Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/kELW6cfn17iDEFT7d4a4--40T2E.roa
File: kELW6cfn17iDEFT7d4a4--40T2E.roa (raw, json)
Hash identifier: r6YbQCgxBAmDOwA5tG5NI9x5eBBPMeV1GxSyMnkmTR0=
Subject key identifier: 90:42:D6:E9:C7:E7:D7:B8:83:10:54:FB:77:86:B8:FB:EE:34:4F:61
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 018CC2DB287A4CAD3E88FA487F998AC920F3
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/kELW6cfn17iDEFT7d4a4--40T2E.roa
Signing time: Mon 01 Jan 2024 02:29:51 +0000
ROA not before: Mon 01 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42708
IP address blocks: 89.42.22.0/24 maxlen: 24
89.42.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:28:7a:4c:ad:3e:88:fa:48:7f:99:8a:c9:20:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jan 1 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9042d6e9c7e7d7b8831054fb7786b8fbee344f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:56:5d:ad:7a:8e:e6:f6:13:0c:34:95:8d:d0:
8b:ac:36:db:8a:57:df:a7:61:6d:66:2d:13:1c:ec:
cb:a4:34:41:50:8a:3f:37:99:05:53:fc:49:49:97:
bb:94:d7:e4:74:81:fa:31:34:e3:8d:95:9e:da:28:
cd:97:f3:55:cc:23:a1:58:93:30:a5:40:f7:10:00:
d2:6a:6b:eb:6b:b8:49:2c:2d:9f:90:11:e8:a6:09:
a6:56:a9:e0:b6:09:83:75:11:fa:3f:f3:1e:f8:e8:
e0:ab:ae:a1:1f:5e:64:8c:ce:e7:7c:c5:fd:83:ef:
17:f8:51:c4:1a:a3:5e:22:42:2c:a4:3b:f3:34:37:
43:d6:4f:75:81:28:a6:12:14:8d:22:45:6c:11:0d:
1e:b0:0b:c1:e1:da:41:ae:89:5d:c9:e7:35:6d:8d:
5e:f1:c7:1d:dd:77:b5:6a:13:0c:4e:c7:4d:35:f7:
d0:6f:8b:52:7d:3f:7f:05:db:94:10:fc:08:0c:42:
0c:65:fc:ca:68:12:8b:d4:8c:18:f2:98:8f:c5:e1:
20:97:bc:d5:68:83:4c:bd:ee:ec:e9:1b:49:95:14:
50:48:2b:44:e0:03:83:0a:e3:6e:e1:8b:d5:8f:a1:
6e:61:99:47:2f:76:1b:16:59:d0:fd:8a:00:13:61:
ee:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:42:D6:E9:C7:E7:D7:B8:83:10:54:FB:77:86:B8:FB:EE:34:4F:61
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/kELW6cfn17iDEFT7d4a4--40T2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.22.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:2f:89:58:52:ee:f0:a6:cd:11:2a:a4:d6:4b:d8:d8:6e:90:
be:4b:47:af:31:e4:a8:7e:5b:4d:c8:97:9d:be:4b:2b:f5:7c:
4b:b4:29:e3:a5:f7:5a:d3:47:42:57:c2:eb:82:9a:68:32:99:
de:95:0f:ab:2f:69:f1:34:9f:7a:9c:fc:4b:fc:97:da:85:0b:
2c:b1:8e:18:7e:cd:91:18:f6:f0:01:dc:b7:50:dd:43:54:a1:
32:93:f7:57:e3:07:2b:c9:b3:7b:18:87:52:6c:3a:d5:25:27:
3f:6e:eb:69:de:12:5c:48:7c:d6:a3:ad:86:fc:ee:ee:70:02:
79:9b:c6:f1:cc:ab:71:04:67:8b:d5:6b:37:b0:03:f5:4a:56:
29:1f:be:b6:f0:ed:a3:e3:ee:62:30:b0:c7:a4:86:62:71:4e:
ac:bb:ef:9c:dd:a8:1f:9f:b8:a1:fe:33:fc:0f:60:aa:a6:45:
1b:10:24:4f:21:b1:96:f7:c1:bc:16:78:e8:80:ac:82:48:92:
bf:7e:d0:29:be:20:0f:a5:13:19:43:83:4f:fb:01:18:5b:99:
71:2c:fe:65:e4:41:b3:33:21:e5:18:cb:4c:fc:57:27:02:d2:
c9:a3:9a:58:47:bd:a7:fb:93:43:24:48:94:f7:d2:c4:7a:1a:
27:54:09:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:17:11 2024 by rpki-client on console-fra.rpki-client.org