Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/kK22u1ntArhccpCxcjd22WJ4HiE.roa
File: kK22u1ntArhccpCxcjd22WJ4HiE.roa (raw, json)
Hash identifier: /XDPbBXlabU+oT4jhiFLsesk7TDovr3+B1DAWzpwgCA=
Subject key identifier: 90:AD:B6:BB:59:ED:02:B8:5C:72:90:B1:72:37:76:D9:62:78:1E:21
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 018CCA2A3CF2A47C01E5C15B3A2406C7F568
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/kK22u1ntArhccpCxcjd22WJ4HiE.roa
Signing time: Tue 02 Jan 2024 12:33:34 +0000
ROA not before: Tue 02 Jan 2024 12:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15096
IP address blocks: 193.72.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3c:f2:a4:7c:01:e5:c1:5b:3a:24:06:c7:f5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Jan 2 12:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90adb6bb59ed02b85c7290b1723776d962781e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:61:51:c3:ad:ff:68:bc:22:da:23:7e:62:d6:
f0:f9:3d:8d:ce:31:91:c8:dd:18:de:95:4b:3e:59:
bf:e8:7e:47:56:ab:62:9b:c7:4a:32:e0:55:78:c6:
b8:23:6b:49:aa:b7:9f:e8:03:cc:62:43:e7:5c:68:
b9:1b:70:03:fd:b5:8c:75:36:86:96:35:65:15:7c:
63:f2:01:11:ef:8c:09:1f:ad:36:ab:31:8d:dd:8b:
70:ce:1b:5c:e4:57:28:17:b6:a4:cb:e3:38:88:d1:
ab:5e:9f:a6:ba:97:ba:e7:95:cb:54:86:0c:4c:2a:
d6:48:4f:cd:06:51:f0:fa:3e:06:7c:72:e6:29:6f:
30:85:57:d6:65:c4:64:81:90:a2:f4:4d:38:4f:3a:
c4:26:75:ad:f8:51:29:07:44:6f:45:8d:4f:de:0d:
7a:3b:45:e2:d7:08:40:a1:dd:0a:d9:25:eb:33:62:
3a:2b:67:9c:b4:45:2d:70:fc:72:fc:bb:1a:89:a4:
b7:52:3f:44:8e:13:a8:56:be:13:35:f7:74:73:60:
fc:d9:9d:e7:c2:a2:15:0a:65:c1:37:da:cf:d3:e0:
c0:47:81:51:c0:a1:32:7b:bd:1c:0a:ff:ae:49:73:
cc:91:c5:6e:18:83:b5:a9:bf:af:2b:e5:f5:21:36:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AD:B6:BB:59:ED:02:B8:5C:72:90:B1:72:37:76:D9:62:78:1E:21
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/kK22u1ntArhccpCxcjd22WJ4HiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.72.216.0/24
Signature Algorithm: sha256WithRSAEncryption
79:53:82:cb:1f:85:95:83:1d:58:1d:c4:ea:90:84:ca:f7:b7:
e1:9e:43:65:28:09:a2:f2:4d:a1:1b:62:3e:05:26:ba:db:ba:
61:29:4c:55:4d:95:f4:ee:77:70:8f:84:69:38:f1:0c:44:28:
1e:f2:09:db:a6:fb:78:90:79:e2:2f:05:5c:70:08:d9:71:3f:
e9:d7:8f:18:de:78:85:62:26:de:73:08:e0:da:0b:53:2f:e1:
28:c9:ed:f8:0d:43:03:03:c9:36:a9:eb:80:b4:4c:bf:23:c3:
a3:42:3a:2f:bf:f6:51:c3:88:68:af:4a:7d:96:d4:b2:5f:63:
3e:10:47:07:7e:8a:39:3a:0d:37:c2:22:4b:08:79:3e:03:d1:
0a:3f:82:b5:35:62:b3:19:c4:13:1e:0c:29:6e:6c:11:00:59:
fd:dd:15:df:80:7c:02:22:3f:a9:fc:0f:e3:9d:f9:eb:1f:af:
74:0f:e5:75:e5:13:48:9b:d9:4d:65:30:72:6e:91:1f:f8:7d:
76:e7:38:31:a2:dd:d4:6e:2c:23:54:ad:29:65:06:ec:5f:fb:
4f:fa:da:c8:f1:22:48:68:69:b6:0d:2d:26:06:58:51:39:5e:
1f:7a:bf:a8:4c:e7:96:fc:59:fc:58:b9:13:47:33:8d:c8:bf:
b1:b1:d3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:07 2024 by rpki-client on console-fra.rpki-client.org