Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/KLjc0NBv-ejDYc_Qf2CS9c3OeKg.roa
File: KLjc0NBv-ejDYc_Qf2CS9c3OeKg.roa (raw, json)
Hash identifier: ZW+8Ovsgp1SEh77ocvYJF46Txf0DshR5nRgcIZQGpr0=
Subject key identifier: 28:B8:DC:D0:D0:6F:F9:E8:C3:61:CF:D0:7F:60:92:F5:CD:CE:78:A8
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 018CC348D11ED5F1868436B99DE96911927D
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/KLjc0NBv-ejDYc_Qf2CS9c3OeKg.roa
Signing time: Mon 01 Jan 2024 04:29:38 +0000
ROA not before: Mon 01 Jan 2024 04:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12651
IP address blocks: 193.246.0.128/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d1:1e:d5:f1:86:84:36:b9:9d:e9:69:11:92:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 04:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28b8dcd0d06ff9e8c361cfd07f6092f5cdce78a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d9:f4:6b:fe:3d:29:46:f3:39:48:83:b3:69:
d7:d8:f1:b4:37:4d:3f:ae:c6:00:b3:d2:f6:3a:6a:
ef:01:4c:be:af:3b:73:5e:d8:8b:23:7d:32:1b:cf:
e5:71:4c:16:43:7e:25:d1:be:72:75:e3:7d:88:49:
6f:23:33:09:2d:cb:e7:3e:db:b3:9b:be:d9:52:0e:
2c:99:77:e6:6d:6a:67:7d:c2:37:ff:7d:1d:44:76:
7b:b7:31:1c:f8:03:34:e0:ad:b9:74:05:d9:9c:5c:
49:89:72:8d:90:60:3a:ce:5c:02:82:9d:2a:3c:86:
b0:e3:15:9e:70:6b:3f:c5:6f:a4:d9:ba:95:89:69:
69:8e:ac:22:33:20:fc:76:4c:6d:db:b6:c1:f9:32:
bc:ba:13:c5:d4:2e:23:60:fa:40:df:ce:d4:9b:24:
fc:a4:ed:cf:86:df:42:b6:39:f7:e4:af:2a:0f:dd:
d8:89:e9:ad:6b:ba:0b:ee:8f:24:fe:1e:55:03:f6:
64:ad:c3:94:81:fb:ee:0e:e6:45:e4:d9:e2:4b:d3:
b7:b3:5e:42:a4:c5:8d:3a:ad:8a:47:d8:94:8e:8f:
f7:17:7f:22:49:47:a7:ca:30:c0:f2:45:83:50:53:
42:45:29:96:74:55:b6:eb:bf:e5:3b:5c:8f:8d:c1:
97:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B8:DC:D0:D0:6F:F9:E8:C3:61:CF:D0:7F:60:92:F5:CD:CE:78:A8
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/KLjc0NBv-ejDYc_Qf2CS9c3OeKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.0.128/29
Signature Algorithm: sha256WithRSAEncryption
66:b5:b0:dd:9a:67:fe:fc:b8:03:c4:aa:87:ce:d8:fa:fb:08:
a3:fd:cf:6b:db:b4:76:33:6a:0d:a8:b0:0d:39:ab:90:9e:95:
de:9b:6d:48:e4:38:1c:bf:d7:35:8e:64:b8:d0:33:85:22:07:
cb:87:f1:94:59:65:2c:d1:ec:05:12:38:75:6e:36:a8:4e:22:
3a:b6:83:64:90:09:c4:b0:de:8c:8f:5b:0b:30:04:a2:20:da:
b1:ad:8f:98:32:80:71:16:2b:92:cd:1c:b5:b2:c3:98:27:48:
8d:41:86:d6:bc:32:cb:d5:0e:3a:8e:d7:61:9c:bb:d1:46:b9:
9b:a1:af:38:08:38:b9:1f:eb:15:36:1f:53:ef:05:71:b8:db:
7c:4c:0d:68:7f:9a:8c:b1:3c:65:69:9e:82:55:34:47:c0:93:
b7:fa:89:aa:a8:83:b5:e5:47:77:3c:e2:97:0e:62:d8:07:71:
12:6d:f1:16:7a:ed:f9:4a:3b:18:94:f2:eb:eb:37:f8:ea:ef:
93:5b:aa:8f:c9:d5:e6:c2:b2:86:c1:35:72:c6:b7:49:46:36:
ea:3f:2c:4a:58:49:34:6a:43:ef:22:23:1e:fb:18:96:1b:32:
50:d7:e7:75:fc:52:90:a1:38:26:0b:73:d9:db:c5:cb:62:a1:
e9:e3:f8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:37:36 2024 by rpki-client on console-ams.rpki-client.org