Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/kjpiu_3L7j5zidYb8FibX6kf2xc.roa
File: kjpiu_3L7j5zidYb8FibX6kf2xc.roa (raw, json)
Hash identifier: AjqJ3TsXr7HLcBVflpbl50HvNG0AXSTm8YF5G340rWQ=
Subject key identifier: 92:3A:62:BB:FD:CB:EE:3E:73:89:D6:1B:F0:58:9B:5F:A9:1F:DB:17
Certificate issuer: /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial: 018ED92557B94B3D8F5768AC1E25C56C39D7
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/kjpiu_3L7j5zidYb8FibX6kf2xc.roa
Signing time: Sat 13 Apr 2024 20:28:06 +0000
ROA not before: Sat 13 Apr 2024 20:28:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208324
IP address blocks: 85.31.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d9:25:57:b9:4b:3d:8f:57:68:ac:1e:25:c5:6c:39:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Validity
Not Before: Apr 13 20:28:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=923a62bbfdcbee3e7389d61bf0589b5fa91fdb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:80:82:53:66:21:d6:d0:16:9a:c6:f3:62:
8d:92:a0:f2:b1:28:0d:a6:26:8a:70:95:a4:69:29:
dd:12:9c:78:cb:bc:b8:64:61:28:b2:4c:25:0b:8b:
a9:51:ef:7c:c0:86:69:68:71:59:37:ba:aa:47:80:
30:f5:d7:40:ba:4a:99:27:b2:b1:35:49:4c:64:1c:
53:2c:a2:94:53:d3:e6:24:c8:10:00:5d:bc:70:65:
cc:75:cc:6c:30:73:c2:6e:66:11:1e:32:fa:c6:a7:
a1:d1:05:98:95:f3:fd:19:72:7f:c7:b7:9b:6e:0c:
5f:96:09:e0:22:a5:f0:c0:db:43:ce:00:54:b0:94:
56:77:ff:cf:a5:33:fc:ed:d0:ba:1b:94:ae:cd:b4:
17:3e:f9:a4:5b:8b:09:e3:c9:b6:21:d8:b7:85:fc:
ec:36:de:b0:5d:ee:55:49:30:b2:b4:c5:68:98:84:
7f:fe:41:58:fc:aa:2b:e6:d2:19:29:32:94:91:22:
94:89:a8:61:e2:a8:b7:c1:43:5e:bd:6a:17:40:e2:
3b:2e:35:cf:65:51:98:d2:56:9d:52:d3:70:61:73:
3d:83:84:bd:53:c7:f9:2b:79:91:52:ef:2b:56:7d:
5e:d7:52:35:1f:26:b1:63:9c:66:ad:fe:22:c8:cd:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3A:62:BB:FD:CB:EE:3E:73:89:D6:1B:F0:58:9B:5F:A9:1F:DB:17
X509v3 Authority Key Identifier:
keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/kjpiu_3L7j5zidYb8FibX6kf2xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.41.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4e:1e:82:d2:be:02:ae:07:f8:0e:9f:e4:09:5a:26:74:60:
20:9e:55:12:14:79:90:82:a3:8c:5b:d3:2d:93:f8:3e:62:1c:
ac:3e:1a:c7:a7:f5:0c:3f:69:f2:ba:2d:60:54:7d:5f:86:5f:
d5:ef:08:03:99:0f:b6:6b:e2:80:a5:50:b8:db:cb:dd:3a:7b:
aa:87:e5:e8:6a:1b:cf:83:aa:c2:56:11:7a:0d:79:91:01:07:
94:1b:b6:55:06:a5:3b:d9:8c:0a:a4:51:99:be:1a:3a:b4:3f:
ff:8e:5b:66:61:df:f3:1a:50:eb:84:3d:3d:c1:02:b0:32:2c:
2d:7e:c6:e7:4b:a6:88:f0:e9:34:08:35:bf:30:09:a0:94:9e:
fd:c6:07:6f:9b:ad:2b:b7:d4:af:d1:e5:1d:35:3a:45:b4:fc:
d2:85:03:23:a1:13:39:b4:d7:0c:19:5f:e4:f8:25:d6:1b:93:
cf:cf:4e:1d:e6:d9:28:7d:75:7d:35:41:c9:cb:94:ba:7d:5d:
18:75:78:35:62:61:a5:fd:a0:f7:06:3b:47:16:16:eb:2d:e2:
d7:c7:45:15:7c:db:2c:b2:2c:d4:20:5e:9e:75:fc:e4:ef:e9:
03:88:ef:cc:a7:a3:ed:32:ba:18:1c:b2:09:0a:5e:bd:bb:ac:
f2:fb:6c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:00:47 2024 by rpki-client on console-ams.rpki-client.org