Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/PkbIcnjboVNFXCh_ucRLV5nqo1U.roa
File: PkbIcnjboVNFXCh_ucRLV5nqo1U.roa (raw, json)
Hash identifier: iW6LBTk8EcO6CTacxTpy8nY9XVOfqBjXLSWK/sajzaQ=
Subject key identifier: 3E:46:C8:72:78:DB:A1:53:45:5C:28:7F:B9:C4:4B:57:99:EA:A3:55
Certificate issuer: /CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e
Certificate serial: 0192E8A8C46012EC0B943A4A95644B5B8E82
Authority key identifier: 16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/PkbIcnjboVNFXCh_ucRLV5nqo1U.roa
Signing time: Fri 01 Nov 2024 16:57:07 +0000
ROA not before: Fri 01 Nov 2024 16:57:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214071
IP address blocks: 64.190.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e8:a8:c4:60:12:ec:0b:94:3a:4a:95:64:4b:5b:8e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e
Validity
Not Before: Nov 1 16:57:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e46c87278dba153455c287fb9c44b5799eaa355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:80:6c:fc:da:1c:f9:46:29:29:df:8f:a6:
11:17:88:0d:5f:16:77:b9:d9:25:c5:41:e6:19:b3:
13:5d:bf:a7:66:2c:f2:6d:88:17:db:c2:8f:59:d7:
d3:8d:6b:36:52:1d:53:79:02:72:60:66:b7:36:b4:
42:02:b9:ed:cb:88:19:15:6f:5f:a3:b1:ba:e0:38:
78:95:9e:cd:8a:84:e5:90:b4:24:ff:df:48:7a:32:
f0:cf:f2:22:1d:63:95:6d:9a:28:ec:0d:e8:0f:23:
97:63:e7:4f:01:14:aa:cd:c3:bd:72:d8:a9:c3:f8:
6d:ef:91:db:87:4c:c6:7f:69:bd:d9:09:d2:53:3e:
e8:ee:9f:03:4d:2b:3d:90:27:d9:d5:ac:fb:e3:b7:
79:be:33:67:37:b9:ec:bc:34:4f:dc:39:23:f7:0d:
43:1e:ec:0b:ed:6f:ac:8f:6f:96:73:53:c4:7a:84:
26:9e:83:1c:b8:bc:b2:e1:dd:d1:b3:b7:7b:b8:1f:
11:3c:71:e7:0c:d6:8e:eb:01:4e:ae:91:dd:59:f5:
db:2b:52:12:d7:ae:e7:16:fc:7f:0e:24:0d:2c:8b:
f0:51:66:0d:16:ef:ab:84:74:db:92:c4:43:f9:cd:
cc:dd:8c:20:72:d1:e3:dd:f6:7f:8f:f1:82:ca:79:
e3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:46:C8:72:78:DB:A1:53:45:5C:28:7F:B9:C4:4B:57:99:EA:A3:55
X509v3 Authority Key Identifier:
keyid:16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/PkbIcnjboVNFXCh_ucRLV5nqo1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.219.0/24
Signature Algorithm: sha256WithRSAEncryption
75:75:ad:3b:47:68:56:be:c4:2a:df:cb:40:72:4a:bf:cc:05:
c1:16:09:c2:69:c2:c9:71:ea:e6:c8:8f:d1:14:d9:0d:38:68:
f5:22:f0:18:b0:dd:cc:d8:ca:04:12:ae:6c:f7:a6:4f:4f:b4:
d0:50:b7:7b:26:36:bf:7f:ab:3a:f8:25:66:1b:37:bd:4e:dd:
0f:9e:0e:01:0c:12:6e:67:db:ed:64:4f:87:b0:5d:c5:ae:7b:
1c:54:64:10:a6:07:f0:68:4e:a1:d0:e6:2b:6a:25:a2:81:c8:
0c:ee:16:42:4f:ec:13:b8:85:82:23:9a:c0:d8:62:02:50:27:
0e:f4:5a:92:0b:5d:27:e6:d6:1f:a1:52:fd:a0:a5:af:e8:2f:
fd:69:e9:86:f8:9c:aa:68:ae:5a:2e:98:d7:68:ff:70:d1:94:
32:6d:61:07:3d:86:27:a3:67:c4:36:c9:75:08:e8:87:2e:62:
b9:9a:64:c8:30:c3:ee:38:5f:b2:8d:bf:7e:20:f2:82:4a:94:
73:6f:42:03:20:03:78:e7:4e:00:e5:a5:c9:fe:46:7b:c6:6e:
16:b9:d9:bc:72:c3:bb:ad:b6:c7:b2:b9:8b:4b:23:bd:79:0f:
57:3a:d2:18:1b:25:f8:12:cf:0b:41:94:df:d1:64:12:08:d7:
5b:f7:1a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:06:45 2024 by rpki-client on console-fra.rpki-client.org