Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/KJR7-IqRRlbMQLf8-5AoKFLpSbE.roa
File: KJR7-IqRRlbMQLf8-5AoKFLpSbE.roa (raw, json)
Hash identifier: z7nLLFNufGDsQvSxWMo76sAeq/4hWg5EmtSqXZOP3qs=
Subject key identifier: 28:94:7B:F8:8A:91:46:56:CC:40:B7:FC:FB:90:28:28:52:E9:49:B1
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0192C397799A181BF1E96EA208156E795243
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/KJR7-IqRRlbMQLf8-5AoKFLpSbE.roa
Signing time: Fri 25 Oct 2024 12:12:17 +0000
ROA not before: Fri 25 Oct 2024 12:12:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212396
IP address blocks: 170.62.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c3:97:79:9a:18:1b:f1:e9:6e:a2:08:15:6e:79:52:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 25 12:12:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28947bf88a914656cc40b7fcfb90282852e949b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:47:d7:40:48:d2:13:8e:0d:ea:3b:bd:c9:
12:04:f5:fd:6b:66:a6:84:f1:71:31:0f:9c:40:6b:
e7:ea:ff:23:67:80:c9:9a:38:24:e2:03:d0:21:b6:
2b:da:0a:9a:23:72:9b:2e:7e:ab:91:fd:3e:80:19:
6c:77:05:9d:95:88:06:05:59:2d:35:f3:8f:4f:fc:
b2:03:c4:f7:f8:ef:e1:a8:93:fe:e1:1c:6c:8d:28:
78:5d:48:f1:f9:c8:57:b0:89:be:d5:4e:c8:a2:c5:
d7:16:a3:12:6d:32:58:a3:ff:3a:37:aa:17:02:d1:
bf:90:0b:7d:fb:f3:78:51:34:14:7a:8a:ee:41:e6:
c6:93:bd:a0:5e:5e:48:f9:67:b6:03:a3:97:11:2b:
5e:fc:89:7c:f5:37:42:ff:a6:76:0f:5b:0f:49:ab:
24:12:7d:fa:10:20:7f:c8:d4:67:23:a1:d3:06:b6:
3e:09:a8:88:ab:3e:fa:26:8d:1c:63:f1:ec:2a:64:
d9:f2:a6:0e:24:14:3d:de:48:92:6e:db:b0:da:30:
8e:e9:2b:89:2a:72:75:fa:cd:02:5b:6c:df:85:b5:
b2:5b:3c:07:39:b0:ab:0d:33:ff:67:d4:58:39:71:
42:67:0a:15:85:be:fc:f7:cc:0b:7d:c5:33:2d:ee:
15:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:94:7B:F8:8A:91:46:56:CC:40:B7:FC:FB:90:28:28:52:E9:49:B1
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/KJR7-IqRRlbMQLf8-5AoKFLpSbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.62.202.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:bd:cb:05:00:dd:5a:89:e0:5b:de:0e:3d:59:ad:81:5f:5c:
ae:85:04:96:bb:96:49:4a:74:8d:ca:e0:a2:2f:5a:ce:b3:26:
01:8f:87:5e:b9:ca:33:5c:2a:1e:2c:ef:56:01:de:a4:a8:b6:
3d:57:f0:d3:60:70:a3:35:ed:5e:f8:7a:45:02:d3:32:22:68:
ab:e1:d0:ca:26:59:3a:e1:23:7f:cd:77:6a:d2:4e:ec:74:18:
37:dc:98:2c:84:26:a2:6e:6f:7c:32:95:1e:f2:a7:4d:38:da:
35:a0:55:5e:76:cf:71:40:be:47:a3:0c:a1:2a:ac:90:aa:ee:
93:9a:d1:26:34:17:7b:b3:e5:36:29:a0:7b:3f:f7:c5:a6:d1:
b6:6c:ce:ee:97:28:0b:0a:05:36:01:67:88:bd:67:f0:1c:dc:
6a:8e:05:68:98:13:7f:98:5e:76:8a:b0:d1:a4:db:d7:7b:06:
5c:47:df:12:8e:e5:59:bc:24:bb:cc:50:57:7d:e1:62:d6:67:
3d:fc:c6:0d:43:fc:cd:c7:f7:17:76:66:a5:ed:1b:ad:de:71:
08:cf:38:1f:29:fd:ad:04:c3:4a:88:4f:a9:e9:7d:94:b0:5a:
49:15:bd:f9:3c:44:16:2b:43:b0:f5:ea:c6:82:04:1c:fd:ab:
97:b0:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:46:48 2024 by rpki-client on console-ams.rpki-client.org