Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/kx-3IA9C3XQGTgFLPlmfhsVZLWY.roa
File: kx-3IA9C3XQGTgFLPlmfhsVZLWY.roa (raw, json)
Hash identifier: OAml4cNOlSN+Qo5w+aMoIDMWfUkNtSzj/qG5F/RWi2E=
Subject key identifier: 93:1F:B7:20:0F:42:DD:74:06:4E:01:4B:3E:59:9F:86:C5:59:2D:66
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 018CC795339ABF2E87F325F2921243E3261E
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/kx-3IA9C3XQGTgFLPlmfhsVZLWY.roa
Signing time: Tue 02 Jan 2024 00:31:33 +0000
ROA not before: Tue 02 Jan 2024 00:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56887
IP address blocks: 31.131.44.0/23 maxlen: 24
176.124.72.0/22 maxlen: 22
176.124.76.0/22 maxlen: 22
176.113.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:33:9a:bf:2e:87:f3:25:f2:92:12:43:e3:26:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 2 00:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=931fb7200f42dd74064e014b3e599f86c5592d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:da:e7:57:72:a2:a8:1d:08:9b:d5:62:d1:2b:
30:ca:54:4f:5b:ca:df:e0:b9:1c:17:40:7c:e4:37:
7e:e9:15:26:83:22:19:41:68:67:6f:ba:b6:72:81:
a8:0a:c9:5c:a1:2c:8b:f5:24:91:a4:4f:11:3d:92:
c0:07:ec:c1:e9:00:b5:e2:72:00:89:39:21:57:69:
57:ff:12:48:8d:ec:17:10:2b:a5:91:0c:4d:19:01:
e0:a9:11:c7:36:90:fc:3a:8d:3e:17:52:29:3c:91:
37:4a:47:24:ad:27:bf:59:56:62:dd:85:2f:35:ac:
92:55:fe:55:7a:a9:e6:00:c7:48:f1:c2:6c:de:24:
5e:8e:a1:e3:65:b1:20:94:07:66:39:f2:d8:3e:99:
04:95:50:ae:0b:a4:71:19:fe:ef:ad:6a:70:c4:1c:
46:c4:36:9a:a8:0c:4b:bb:d5:ae:62:ea:63:03:30:
21:63:73:9b:84:66:81:57:03:93:51:50:ac:59:c1:
3f:08:5a:16:de:d7:f2:8a:bf:17:bc:1d:84:66:ff:
97:ee:1c:df:8b:bf:d6:d8:44:07:0a:de:8f:42:da:
c6:ef:13:9a:a5:cb:35:d8:8f:cf:1a:ea:03:dc:c6:
c7:70:91:da:a0:d9:a3:17:d2:a4:d8:bb:64:ea:95:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1F:B7:20:0F:42:DD:74:06:4E:01:4B:3E:59:9F:86:C5:59:2D:66
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/kx-3IA9C3XQGTgFLPlmfhsVZLWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.44.0/23
176.113.108.0/22
176.124.72.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:4e:b1:e2:7c:36:31:ea:37:47:f3:fa:4a:9a:90:24:83:a6:
86:ff:64:e0:73:cc:07:ab:68:e2:cd:4c:e9:81:c3:a8:91:ba:
12:96:85:9c:f6:c9:4b:b3:6b:b0:5d:17:63:a7:16:12:f6:24:
cb:40:ae:b7:90:c4:e0:38:bf:2b:a3:d9:fd:62:90:7d:be:ec:
bb:2a:d5:d0:f1:c8:8e:34:61:0f:14:44:1e:f7:8f:d2:66:24:
fa:ab:1a:c0:cd:da:2a:37:1b:73:5b:0e:d7:6e:60:5c:0f:cf:
71:37:9d:0b:19:ec:8a:22:f1:3a:e0:4e:49:66:6d:54:ce:f6:
5d:7c:77:25:7b:51:cf:f5:33:5d:c2:61:69:74:fc:bc:58:6a:
e4:a3:10:ab:49:bd:45:f2:16:14:f7:8e:03:0a:9a:cd:11:82:
58:1b:7d:e4:5b:27:ce:a2:16:55:57:11:4b:86:61:af:04:21:
6a:04:83:3c:a9:f1:93:17:14:72:cb:50:4e:2b:0d:5e:52:4c:
9f:5a:16:5b:39:e4:39:1d:6f:5c:9d:7d:8c:67:e7:c5:de:4c:
64:11:5c:08:ca:9d:d1:89:44:e5:0f:f9:4f:da:2e:ad:a6:ee:
3c:e0:17:5e:87:0e:1a:82:88:ad:76:a1:a0:1b:0f:0d:8f:3e:
f8:b3:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:53:23 2024 by rpki-client on console-ams.rpki-client.org