Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/KkfmMcuyGQNfV_aweTnaBG1zS3Q.roa
File: KkfmMcuyGQNfV_aweTnaBG1zS3Q.roa (raw, json)
Hash identifier: XwDsQUHN8nEB/bzRpygiIAfDmzJEVaFfL8xJTH9/k0o=
Subject key identifier: 2A:47:E6:31:CB:B2:19:03:5F:57:F6:B0:79:39:DA:04:6D:73:4B:74
Certificate issuer: /CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
Certificate serial: 018ECCA30AF1986EC62FED40CA6EDE9068A3
Authority key identifier: 37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/KkfmMcuyGQNfV_aweTnaBG1zS3Q.roa
Signing time: Thu 11 Apr 2024 10:10:20 +0000
ROA not before: Thu 11 Apr 2024 10:10:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50982
IP address blocks: 193.105.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:a3:0a:f1:98:6e:c6:2f:ed:40:ca:6e:de:90:68:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
Validity
Not Before: Apr 11 10:10:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a47e631cbb219035f57f6b07939da046d734b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:53:0b:bb:bb:ef:ee:da:0d:27:82:15:fc:
29:dc:14:eb:15:a3:24:b3:7c:95:54:ae:cf:99:6f:
34:9d:de:e7:fe:1e:1e:49:3e:af:fb:a9:d5:1c:e1:
e8:2a:6f:5a:56:35:68:bf:c4:54:a0:b0:d6:83:b8:
2b:92:84:61:72:5a:25:ee:7e:cb:5d:22:a6:2c:96:
6c:61:96:6c:2c:6e:15:78:fb:a2:4f:ff:e2:6c:2a:
a7:48:11:87:b2:26:45:c8:db:f8:d3:99:8c:9c:d4:
7d:52:81:41:f9:15:db:32:85:0c:33:c6:de:5d:16:
1f:f1:c7:11:07:39:f2:79:3d:30:da:5a:6f:0c:67:
40:7d:72:91:e7:77:1f:70:8b:ea:f4:0d:39:40:66:
e2:97:fe:9b:f4:1e:66:99:cc:26:7c:41:c0:6a:8c:
5e:aa:dc:89:b6:99:cc:65:d4:7f:bc:a4:4b:98:15:
fd:e0:7c:5c:bd:aa:c9:36:53:dd:c9:3f:6d:3b:8a:
a2:11:6e:ed:8d:87:7d:c7:87:1f:83:8b:95:90:97:
b1:53:8f:69:e0:74:bb:38:a0:b2:de:de:04:c2:81:
60:1c:b9:a5:3e:a5:09:d4:d5:1e:08:08:34:ab:4c:
92:d3:85:7c:fc:f6:b8:c7:bc:ce:29:de:a2:d6:06:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:47:E6:31:CB:B2:19:03:5F:57:F6:B0:79:39:DA:04:6D:73:4B:74
X509v3 Authority Key Identifier:
keyid:37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/KkfmMcuyGQNfV_aweTnaBG1zS3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.26.0/24
Signature Algorithm: sha256WithRSAEncryption
86:62:e9:15:3e:df:f4:60:09:c0:d7:8b:b1:a3:94:86:c2:06:
59:59:d8:33:14:1e:96:81:54:e6:83:08:38:b9:3c:62:2d:52:
e8:d9:cc:75:27:24:95:02:cd:a6:95:c8:8f:0c:52:4c:8b:26:
f5:19:0c:e0:98:f2:a1:b0:ef:12:70:9e:72:90:d5:32:1e:33:
ef:31:c9:89:d8:6c:03:02:b5:ee:66:14:f3:6c:4e:57:22:f3:
03:12:5e:cc:3b:4e:f1:1a:f9:1a:7d:83:49:8c:0e:20:e0:b5:
2e:68:88:7f:40:76:5e:7f:59:76:43:9e:1b:ec:3d:13:a5:fc:
3e:c6:b9:77:4d:73:3f:f0:7e:f6:54:ae:00:50:cf:b0:7b:a7:
0d:d8:9e:18:7e:64:9f:a9:39:4f:32:81:ab:41:86:0b:e1:8b:
94:cf:ce:f3:45:29:b9:b8:6e:1f:e7:95:f0:95:b2:9f:e0:a9:
6d:3b:93:ca:23:90:b6:e2:1a:ab:7b:55:6d:ac:ac:e5:54:62:
90:c3:21:0b:14:02:a8:6f:c5:41:04:f1:99:97:0e:5d:f4:24:
58:49:6c:26:05:3f:76:55:33:b4:4b:1b:c9:a8:6f:e4:50:2c:
77:e7:62:6a:a0:47:38:84:0c:4d:a3:69:9c:66:e6:c3:b2:2c:
c2:64:74:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:11:35 2024 by rpki-client on console-ams.rpki-client.org