Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/kxbrWQg73mMJU0ug4TlWdtdqYmA.roa
File: kxbrWQg73mMJU0ug4TlWdtdqYmA.roa (raw, json)
Hash identifier: e6a6ufrkmUDl6qODEwyDajU/N21c1rnnlYa+Ie4ZdzI=
Subject key identifier: 93:16:EB:59:08:3B:DE:63:09:53:4B:A0:E1:39:56:76:D7:6A:62:60
Certificate issuer: /CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Certificate serial: 018CC348FCB27F79E6DA212CC2B785469340
Authority key identifier: 5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/kxbrWQg73mMJU0ug4TlWdtdqYmA.roa
Signing time: Mon 01 Jan 2024 04:29:49 +0000
ROA not before: Mon 01 Jan 2024 04:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211449
IP address blocks: 193.57.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:fc:b2:7f:79:e6:da:21:2c:c2:b7:85:46:93:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Validity
Not Before: Jan 1 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9316eb59083bde6309534ba0e1395676d76a6260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:93:18:70:ed:a0:f6:25:29:03:61:13:6b:1f:
b6:2e:66:5f:8e:f2:b5:c6:fd:ee:c9:6c:dc:97:52:
cb:c8:f5:f4:0d:53:60:d7:7b:2f:a9:32:ec:20:d5:
81:18:5d:cf:49:cb:5a:ca:e9:c9:79:d4:9f:d9:cb:
8e:a6:d8:7e:eb:87:a7:03:68:aa:b8:75:46:e6:05:
26:a7:93:d6:2d:ef:1a:0c:ca:4f:45:c1:6f:bd:0a:
2d:a1:96:d2:42:9c:8b:64:d7:e0:e6:e7:7b:4d:af:
b1:35:95:be:89:d6:9d:7b:cb:12:ad:8d:97:4e:6d:
03:fc:07:c2:77:90:c4:3a:b6:f5:52:16:58:bd:4c:
0f:3a:62:9a:c9:c3:18:50:81:ad:c2:d6:34:62:e2:
a9:3c:f7:56:35:d1:4d:93:b2:94:9f:b9:c9:3b:6f:
2c:2e:bc:ed:cb:9d:b3:34:c7:9b:8d:4e:3c:5d:ff:
03:4f:89:78:11:1e:0e:5c:ed:5f:55:71:41:6a:35:
44:ec:69:dd:11:b4:db:6c:fa:9d:fb:29:a2:c5:de:
7c:87:7f:d1:67:cd:5a:57:34:00:62:a2:f1:2d:b8:
f6:1c:6b:2a:33:3d:35:12:d4:5f:fd:e0:3c:49:c4:
b8:a1:be:6b:99:86:b0:36:6d:d5:82:34:85:25:38:
bc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:16:EB:59:08:3B:DE:63:09:53:4B:A0:E1:39:56:76:D7:6A:62:60
X509v3 Authority Key Identifier:
keyid:5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/kxbrWQg73mMJU0ug4TlWdtdqYmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.224.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:f8:ef:25:c9:09:08:af:f3:b7:34:45:03:50:66:ff:f6:5b:
d9:89:3d:fe:d7:05:c8:a2:00:4c:e5:cf:52:f8:42:34:61:fb:
e5:68:72:44:d6:c2:2f:eb:fb:f2:10:f8:4f:5e:c7:95:5a:42:
c0:f0:8c:39:e9:70:2b:af:8a:fa:97:e3:7f:e4:80:bc:3f:a4:
fb:52:76:d9:d9:04:e9:89:e2:d0:61:13:2d:cc:86:e9:bd:81:
62:15:64:8d:c8:ad:da:c5:fb:60:c9:a6:54:90:a5:e4:55:d1:
2f:a5:be:c5:58:99:e6:fc:ee:38:d3:c7:a6:f5:2c:6d:10:7e:
ff:ef:98:e9:b6:64:a1:25:28:84:5c:b2:fa:72:66:6f:41:85:
f8:ea:0f:2e:05:b7:d6:f3:4c:79:e2:a0:1b:85:d9:3e:06:27:
40:9e:a8:a7:7a:34:7e:25:b2:8a:02:e4:44:40:c2:f9:7d:0e:
fe:c1:5c:70:d1:2e:1a:94:bd:dc:dd:9d:81:ff:c9:a0:a1:bb:
03:d0:91:27:08:49:e6:a3:f9:5d:e6:68:6f:c1:b1:97:0e:a8:
7b:59:8b:a4:a0:37:0a:a1:52:87:62:b8:11:77:f3:cc:b2:c2:
5e:d4:9c:ce:d1:b8:27:10:f9:a7:14:c2:2a:13:ea:ec:7e:9e:
4f:7f:f4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:47:37 2024 by rpki-client on console-ams.rpki-client.org