Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/KPi_z0BbYA0oXne8oY_HvlM3w38.roa
File: KPi_z0BbYA0oXne8oY_HvlM3w38.roa (raw, json)
Hash identifier: ug/CQYNpoVD3NynHQb/keWsBGhXrCRD9WdVm+aWVGhw=
Subject key identifier: 28:F8:BF:CF:40:5B:60:0D:28:5E:77:BC:A1:8F:C7:BE:53:37:C3:7F
Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial: 019310D123071F3D2DABFFEA8E6994956692
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/KPi_z0BbYA0oXne8oY_HvlM3w38.roa
Signing time: Sat 09 Nov 2024 12:06:01 +0000
ROA not before: Sat 09 Nov 2024 12:06:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204902
IP address blocks: 5.253.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:10:d1:23:07:1f:3d:2d:ab:ff:ea:8e:69:94:95:66:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Validity
Not Before: Nov 9 12:06:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28f8bfcf405b600d285e77bca18fc7be5337c37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:16:4c:0d:a0:0e:50:dc:73:ac:2a:2d:6c:
93:94:20:a2:6a:be:bc:cb:43:93:8f:e6:69:22:70:
f7:df:8b:4c:ea:bf:7f:1b:7d:ce:c0:9f:df:38:8a:
73:51:f6:44:4e:8d:27:7b:fa:80:04:79:60:3a:ba:
30:f8:e0:93:07:18:62:36:8a:4d:a8:24:d8:a1:46:
ba:1f:4d:3d:c0:11:3c:f7:24:dd:fc:2e:18:95:7d:
20:7e:f7:47:b0:fc:4b:fe:cb:97:f7:fb:92:43:aa:
64:9c:86:80:63:c0:43:69:e7:9b:69:7f:b8:3d:6b:
bd:95:62:0d:85:da:c5:47:e1:c2:47:bd:37:4a:6a:
78:0a:0b:10:95:bb:c9:4b:32:5c:76:7f:3c:ef:41:
1d:a5:30:42:60:75:bf:b1:c0:1b:87:f0:ee:1f:bb:
6e:92:8a:ef:7e:69:52:5d:1e:e4:ff:0e:3d:d5:03:
3e:22:8c:86:03:71:51:c9:56:fd:5f:b5:f7:58:9f:
b3:95:b5:84:03:89:25:ca:af:da:51:a7:74:2a:6e:
ec:2b:7e:b6:d5:7e:fe:00:c4:e9:f0:08:6a:20:63:
6d:10:fa:c2:fd:bb:f1:44:e9:06:39:0a:7f:f9:2c:
9d:4f:aa:b8:2c:9a:07:60:94:40:3f:07:d7:50:7b:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F8:BF:CF:40:5B:60:0D:28:5E:77:BC:A1:8F:C7:BE:53:37:C3:7F
X509v3 Authority Key Identifier:
keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/KPi_z0BbYA0oXne8oY_HvlM3w38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:56:e0:ad:46:6c:2c:3f:fa:bb:de:4d:90:69:4b:0f:6e:da:
0f:3c:59:a3:59:28:fb:ef:31:02:bb:8d:0f:24:e7:24:fc:83:
bb:fa:1e:b9:cf:9c:54:d9:99:a6:96:5d:8e:f9:7a:36:82:b4:
95:4e:6b:bc:fd:23:05:86:2f:d5:2b:08:27:14:af:bc:bb:97:
2e:d3:83:18:cc:bb:c9:48:29:5a:72:f9:73:1b:db:b4:c6:b2:
65:18:52:66:64:f9:84:95:95:b5:09:3a:03:33:a4:c5:88:90:
ce:01:0d:a1:c0:79:ab:90:76:d8:84:7b:66:25:c7:e2:ac:af:
b1:77:b3:83:ed:9c:cd:02:df:4c:85:d5:5c:39:d9:06:c3:27:
ba:b3:2d:5c:e7:76:c2:44:5e:4c:85:9a:45:b6:19:9d:c8:8a:
aa:aa:9a:c8:01:b6:12:a0:20:90:ca:10:0d:db:00:0b:e8:87:
fa:11:82:e7:65:4c:5d:1c:51:06:d0:96:15:fb:93:fc:69:ad:
64:04:9e:47:2d:c6:6c:d4:1b:28:94:39:f4:59:28:f7:e9:1a:
93:b8:80:be:ee:b9:3a:87:04:13:6a:57:13:01:4b:f3:a3:07:
b5:e5:a9:fe:a0:91:cf:c2:50:7b:bc:db:ce:ab:e2:a6:04:8c:
de:52:a6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:35:30 2024 by rpki-client on console-fra.rpki-client.org