Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/klsmFsnllEEElqmGM4fi_x19Uwc.roa
File: klsmFsnllEEElqmGM4fi_x19Uwc.roa (raw, json)
Hash identifier: HO4QCcjiFulL9LaAjzwPks7mBLx8T9Ttt/9oXZ9z1ZU=
Subject key identifier: 92:5B:26:16:C9:E5:94:41:04:96:A9:86:33:87:E2:FF:1D:7D:53:07
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 018CC26D18EDB7D63D0217A060ED1EB1B1C8
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/klsmFsnllEEElqmGM4fi_x19Uwc.roa
Signing time: Mon 01 Jan 2024 00:29:38 +0000
ROA not before: Mon 01 Jan 2024 00:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31027
IP address blocks: 185.163.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:18:ed:b7:d6:3d:02:17:a0:60:ed:1e:b1:b1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=925b2616c9e594410496a9863387e2ff1d7d5307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:39:80:99:76:61:e8:27:ab:74:cc:ad:aa:
02:36:cb:8f:df:6f:b1:fe:76:68:d6:e8:00:4c:05:
ef:fb:07:98:50:d0:b7:f4:ba:d6:c7:8d:96:96:e6:
e8:12:fe:e1:2d:6c:c8:e2:58:05:8e:c5:e4:0d:3f:
13:2c:ca:ad:4a:44:c4:f8:30:dc:73:65:93:40:ce:
0b:2e:a7:e2:5f:15:77:ae:d8:a1:18:2f:c8:94:a6:
8f:4d:c5:0e:1b:7d:6c:02:c7:e8:94:33:a6:86:bf:
66:83:dd:1c:5f:fb:ba:1f:fe:f9:db:1e:eb:c7:34:
bf:35:68:84:4f:ae:5a:a1:73:43:8c:f2:b7:bb:3f:
f2:35:3f:65:22:44:19:27:e2:79:2f:0a:93:05:a4:
65:9e:b4:ea:e9:9c:c6:31:7a:bf:6c:ee:b5:fa:98:
26:ae:18:8b:cd:34:d2:48:58:63:f2:12:eb:fa:41:
8a:e1:49:5e:08:7d:a1:40:ab:03:24:c6:00:d3:4f:
09:a2:f1:a8:be:7c:d9:12:c5:35:b8:23:55:86:40:
05:9a:88:ee:8f:24:06:87:c9:59:98:38:26:47:fd:
d4:0a:28:86:a5:f6:bd:04:d4:9e:dd:0e:9e:e8:9b:
62:e5:16:29:a1:b7:bd:ca:cc:d5:77:2e:23:f1:d3:
26:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5B:26:16:C9:E5:94:41:04:96:A9:86:33:87:E2:FF:1D:7D:53:07
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/klsmFsnllEEElqmGM4fi_x19Uwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.196.0/24
Signature Algorithm: sha256WithRSAEncryption
11:64:4c:7f:a0:bb:22:af:76:a0:ac:eb:ca:0a:27:36:73:c9:
34:1a:07:47:77:72:fd:37:14:00:a0:59:fe:69:18:9c:b2:46:
3d:8e:e3:1b:ab:33:91:75:d5:e7:58:e8:de:fd:44:ec:92:2b:
80:c2:dd:fb:52:4e:a3:ae:38:61:c0:6b:4a:4b:47:95:9f:eb:
2e:48:51:10:62:95:1e:6f:9a:82:76:d4:3e:13:95:1e:51:0f:
37:42:e5:d0:e2:c9:ee:bc:30:5c:81:75:f5:82:96:00:22:1a:
80:1b:22:5d:1c:3f:41:d5:27:4c:aa:a8:fd:41:0e:5a:10:20:
08:ca:ad:ff:6d:79:c1:f5:fd:7f:ea:c9:d0:9d:3a:67:ef:80:
d7:ed:f7:a0:22:c6:5a:6f:02:e7:1c:dd:17:c1:2d:50:99:1c:
07:48:ba:39:eb:2f:5e:8a:c6:06:54:db:f4:4c:a0:f8:4a:a3:
90:66:0e:b1:e3:0d:7a:16:78:c8:36:32:98:8a:ac:2a:c2:7b:
08:d3:65:75:ba:b1:ce:1f:3e:0a:2e:e6:dd:c2:63:9f:5e:8f:
04:e0:cc:af:db:d6:d4:6d:24:e8:ec:96:84:34:27:0d:7a:06:
1a:44:0f:70:0e:00:34:a6:69:a4:36:a6:5d:55:44:c2:61:68:
17:95:a4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:55:56 2024 by rpki-client on console-ams.rpki-client.org