Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1-lK67ofXQq59iDG0O6hIdSuxz1o.roa
File: 1-lK67ofXQq59iDG0O6hIdSuxz1o.roa (raw, json)
Hash identifier: mPUhwj+x+5gaeM5gPCkP0FiFao1j/yumSrwpQyDFxWA=
Subject key identifier: FA:52:BA:EE:87:D7:42:AE:7D:88:31:B4:3B:A8:48:75:2B:B1:CF:5A
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018CC50049B61BCFF6B1BB418AE0DB1AE8CD
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1-lK67ofXQq59iDG0O6hIdSuxz1o.roa
Signing time: Mon 01 Jan 2024 12:29:39 +0000
ROA not before: Mon 01 Jan 2024 12:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199698
IP address blocks: 217.113.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:49:b6:1b:cf:f6:b1:bb:41:8a:e0:db:1a:e8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 1 12:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa52baee87d742ae7d8831b43ba848752bb1cf5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:99:f4:e7:1a:67:5c:f9:71:8c:e6:ea:72:
c6:85:c7:66:e9:db:c4:c4:e1:c7:0c:84:b5:f7:b2:
08:89:38:b3:0f:63:9c:66:72:3f:3f:f9:2d:0e:5d:
6c:a3:7c:ca:4b:de:90:27:ad:6f:07:0e:4a:61:22:
57:20:c5:6c:16:65:c9:ca:f4:eb:dc:1b:8c:a0:2d:
b8:bf:17:04:22:01:13:f2:2c:e4:fb:d0:6b:0a:8a:
c6:a4:2d:fd:78:31:f5:ec:5f:72:db:c8:40:6c:13:
bf:da:d7:6a:09:1b:c0:02:dd:cb:cb:72:b5:fa:78:
21:be:40:f0:5a:96:a8:f5:67:9f:51:90:e5:72:d4:
10:93:b9:2e:3e:4a:b3:50:c6:b1:04:d5:c8:cb:78:
ba:08:7a:7b:c2:2a:be:4e:f6:51:7b:51:14:5e:3e:
f9:a2:65:1a:0f:1a:4b:48:35:64:91:a5:6a:ff:24:
54:fe:9d:97:32:63:d9:4b:a1:a0:58:0e:63:37:e6:
7a:22:4c:83:df:04:17:33:b3:44:f2:33:89:9a:87:
2e:7b:71:9a:6a:64:92:30:c5:b6:36:61:46:a8:c4:
27:79:0e:8c:29:74:e1:de:a6:58:d3:71:fc:c3:b5:
c1:9e:9c:cf:50:40:a9:1f:48:28:d4:9b:fa:30:e4:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:52:BA:EE:87:D7:42:AE:7D:88:31:B4:3B:A8:48:75:2B:B1:CF:5A
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1-lK67ofXQq59iDG0O6hIdSuxz1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ec:81:fa:0f:83:ad:b2:58:f0:4b:16:dd:78:fd:0e:d2:6d:
47:56:4c:df:a8:85:c6:77:82:04:8a:4c:f4:17:76:86:d6:b4:
89:60:e9:a3:52:31:48:14:4e:4f:bd:9a:f0:2f:66:dd:66:ce:
25:e3:82:41:60:23:82:79:44:7f:03:fc:09:7c:cb:26:42:8a:
ef:9a:94:eb:58:dc:8f:3b:f6:1e:32:c1:0f:63:1a:3f:9e:3e:
5c:bf:05:70:60:1a:6b:54:c1:ae:71:7e:f0:66:3b:72:0c:99:
a4:f0:06:3a:b9:71:d7:88:a9:95:93:95:7e:46:47:2e:12:ff:
08:ae:4a:ad:f3:db:75:e1:13:66:63:bf:bf:c0:5a:98:af:dd:
5b:59:fe:f1:0b:55:04:fb:c5:49:9c:3b:03:14:76:c9:50:c0:
fa:af:ff:c0:ab:00:05:07:4a:cb:dc:f4:a6:56:d4:b4:b3:49:
c9:3c:25:a1:85:29:6a:3d:68:98:db:9c:35:64:00:34:d7:83:
62:ba:eb:fc:ad:6f:7b:94:a8:89:9e:65:1d:9d:be:5e:61:46:
66:46:0e:8b:85:75:ce:68:0c:04:9e:43:07:81:e4:36:ce:17:
1d:ec:21:aa:6d:1f:5d:69:79:8b:9e:d0:7d:4d:1d:e2:cd:49:
44:38:0d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:37:08 2024 by rpki-client on console-fra.rpki-client.org