Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/KESWMVcxeTppypiR7cq06mLrLMs.roa
File: KESWMVcxeTppypiR7cq06mLrLMs.roa (raw, json)
Hash identifier: 7rOjFuNovVOeGRNT4isxALpgv74XZJVQuMCoUPpfvkE=
Subject key identifier: 28:44:96:31:57:31:79:3A:69:CA:98:91:ED:CA:B4:EA:62:EB:2C:CB
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 018CCA2983E774D99E9D1F8EF9DF5EC7B177
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/KESWMVcxeTppypiR7cq06mLrLMs.roa
Signing time: Tue 02 Jan 2024 12:32:47 +0000
ROA not before: Tue 02 Jan 2024 12:32:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32727
IP address blocks: 85.203.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:83:e7:74:d9:9e:9d:1f:8e:f9:df:5e:c7:b1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 12:32:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=284496315731793a69ca9891edcab4ea62eb2ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:c3:46:d6:0f:34:c1:34:fc:e8:cc:a0:ff:
29:cc:95:86:6a:d9:d6:b4:0f:c7:23:91:8f:15:b3:
0e:f1:7c:e7:4d:f7:ef:a4:5e:07:b7:71:24:ef:ad:
8d:cd:bd:14:ce:e2:8f:04:8d:c8:21:9a:17:ad:2c:
06:e8:28:89:cb:20:ef:ac:85:d5:60:29:f8:b5:76:
49:f7:77:99:bd:88:22:cb:60:0b:c4:fb:5c:ff:67:
85:e4:d4:8d:34:bc:19:dc:2e:fd:07:0e:05:56:12:
b8:da:27:2b:db:b1:4b:8a:ce:8e:58:dc:19:fe:af:
80:e8:52:2a:f3:56:aa:ce:b1:3e:e3:aa:29:06:65:
73:25:2d:44:24:b1:0a:82:f5:34:d7:41:4f:fd:7e:
70:03:5f:ea:53:6f:c5:23:05:76:03:13:3d:7e:c6:
4c:3d:9e:ba:da:ef:12:03:d0:c0:84:d2:3b:56:76:
29:c0:7e:0f:be:3f:74:76:0b:d9:66:70:2d:91:23:
5b:e9:66:71:12:05:c1:77:d1:c7:4c:f2:1b:23:99:
c4:b7:62:a7:a6:e1:b7:c4:63:2f:51:bc:d3:d9:b7:
6f:72:ab:c1:76:55:b1:09:e2:9c:19:f4:5e:6d:41:
8c:b5:db:00:22:f3:fe:c3:f2:71:6f:f5:93:14:8c:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:44:96:31:57:31:79:3A:69:CA:98:91:ED:CA:B4:EA:62:EB:2C:CB
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/KESWMVcxeTppypiR7cq06mLrLMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.54.0/24
Signature Algorithm: sha256WithRSAEncryption
86:5c:09:5e:43:e5:5a:f2:e7:6e:13:04:62:70:3d:b7:f5:ad:
16:13:1b:51:1f:df:19:34:52:f6:e1:68:27:46:e8:78:81:a8:
3d:a0:b9:53:f8:9a:2a:ac:b9:f1:38:a9:b8:81:a2:ce:19:eb:
ba:af:f6:e3:20:83:09:79:e0:f3:3e:6c:2a:c9:ce:52:b6:4f:
2a:f7:40:1f:97:5d:13:11:00:23:9b:a9:d3:72:65:88:01:b4:
6b:e9:4f:44:d0:47:56:53:06:cc:a4:a6:74:f9:b7:6d:fb:30:
32:94:c1:5a:99:f5:64:b8:85:60:be:24:08:68:e9:0a:41:f6:
ac:65:55:95:d2:5d:4b:3d:8f:f0:40:6a:a6:33:42:70:f6:e8:
b1:77:f5:30:fa:fe:bf:54:69:48:a6:1d:f2:6e:46:d1:b2:92:
9e:6a:4a:b8:03:65:6d:7a:0d:0c:0d:0d:24:8f:e6:4a:73:cf:
41:92:65:4c:14:34:c7:87:15:78:e3:9d:52:c5:fb:d3:11:bd:
6e:22:ae:0a:a7:40:fc:5d:ea:cf:5d:d7:4c:f3:97:6d:1a:25:
97:e5:24:70:17:a0:e8:d6:26:08:1f:33:47:fc:53:ba:02:31:
8b:15:60:af:7e:8a:b4:f5:45:69:4a:a3:91:37:1b:41:3c:7c:
b1:70:99:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:16:43 2024 by rpki-client on console-ams.rpki-client.org