Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/KAxcj7cyf7al0yT5i2-tesicYok.roa
File: KAxcj7cyf7al0yT5i2-tesicYok.roa (raw, json)
Hash identifier: lKJjON3y+AoNLoYdtu1Amp1pVFsufn3wBK0CRG+tUaM=
Subject key identifier: 28:0C:5C:8F:B7:32:7F:B6:A5:D3:24:F9:8B:6F:AD:7A:C8:9C:62:89
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 018EA787E5BB583176A5114494F7C7E7510F
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/KAxcj7cyf7al0yT5i2-tesicYok.roa
Signing time: Thu 04 Apr 2024 05:14:45 +0000
ROA not before: Thu 04 Apr 2024 05:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 194.165.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a7:87:e5:bb:58:31:76:a5:11:44:94:f7:c7:e7:51:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Apr 4 05:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=280c5c8fb7327fb6a5d324f98b6fad7ac89c6289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:01:37:2d:50:ee:70:8a:71:ae:3a:86:e8:
0f:b2:89:cf:2f:d3:85:5b:ac:46:3c:cd:11:4f:62:
31:80:f3:64:b8:8f:e7:38:ac:f6:9c:c5:db:61:2a:
a8:16:55:71:96:d1:2e:46:87:9a:29:fe:ff:74:71:
70:4a:b3:41:1b:eb:50:da:8d:62:3f:e0:cd:3a:b5:
28:b8:25:01:7c:09:49:f8:92:dc:a8:c6:31:67:6e:
ff:a4:8f:44:e4:0b:87:4d:bb:11:2d:f4:c1:9d:9a:
34:c3:f8:f3:21:46:40:82:ed:fc:dc:a1:a7:15:c4:
e6:3e:0c:5d:7d:30:9e:dd:f8:c8:5b:f8:32:2c:29:
89:b0:bb:6a:48:fb:57:17:14:0a:ab:58:ad:42:b0:
a0:46:f7:12:ed:0d:6e:7f:ff:f9:c9:ad:e1:09:49:
9b:fc:a0:a3:f9:bf:ec:71:1f:6b:8d:51:50:49:9a:
72:ae:5f:6a:70:a0:2c:e1:31:0f:a6:15:bb:df:99:
35:61:d8:6e:75:ff:df:9a:d3:01:cb:0b:6a:63:0b:
32:b9:f4:2e:77:b4:e0:67:80:ee:3f:ab:fb:9c:ca:
9a:0b:4e:82:45:76:23:29:df:5e:ec:81:3e:0b:3b:
39:77:dd:a8:f9:4d:3f:3f:98:c0:93:10:aa:0a:12:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0C:5C:8F:B7:32:7F:B6:A5:D3:24:F9:8B:6F:AD:7A:C8:9C:62:89
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/KAxcj7cyf7al0yT5i2-tesicYok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.37.0/24
Signature Algorithm: sha256WithRSAEncryption
39:11:81:f3:52:05:47:91:55:73:0c:23:0c:be:4b:b8:3d:5a:
a6:ff:f4:67:33:11:e7:ae:d8:12:e0:d6:9b:45:fa:c4:28:29:
03:a2:1f:5e:72:bb:b9:e5:a7:d5:5f:0d:ce:54:d0:a8:15:e4:
65:18:c5:60:2c:f8:0f:c7:12:3b:66:2c:b3:64:9f:e0:58:d5:
33:e5:f8:6c:ec:e6:92:41:b2:d8:dc:f5:63:89:65:07:c7:28:
d0:cd:05:bc:90:5e:6f:66:50:a3:95:1a:1b:b8:37:d1:fb:23:
21:88:4d:11:fe:07:03:5d:39:85:f6:e1:88:ae:37:92:43:55:
41:91:9b:b2:a7:d7:c8:21:67:ad:52:a4:1d:37:bd:e9:bd:1e:
a5:40:e0:86:d9:47:e1:da:ae:9b:64:8c:3a:de:61:79:42:71:
b4:94:e9:c1:53:88:8d:f8:40:24:ba:1d:54:ca:78:2b:b4:62:
5a:44:34:7d:21:f7:cc:43:53:e8:30:fd:5f:fb:6a:7e:07:63:
06:5e:9a:e7:2a:c9:03:d9:13:1b:92:90:d6:71:71:5e:2c:01:
b4:e3:7e:d5:b6:fb:29:e8:54:06:ec:56:79:86:94:3e:50:e9:
1d:e1:02:2d:e0:b6:b6:89:a0:62:48:36:1a:9f:76:51:93:b3:
d9:52:b4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:45:10 2024 by rpki-client on console-fra.rpki-client.org