Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/khSm1zu-GXSzO40mjIylQPgKv4o.roa
File: khSm1zu-GXSzO40mjIylQPgKv4o.roa (raw, json)
Hash identifier: LcmTemN8Pf/FTor5i7hsP8OJaHx9GCmBh07JQeO9TTo=
Subject key identifier: 92:14:A6:D7:3B:BE:19:74:B3:3B:8D:26:8C:8C:A5:40:F8:0A:BF:8A
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC72753858861FA4533F66C089C1F2B7F
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/khSm1zu-GXSzO40mjIylQPgKv4o.roa
Signing time: Mon 01 Jan 2024 22:31:32 +0000
ROA not before: Mon 01 Jan 2024 22:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200456
IP address blocks: 213.238.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:53:85:88:61:fa:45:33:f6:6c:08:9c:1f:2b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9214a6d73bbe1974b33b8d268c8ca540f80abf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a2:04:f1:5a:38:49:1e:fd:4b:ab:df:d6:10:
66:51:b4:59:1f:dc:6c:8b:ae:b9:62:dc:31:b3:a8:
9b:83:16:42:5a:ef:22:b3:6e:f5:7b:c8:f4:d0:35:
95:e8:b1:a8:38:90:67:86:36:95:13:bb:96:95:88:
9c:6c:31:08:cb:38:2c:97:22:89:17:60:c2:b1:5e:
a0:76:87:c5:69:ed:b6:e4:23:47:22:a1:a4:6e:d8:
09:34:4f:a0:19:79:38:40:0d:8a:1a:07:72:23:a6:
7f:f4:56:10:b2:98:b4:0d:32:87:8d:1c:9f:b0:3a:
86:91:cb:3f:b2:b3:a0:99:68:e1:4c:a3:31:20:f3:
88:33:78:6f:90:91:34:e8:d3:cf:a9:5e:6d:c6:3a:
18:30:6b:1c:9a:c6:3c:59:08:81:09:88:2e:93:5f:
35:94:d7:7c:ca:30:5c:63:a5:85:f3:8e:4b:9c:a2:
a0:05:5e:4c:f6:46:96:0b:9d:f8:77:82:47:4c:e7:
9c:14:04:25:8a:08:f1:36:86:f1:79:2a:ee:4f:05:
70:81:c5:a8:d7:b2:ca:11:e2:36:b6:ed:83:ee:2b:
47:22:5a:b4:4b:1a:a9:ef:e5:16:fc:db:76:b8:d7:
55:46:54:e7:7a:34:e8:0b:54:52:6d:e8:59:59:3b:
8a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:14:A6:D7:3B:BE:19:74:B3:3B:8D:26:8C:8C:A5:40:F8:0A:BF:8A
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/khSm1zu-GXSzO40mjIylQPgKv4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.171.0/24
Signature Algorithm: sha256WithRSAEncryption
71:e0:f6:e1:9a:e7:0d:d1:0d:88:0c:67:8d:ce:31:2d:70:78:
80:e8:55:6f:2f:0c:96:12:fc:30:ac:30:3d:46:ac:83:c1:3d:
52:8d:a2:19:30:5c:c3:f1:09:eb:ac:f6:36:52:ad:24:0d:35:
ea:fb:63:97:d5:c9:3e:cc:e6:a8:2a:3a:61:84:0c:ae:ec:dc:
c2:fd:7a:fe:98:42:90:04:cd:8a:58:12:7d:4f:3f:45:90:90:
54:8c:2d:f3:00:2a:55:d0:bf:d0:f9:4d:ed:06:cc:c0:3b:e7:
42:f1:8c:5f:9e:22:b1:00:9c:ec:db:b9:ac:47:78:8f:13:50:
2d:da:1f:b1:8b:67:f5:a2:44:e7:f0:26:1b:73:e3:c7:68:3b:
21:c6:f3:ec:32:24:ad:e0:32:cd:a0:80:c7:84:77:e8:72:93:
0f:fe:08:66:68:45:f8:45:54:45:05:02:f7:28:87:10:f6:3c:
68:08:f5:1c:0e:28:85:bc:a6:c8:1a:af:d7:b4:53:aa:76:7f:
dc:1f:a1:40:a6:6f:5f:da:8d:7a:be:44:0f:b0:32:21:03:ec:
75:17:7b:ef:ff:2a:95:93:7b:ee:0e:2e:ba:e9:5e:5f:eb:fd:
78:df:ff:61:5b:0f:bf:ff:d2:09:72:59:48:fb:84:f6:e8:3f:
32:d8:2d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:12:26 2024 by rpki-client on console-ams.rpki-client.org