Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/K2OSE8U5WmyINPzu_XDhcCGzHHo.roa
File: K2OSE8U5WmyINPzu_XDhcCGzHHo.roa (raw, json)
Hash identifier: J6wSw0EfXKNbky6St5K2/n0myFMzNtZnM+DMRgQp5Q8=
Subject key identifier: 2B:63:92:13:C5:39:5A:6C:88:34:FC:EE:FD:70:E1:70:21:B3:1C:7A
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0190A70533E38A0F1BE4A817C310A0CCA466
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/K2OSE8U5WmyINPzu_XDhcCGzHHo.roa
Signing time: Fri 12 Jul 2024 12:57:34 +0000
ROA not before: Fri 12 Jul 2024 12:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214535
IP address blocks: 80.242.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a7:05:33:e3:8a:0f:1b:e4:a8:17:c3:10:a0:cc:a4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 12 12:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b639213c5395a6c8834fceefd70e17021b31c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:03:73:f2:ad:6a:6d:a0:2e:0e:71:be:42:2d:
ce:d7:ba:00:cb:02:63:70:ea:af:e2:a9:c4:e8:50:
b3:52:bb:07:14:4c:91:f5:b2:96:79:ad:25:0f:b8:
ae:18:e3:91:7f:b7:d3:80:54:32:97:f1:63:b1:6d:
7d:ac:de:36:b6:df:7c:d6:b9:85:4d:1f:06:1b:62:
0b:41:14:e1:67:94:f1:fd:d5:c0:46:4a:b9:20:eb:
6b:c4:80:c9:aa:1c:12:7f:43:04:f6:aa:d6:1d:02:
db:b8:a0:c2:d0:ef:c3:c8:56:b6:91:18:0f:3c:dc:
3b:a0:cf:ec:7a:be:22:6b:2e:b5:95:ef:f8:e6:3f:
a3:57:8b:03:44:d9:7a:07:34:8f:4a:f3:4a:90:67:
69:16:f4:46:94:67:2a:a6:02:0d:83:f0:5d:d8:15:
61:02:5d:cd:42:d5:b2:77:14:a5:9d:9c:d2:63:6b:
4a:9c:21:b1:8d:4d:a4:c4:1f:29:ef:f1:7c:09:f0:
9b:71:4a:3e:cf:e6:f5:db:72:1e:32:42:69:0b:6c:
ba:a7:53:65:41:58:90:38:a1:91:5c:4d:69:72:55:
a5:d5:61:1e:5f:b7:42:2d:0e:61:40:38:d4:5e:ba:
c8:b9:70:5a:ed:dc:ab:61:58:53:45:a5:7b:d1:87:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:63:92:13:C5:39:5A:6C:88:34:FC:EE:FD:70:E1:70:21:B3:1C:7A
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/K2OSE8U5WmyINPzu_XDhcCGzHHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.55.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ac:8b:5b:c2:f5:fb:1c:72:af:08:ee:63:dc:42:2c:f1:82:
f5:ba:6f:ca:ab:d6:7e:f7:fd:26:95:4a:dd:e7:87:9d:c8:54:
1f:6a:b6:db:0c:92:e7:f4:76:de:12:9d:41:4f:98:82:60:b1:
f5:c3:51:d8:79:41:58:6f:48:50:bf:77:f9:ee:a0:9b:d5:a2:
48:51:2b:54:40:86:20:1f:bc:73:7a:f8:6d:15:ab:04:bb:6e:
e7:ca:09:d3:3c:b9:bb:f9:c1:3c:65:19:e0:3d:f2:ab:db:8b:
b3:6d:88:b9:cf:85:5c:54:93:0e:42:2a:40:e1:8c:c2:e8:2a:
b1:62:98:94:b1:e0:2c:08:22:c8:e6:af:21:a3:74:0a:38:2c:
21:2a:23:d7:ea:37:d8:c1:1d:8e:97:f5:c7:56:65:4a:92:0e:
37:98:18:a1:16:ca:a0:d1:7a:c2:f7:07:57:30:b2:ef:52:1c:
5e:f5:84:96:89:9d:9b:96:2a:82:86:ab:9e:67:3a:f8:0b:f0:
b5:06:a4:54:04:29:62:d1:d3:10:58:cc:a6:de:8e:33:97:77:
0e:85:1d:3a:85:b1:c3:26:89:c5:00:15:df:8b:1b:1a:78:4d:
22:43:fd:64:9f:a9:21:cb:04:07:1b:cc:16:99:24:c7:d3:ce:
dc:3f:f4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:53:17 2024 by rpki-client on console-fra.rpki-client.org