Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/kZxX_N3VP72sz8Yw2q-i3Nb6kLc.roa
File: kZxX_N3VP72sz8Yw2q-i3Nb6kLc.roa (raw, json)
Hash identifier: vKOxxieJBK52003sjM11DwMK8HqIK0g0gYtc28pHWjA=
Subject key identifier: 91:9C:57:FC:DD:D5:3F:BD:AC:CF:C6:30:DA:AF:A2:DC:D6:FA:90:B7
Certificate issuer: /CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
Certificate serial: 018CC3490DA907AD2F3792C7E110DF4F5F73
Authority key identifier: 17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/kZxX_N3VP72sz8Yw2q-i3Nb6kLc.roa
Signing time: Mon 01 Jan 2024 04:29:53 +0000
ROA not before: Mon 01 Jan 2024 04:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199819
IP address blocks: 193.8.197.0/24 maxlen: 24
2001:678:75c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:0d:a9:07:ad:2f:37:92:c7:e1:10:df:4f:5f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
Validity
Not Before: Jan 1 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=919c57fcddd53fbdaccfc630daafa2dcd6fa90b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:0d:f2:84:2c:8c:01:df:1e:5e:b3:1b:48:
51:87:0d:0a:0e:1b:03:7c:24:21:0c:4d:bc:05:6d:
31:db:ce:c5:86:5e:b4:ec:f8:b1:91:9c:c9:2f:5c:
b9:44:63:08:48:f8:92:c2:dd:85:f8:25:12:79:da:
73:49:6d:a5:5f:95:9e:4d:c6:1c:0a:2a:81:0d:e1:
7b:f8:17:74:5e:e5:33:a2:0b:90:28:21:b5:f6:11:
4a:c2:41:7a:c2:1f:ea:b8:8f:ac:37:5e:01:1b:9b:
04:9c:e5:59:c0:f6:79:31:c8:e9:5a:2b:a1:c5:92:
9a:b3:a5:d6:e7:e5:c4:f8:f0:30:30:b6:48:ab:7c:
54:a3:20:45:81:e1:61:bb:1d:84:62:73:99:48:fd:
3b:af:70:af:02:26:c8:72:95:2e:86:07:e7:cb:df:
d4:45:e0:7d:a4:c4:07:98:32:53:3d:c3:01:f2:65:
5a:8e:05:ab:74:27:aa:87:05:69:76:5a:6a:60:b5:
9b:cf:c8:4d:d3:b4:ad:45:55:87:a8:45:a0:7f:02:
0a:51:bb:05:9a:c1:3a:25:b1:14:88:66:e5:83:28:
6d:79:e0:91:96:c0:10:48:3d:98:db:4b:83:cc:02:
f7:48:65:e1:f1:e8:3c:07:43:16:4c:8f:f1:2e:c3:
d9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9C:57:FC:DD:D5:3F:BD:AC:CF:C6:30:DA:AF:A2:DC:D6:FA:90:B7
X509v3 Authority Key Identifier:
keyid:17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/kZxX_N3VP72sz8Yw2q-i3Nb6kLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.197.0/24
IPv6:
2001:678:75c::/48
Signature Algorithm: sha256WithRSAEncryption
87:a0:b4:fd:37:b4:5c:d6:72:d7:1b:d1:bc:8e:76:85:35:c8:
a5:83:62:a4:4b:3f:c1:c5:52:42:59:97:a5:89:b9:47:2c:02:
d7:c7:6a:e1:a0:96:bb:2f:48:15:7b:e1:aa:2e:20:84:af:6b:
55:41:18:0a:cf:08:9a:e5:bf:fc:2e:5e:7f:ec:7b:5d:b8:ea:
b4:86:b0:78:08:3d:a2:5d:20:64:7f:39:f6:0f:ea:25:35:de:
67:22:3a:d5:6e:e4:43:8e:ea:fe:64:ce:32:d9:8e:a2:48:16:
57:94:5a:05:fa:52:70:a2:8b:b4:88:76:13:a5:29:c7:3b:dd:
8b:31:f6:bf:d8:89:d9:c3:54:ee:aa:4d:d9:c5:0c:43:76:ef:
7f:c9:56:53:95:83:f9:82:af:b0:db:f6:52:8d:71:d0:c4:70:
0f:b9:9c:df:0d:50:d1:a7:68:34:53:66:95:56:1b:ef:91:e5:
42:88:fd:68:27:90:f0:84:83:92:00:f4:12:73:27:e1:36:bf:
b2:ee:c9:0c:9b:2c:37:3c:1a:71:0a:9c:6e:1d:b8:1c:6d:25:
e4:a6:86:34:94:12:3d:34:7e:cf:a1:9e:08:b6:3f:d5:01:6b:
ab:6c:a0:7c:f8:65:18:eb:ad:b1:27:75:0f:ba:88:94:b5:38:
88:93:cd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:46 2024 by rpki-client on console-fra.rpki-client.org