Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/k-X-FBMD1vFJaKVIMx4D3da3teQ.roa
File: k-X-FBMD1vFJaKVIMx4D3da3teQ.roa (raw, json)
Hash identifier: 3hQn6E4ou8HLCMPGsS5R8ZCGGRHQDvhbCgIh7xwoyK0=
Subject key identifier: 93:E5:FE:14:13:03:D6:F1:49:68:A5:48:33:1E:03:DD:D6:B7:B5:E4
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 018CC6B92302142DF93D9E079D679BE24990
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/k-X-FBMD1vFJaKVIMx4D3da3teQ.roa
Signing time: Mon 01 Jan 2024 20:31:11 +0000
ROA not before: Mon 01 Jan 2024 20:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13008
IP address blocks: 91.235.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:23:02:14:2d:f9:3d:9e:07:9d:67:9b:e2:49:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93e5fe141303d6f14968a548331e03ddd6b7b5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:72:2c:7e:5b:3d:17:f1:db:00:af:fa:c8:ea:
54:e9:e7:a6:0b:f6:47:9c:68:6d:3f:28:2c:95:0e:
dd:51:b4:e2:cd:d3:da:c6:5c:0a:4d:9a:4c:c3:48:
cc:39:57:b1:2e:23:da:f8:7b:cf:5e:1f:19:7a:c1:
b4:dd:4d:e6:8b:07:0a:53:a2:83:41:99:44:e5:82:
a1:41:ae:3f:bd:05:2b:d7:48:38:c3:c9:a7:b5:20:
25:87:00:71:86:54:69:de:b2:d7:7a:e0:2f:87:d2:
ff:f3:03:1d:2a:85:f9:40:6f:d9:46:bb:4b:3b:28:
1e:12:56:08:92:23:60:9a:74:24:aa:84:5d:cb:84:
35:69:8a:15:00:f8:f4:3c:f4:34:16:34:0b:98:73:
a3:e0:9d:ea:6a:70:65:ee:2d:12:d5:c1:4a:a5:f9:
a4:7b:fe:cd:bd:6b:d5:e0:1c:dd:77:bc:d0:45:e7:
04:fd:2c:fd:71:27:71:a7:b2:cb:1e:16:42:03:e4:
05:e0:88:36:19:ec:97:39:74:36:a0:17:49:24:08:
43:c9:5e:31:a0:d7:f2:5b:17:08:26:dc:97:20:6e:
20:10:bc:18:bb:70:49:dc:08:f9:17:6f:99:8f:75:
32:4c:d8:54:45:7f:b9:65:0a:8f:0e:a6:98:a5:a2:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E5:FE:14:13:03:D6:F1:49:68:A5:48:33:1E:03:DD:D6:B7:B5:E4
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/k-X-FBMD1vFJaKVIMx4D3da3teQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.119.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ec:46:76:c4:a9:af:e2:27:73:f0:cc:03:21:01:a2:81:ad:
b2:bd:a3:0d:0e:ab:f9:03:ca:18:58:5b:19:30:32:4b:7f:d0:
c6:10:a3:5c:c3:78:64:c2:1f:21:8e:03:30:d4:89:2d:81:f2:
58:1d:c3:fb:93:2a:84:32:88:21:c0:c6:54:28:10:f4:91:46:
f8:b0:f9:d5:8b:2b:9c:84:df:4d:25:91:8c:97:c4:1a:31:39:
3b:b4:e4:f4:55:9c:ba:cb:fc:b6:32:c2:38:e7:cd:44:73:28:
aa:13:15:84:c2:25:a7:04:ad:fc:93:c0:b2:91:cc:b9:74:41:
c5:62:48:97:8f:79:ad:db:b2:b3:9c:84:16:a1:4a:92:33:5f:
60:a0:0b:18:be:ca:ae:92:c9:05:06:4f:33:ca:cd:00:8d:7f:
1a:69:cf:be:87:ea:4d:75:74:f9:6c:c6:5f:cf:7b:d3:90:d6:
18:c2:7f:23:92:ac:fd:9a:b7:42:60:33:e8:c2:81:56:aa:26:
56:ed:10:13:ad:08:15:73:90:50:4b:77:1b:32:2f:32:c2:52:
bf:8f:16:8c:f3:9f:3e:ba:84:0b:b0:a1:7b:cd:98:ab:96:be:
90:b8:88:26:65:96:53:63:d3:ae:ae:3f:02:f8:b9:a4:33:8f:
85:d6:d8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:52:52 2024 by rpki-client on console-ams.rpki-client.org