Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KmwJ8qVs3YpUtKVGPJpxFV4pXq8.roa
File: KmwJ8qVs3YpUtKVGPJpxFV4pXq8.roa (raw, json)
Hash identifier: ph35dUMpotfsq4214XJWT3vgBQljD/4jzzBuAIXQW9o=
Subject key identifier: 2A:6C:09:F2:A5:6C:DD:8A:54:B4:A5:46:3C:9A:71:15:5E:29:5E:AF
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018CC9BC9F65EBB068EBCB4C4F5425EAE663
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KmwJ8qVs3YpUtKVGPJpxFV4pXq8.roa
Signing time: Tue 02 Jan 2024 10:33:51 +0000
ROA not before: Tue 02 Jan 2024 10:33:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1125
IP address blocks: 145.125.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:9f:65:eb:b0:68:eb:cb:4c:4f:54:25:ea:e6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 10:33:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a6c09f2a56cdd8a54b4a5463c9a71155e295eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:24:6e:1c:a9:b3:61:8c:a9:13:f8:c5:a1:
b0:13:b6:18:97:be:3f:7d:5f:0e:98:2a:1b:9a:a9:
4e:a0:b5:9f:51:2b:59:3b:51:8b:8a:a9:e9:57:72:
00:f5:53:7a:3f:44:45:c8:37:d4:ad:2f:f6:ce:4f:
c9:9e:4f:c5:ec:79:74:f0:9d:4f:d1:da:69:91:bf:
3f:77:fd:9a:d6:a3:2e:03:2e:7d:36:44:87:92:58:
93:1b:bc:64:21:7a:7f:a5:b4:61:2f:0c:5a:9d:3b:
6b:53:31:98:78:56:df:cb:a7:28:15:fc:6c:bd:3a:
3d:0c:54:99:ef:09:ef:54:53:5b:12:00:7e:49:29:
44:ba:55:b7:ce:c0:ac:34:cc:d2:95:92:7c:63:65:
f8:f1:75:5f:3f:01:17:01:2b:45:11:f3:ef:27:8f:
81:7e:a6:4a:f7:cd:74:e0:af:79:d9:71:de:8b:3e:
5c:ab:e2:a5:24:81:5d:1c:e5:77:ac:8f:5b:a7:7b:
bd:16:3c:94:a4:15:21:3b:dd:81:9f:8a:e7:e9:57:
6d:79:d8:f0:e8:f9:fe:14:45:95:85:c8:8c:2f:02:
37:36:c3:34:25:9e:86:60:d8:1e:50:06:ae:65:24:
69:2d:a7:07:d0:7b:16:cc:0e:53:7f:8f:41:d9:ff:
0c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6C:09:F2:A5:6C:DD:8A:54:B4:A5:46:3C:9A:71:15:5E:29:5E:AF
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KmwJ8qVs3YpUtKVGPJpxFV4pXq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:34:a0:a3:f8:9a:4a:ce:d8:b4:92:d6:d7:f2:4f:88:df:26:
59:37:b2:e0:3d:34:04:f7:35:10:0f:c2:2e:33:0f:5a:18:48:
88:26:ab:34:a4:f0:0e:5a:c2:f9:76:b3:31:10:f0:d5:7d:73:
26:d3:ac:e2:c7:e0:e7:6c:a8:e0:b6:10:78:82:31:20:08:a2:
dc:fa:c0:3a:2f:81:b6:fc:a9:a9:61:fe:67:8b:dc:ec:41:70:
5c:32:06:de:31:05:54:2f:a0:73:a7:54:3d:68:33:fa:f6:f8:
5d:38:f0:54:fd:c1:32:47:fd:04:1a:63:5a:37:cd:72:6a:39:
ef:cb:c9:99:f9:e8:40:24:7f:d6:4e:d0:fa:d1:68:ba:a7:ab:
03:fd:e2:4e:c9:f4:f2:85:af:78:a1:da:f4:d9:a1:11:87:18:
b7:3f:90:33:30:df:42:7f:1c:84:8b:f8:9d:fa:e7:49:9d:8a:
ce:67:4e:51:5a:21:5b:33:be:30:7d:79:9a:a3:d3:8f:70:71:
66:64:2d:29:61:83:9f:27:4f:e0:c6:7c:fa:d3:15:f3:48:bc:
59:39:7a:85:cf:72:33:ff:ef:4d:85:f7:46:8a:c6:40:d1:1a:
c0:a1:10:c9:ce:6e:36:1e:33:99:1f:6f:1f:01:9f:28:47:67:
e9:8d:25:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:48:10 2024 by rpki-client on console-fra.rpki-client.org