Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/KVCNNnBdMAXzHWmRh1JzXy1Ur-w.roa
File: KVCNNnBdMAXzHWmRh1JzXy1Ur-w.roa (raw, json)
Hash identifier: o3NEDuWduHniLVLJiynrIbnA8jUj8fgIiu+Y+dlV1K4=
Subject key identifier: 29:50:8D:36:70:5D:30:05:F3:1D:69:91:87:52:73:5F:2D:54:AF:EC
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B72E5B49E7FB38586A15399E66AEFE
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/KVCNNnBdMAXzHWmRh1JzXy1Ur-w.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10031
IP address blocks: 81.52.240.0/22 maxlen: 24
81.52.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2e:5b:49:e7:fb:38:58:6a:15:39:9e:66:ae:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29508d36705d3005f31d69918752735f2d54afec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:1a:44:d3:a0:9a:88:35:cc:c7:df:c8:61:
4f:4d:33:1b:d9:25:99:eb:3f:f1:95:4e:c3:5c:76:
0b:29:f9:2f:4b:77:e7:fd:72:7b:de:4d:a2:fb:98:
b7:f2:c6:14:88:3f:7d:69:1e:5d:2c:1a:4f:30:a1:
0d:1c:b5:21:d4:ec:41:13:e8:31:11:ab:7a:ca:cf:
be:a4:e2:4a:34:20:2e:eb:f3:c7:0b:54:07:f1:03:
12:ad:88:ae:4c:6f:29:15:d5:53:15:52:37:6a:22:
cb:cd:31:10:b7:64:26:ff:0e:ec:a8:23:57:4b:ea:
5e:cb:77:5b:bf:0e:77:4f:88:9c:83:92:98:39:cd:
54:9e:0e:65:4a:4b:42:25:8a:da:4e:a9:36:6d:f1:
5d:9d:2d:b8:0f:dd:8e:fa:2f:31:a1:62:2f:90:4c:
0e:13:f9:72:79:72:53:6f:f2:e6:50:61:81:94:c0:
7c:06:85:5b:de:f2:47:e7:17:e6:96:ef:2e:7d:b3:
f1:87:96:6e:14:0f:ac:f2:2f:f5:b2:0d:a8:d3:16:
9a:47:4c:77:21:cf:5b:35:dd:f9:2e:6b:5a:87:2f:
89:da:97:26:3e:4a:ef:da:89:5c:1a:1a:76:10:93:
e9:f4:69:b1:4c:a4:74:51:5b:b3:fb:37:7e:2e:e3:
e4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:50:8D:36:70:5D:30:05:F3:1D:69:91:87:52:73:5F:2D:54:AF:EC
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/KVCNNnBdMAXzHWmRh1JzXy1Ur-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.52.240.0/21
Signature Algorithm: sha256WithRSAEncryption
34:d7:81:bb:93:a4:5d:b1:a6:46:67:44:d2:18:cc:8d:5d:93:
24:77:44:e2:01:d4:1a:3e:82:51:20:fe:b2:3e:46:b2:9e:63:
55:60:d2:c2:f3:ae:19:fe:92:0d:97:38:68:e2:2f:ce:d9:c4:
95:e2:90:8e:82:f0:9a:e1:a5:12:1c:ac:68:38:8b:17:c5:f5:
40:6d:39:7a:c7:df:dc:4b:d1:81:25:d3:a7:16:9e:48:f9:ef:
ad:0c:33:26:02:ee:81:35:df:8e:34:1e:03:be:48:db:99:04:
03:ec:2d:49:ee:47:9d:8f:23:8c:f1:56:78:97:b9:ce:f6:9f:
2c:f3:e1:b0:1e:98:f1:fd:8c:b3:0c:74:a6:a5:d1:b8:02:87:
67:77:26:11:c5:5a:9a:03:e0:43:94:94:c5:24:44:cc:8b:e7:
a8:d6:b9:44:b2:88:08:45:7e:4e:34:c4:fa:67:89:d9:ae:4b:
53:4b:1d:e2:6d:33:6a:f9:4f:77:1b:70:19:35:01:48:67:7f:
73:fd:5d:f5:55:87:fc:5b:eb:6e:05:1a:8c:26:af:ac:69:b1:
c4:9f:81:a9:87:7f:b4:b1:93:73:5c:a1:0e:84:d7:59:1c:bb:
85:2e:22:d0:02:9d:37:64:5c:f2:b7:4d:86:1d:10:83:81:5d:
2e:24:07:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:40:49 2024 by rpki-client on console-fra.rpki-client.org