:4b:bf:7d:6f:61:44:
42:03:a0:ac:75:a8:6a:53:c5:7a:a8:e0:d0:e5:0f:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:31:B8:DA:BE:E1:B1:6B:A7:7B:CB:F7:4B:4D:78:32:65:8D:BF:A2
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/KjG42r7hsWune8v3S014MmWNv6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.105.213.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:96:d0:7d:fc:8a:dd:d8:9d:b4:54:52:d1:f6:a5:bb:c9:5b:
b2:31:40:9c:97:74:e8:b3:01:eb:90:7f:45:8b:3a:23:84:fc:
dd:db:22:fe:fe:d9:c4:06:bd:d4:b7:46:d4:6b:d5:03:aa:55:
17:51:6d:54:c0:c4:2f:6a:90:f0:06:21:65:08:88:a6:76:00:
ab:b9:59:be:ac:7e:0c:2c:c6:67:2a:1b:46:27:d2:c4:6d:02:
d6:bf:4c:1d:87:8a:fd:e9:d6:4f:37:f0:c5:64:b3:40:13:6a:
78:cd:69:39:71:e5:f5:cd:f5:b3:a0:f8:29:0a:49:6d:fa:b3:
37:d2:8b:c1:6d:e4:b9:99:c9:c5:ef:67:8f:4e:f4:61:8c:21:
40:4e:d4:4b:56:1f:63:75:62:20:d8:6d:df:82:69:97:dc:17:
10:3b:a5:50:4d:ab:2b:c8:c8:98:5d:47:94:00:aa:78:e7:9c:
6e:4c:32:7d:4a:d5:5d:85:7c:96:6f:a2:cd:09:a7:1e:08:3b:
d1:5f:b9:be:02:24:3e:72:90:b2:e6:56:97:ba:89:f3:d2:f6:
8f:b3:3f:5b:d3:fb:3d:14:9c:c1:5c:d0:1f:32:e9:d5:49:8b:
0b:cd:b8:b0:26:e8:77:fc:79:3b:f8:0e:20:b4:a2:34:96:28:
18:64:81:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:47:41 2024 by rpki-client on console-ams.rpki-client.org