Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/kW853kVUj0vjf5Phs8DaHBQ_mn8.roa
File: kW853kVUj0vjf5Phs8DaHBQ_mn8.roa (raw, json)
Hash identifier: ZkrJWoVi8zvTjSW/lrFDGTwmnPJri1BsV0qpeEMDZe4=
Subject key identifier: 91:6F:39:DE:45:54:8F:4B:E3:7F:93:E1:B3:C0:DA:1C:14:3F:9A:7F
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018F1E539D964D1A551FE8A451793D7DE7CE
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/kW853kVUj0vjf5Phs8DaHBQ_mn8.roa
Signing time: Sat 27 Apr 2024 06:52:27 +0000
ROA not before: Sat 27 Apr 2024 06:52:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212496
IP address blocks: 141.98.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1e:53:9d:96:4d:1a:55:1f:e8:a4:51:79:3d:7d:e7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Apr 27 06:52:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=916f39de45548f4be37f93e1b3c0da1c143f9a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:df:91:19:d9:b7:c1:45:3e:f8:bd:82:e0:
1d:55:6e:60:ad:e7:83:f6:c0:f1:10:0e:ef:b5:d5:
95:bf:71:ae:01:56:33:5f:85:70:25:73:3e:dd:b8:
59:bd:13:eb:6d:3d:62:1f:67:31:a9:55:cc:08:0e:
af:4e:8d:1c:56:2a:74:0f:a2:9b:44:68:60:0b:07:
4c:77:92:86:cd:06:a2:e5:b7:bd:aa:c9:4b:4b:d4:
1f:06:92:48:ac:fa:95:1f:a5:9b:f9:54:f2:67:7c:
1d:d5:5f:c7:db:b1:95:57:d6:ee:33:de:f9:10:74:
24:27:c5:d8:dc:84:42:da:38:3e:43:83:ed:1e:6e:
d4:f5:0f:81:0b:3d:34:ff:5a:89:12:d2:f6:22:ea:
1d:5d:9b:04:5f:b8:85:75:c5:d5:7f:8f:df:0b:a8:
ff:29:b9:59:f3:12:6d:24:8b:65:8a:80:a2:95:68:
84:90:b6:09:ce:59:27:fa:f9:36:c1:6a:b1:b5:b1:
8d:8a:9b:25:05:f3:84:15:dc:df:ad:41:be:28:94:
e0:aa:76:5b:6b:d2:7f:a3:ae:36:5c:03:6d:0c:8c:
fc:90:2f:a7:d2:11:e1:b7:f3:8f:14:39:7e:b3:3d:
90:f0:d6:84:09:2c:ec:bc:d5:8a:e4:54:fc:a3:2c:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6F:39:DE:45:54:8F:4B:E3:7F:93:E1:B3:C0:DA:1C:14:3F:9A:7F
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/kW853kVUj0vjf5Phs8DaHBQ_mn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.171.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:59:b4:5d:95:54:4d:36:ed:03:72:4b:62:47:90:9a:85:bf:
77:19:7f:9e:57:ad:7d:cc:72:09:ce:1e:a7:ee:6f:a1:83:a7:
e2:82:6d:95:99:4b:f2:8f:42:50:25:c5:28:8a:e8:cf:cd:85:
b0:5f:cd:44:f6:f6:6f:ae:49:3f:ac:e2:90:3f:b7:14:f0:aa:
13:e9:c4:d4:00:4d:0c:37:bd:dc:68:43:8a:57:16:83:cd:db:
6d:51:a1:41:67:ed:19:bd:e9:95:23:e7:d8:9a:a8:7a:5f:4e:
c5:16:22:d9:5a:dc:1b:aa:11:29:d5:fc:a7:ec:50:28:72:14:
79:46:4c:fe:3a:9d:4b:a0:f6:8d:ea:49:24:04:1a:6f:16:4d:
24:1b:7e:3b:07:ef:f9:ba:30:9b:b4:a0:4f:b6:e3:60:77:46:
4e:7e:9a:7c:a4:6f:ea:c4:ef:c4:25:47:c0:1b:bc:00:4a:8b:
f0:15:c6:13:06:8a:c0:e4:5a:f0:2d:06:20:9d:db:d7:1c:d6:
dc:95:ac:5b:80:e0:d1:d0:8e:fc:32:40:e2:52:45:0e:48:f6:
b5:97:1c:bb:41:69:ad:53:93:22:15:7f:cc:ea:c7:5e:f0:a7:
d7:c0:a7:19:77:29:0c:14:a7:30:25:10:28:fd:70:06:a2:71:
82:9e:5f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 18:33:12 2024 by rpki-client on console-fra.rpki-client.org