Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/KP7dmksx156nK61mcQMYZcrhpRs.roa
File: KP7dmksx156nK61mcQMYZcrhpRs.roa (raw, json)
Hash identifier: WYhZnC+DHitHmI9pUUvCq3VkIIe+G+ZA6X7U8Vr5N+Y=
Subject key identifier: 28:FE:DD:9A:4B:31:D7:9E:A7:2B:AD:66:71:03:18:65:CA:E1:A5:1B
Certificate issuer: /CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Certificate serial: 01919945EE45EA15486FBBB0B501E5D8E1DE
Authority key identifier: B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/KP7dmksx156nK61mcQMYZcrhpRs.roa
Signing time: Wed 28 Aug 2024 13:56:22 +0000
ROA not before: Wed 28 Aug 2024 13:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 193.110.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:99:45:ee:45:ea:15:48:6f:bb:b0:b5:01:e5:d8:e1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Validity
Not Before: Aug 28 13:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28fedd9a4b31d79ea72bad6671031865cae1a51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ab:73:35:44:b6:02:7e:44:41:4d:cb:11:62:
86:d2:23:e5:be:ee:b4:56:91:28:0c:e9:48:73:ad:
16:2e:fc:d7:c7:66:ba:02:98:0f:66:bb:2a:91:87:
8b:03:16:0c:ce:86:ad:66:dd:2f:00:89:7d:db:08:
97:68:49:17:77:af:67:9c:5c:97:9a:f8:9f:f4:f9:
9f:f4:18:2d:42:76:ea:8a:58:9d:46:b4:a5:03:e0:
b7:c1:55:42:3c:69:3a:15:ab:f7:f7:b5:0b:85:c9:
7e:2d:69:76:3b:c4:0c:c7:1f:50:0c:95:f8:67:0b:
6e:f0:ec:03:5f:70:04:21:3c:81:8c:2c:b0:7b:09:
d4:aa:c3:ae:b1:36:a3:4b:a5:3b:50:f7:d3:0c:fc:
36:08:41:9a:e8:0a:f3:8e:bf:f0:a5:cd:b5:0f:9c:
60:25:26:5a:dc:76:9c:3a:df:ae:4a:ae:fb:9c:fe:
81:dc:e4:dd:5d:91:dd:16:dc:a7:45:1e:e5:58:5f:
27:89:0a:71:2d:da:de:7a:da:4b:fd:0b:b5:91:40:
ff:c2:3a:d9:3c:0f:8a:aa:33:30:de:34:aa:47:0b:
bd:a6:b6:86:9a:01:eb:e4:8a:9e:21:c6:3d:18:93:
b2:0b:b7:45:85:12:2b:9b:bc:a8:d6:52:8f:2d:83:
a0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FE:DD:9A:4B:31:D7:9E:A7:2B:AD:66:71:03:18:65:CA:E1:A5:1B
X509v3 Authority Key Identifier:
keyid:B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/KP7dmksx156nK61mcQMYZcrhpRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.152.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a9:e0:57:bd:62:f3:1d:eb:64:6c:59:84:1e:9d:df:5f:ae:
21:52:91:7d:7d:e7:d8:1f:12:1c:2d:80:ec:2c:61:7c:9e:4d:
7d:fc:63:c1:60:9a:89:9e:7b:3b:6e:bc:41:6b:15:5f:1a:e0:
13:12:a3:ea:1b:9b:4d:15:24:b8:22:7d:31:55:7c:56:ba:82:
dc:97:e9:d6:60:c9:45:36:65:4b:e5:5d:9c:8f:54:2c:f9:11:
d2:8a:31:42:af:d3:ef:2a:03:0a:95:e2:32:28:dd:af:7d:60:
4b:38:60:75:ea:bb:4c:5a:4b:2b:05:2d:6a:80:5d:c4:5a:82:
8f:87:7c:34:15:03:ce:28:e0:65:76:dc:17:3a:14:28:36:ac:
9c:17:9c:01:22:99:4c:08:23:46:fb:c3:bb:76:7c:27:88:6c:
b9:22:da:43:6b:69:2f:cd:d3:d8:b3:85:04:cd:e8:e3:61:e6:
54:95:0f:67:de:c4:ab:2e:7b:8d:4c:2b:f1:04:34:b0:ca:f7:
58:9f:dc:21:95:7c:a1:04:66:b6:a8:08:b4:ce:10:62:4a:82:
08:a2:ad:86:77:38:5d:f8:c0:7b:35:b5:0a:ff:83:a3:dc:fc:
f5:6f:5f:04:db:3a:64:76:9a:5c:8b:e9:66:69:6d:c5:5a:db:
59:b9:d8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:53 2024 by rpki-client on console-fra.rpki-client.org