Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/K-9nO8ZWS13GI4yAcyVyyybJSPA.roa
File: K-9nO8ZWS13GI4yAcyVyyybJSPA.roa (raw, json)
Hash identifier: UDHzYowCTkxmF6K9YeG9RjekMYBcF/toJHUs5zZQCtU=
Subject key identifier: 2B:EF:67:3B:C6:56:4B:5D:C6:23:8C:80:73:25:72:CB:26:C9:48:F0
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 018CC56E85B1E77A3FD5F25C15CB05F50776
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/K-9nO8ZWS13GI4yAcyVyyybJSPA.roa
Signing time: Mon 01 Jan 2024 14:30:03 +0000
ROA not before: Mon 01 Jan 2024 14:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8520
IP address blocks: 62.93.212.0/23 maxlen: 23
62.93.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:85:b1:e7:7a:3f:d5:f2:5c:15:cb:05:f5:07:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 14:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bef673bc6564b5dc6238c80732572cb26c948f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:81:f3:01:22:42:90:71:28:3e:33:ca:a0:d9:
ff:a6:f2:6b:fa:2e:c1:3b:c0:f8:68:20:ec:36:79:
5e:7a:ae:4e:0f:58:1b:ab:7c:fa:82:f6:39:4c:30:
65:db:71:0f:35:6e:63:b3:92:ee:b0:51:3b:c0:01:
b7:53:54:86:55:de:0e:00:b8:28:48:63:a4:4c:00:
f4:d9:51:97:31:61:82:c1:51:23:68:ae:98:62:4a:
a9:16:63:16:87:21:ed:43:f9:be:3d:52:2a:91:15:
87:07:71:95:04:0b:f3:8b:32:6a:77:2c:a5:79:5c:
75:43:e6:ee:09:29:56:3b:fd:fe:bd:de:d3:41:d2:
5f:68:bf:11:a8:b1:ea:64:76:a1:58:08:52:64:1d:
d1:f8:6c:76:4b:cd:0a:69:28:2d:54:94:73:f6:fb:
8e:79:59:13:b1:ab:b3:d3:8c:d5:57:b1:e2:d5:16:
8a:12:4d:2c:43:13:25:08:ec:7e:50:b2:1b:5c:2c:
c3:85:09:60:b6:ac:ff:f9:7e:ba:9f:06:31:21:ec:
5a:af:7f:5f:0c:3c:bc:a2:5e:5e:25:65:f7:fe:4a:
64:4c:f8:45:63:d7:1a:fd:cc:c8:3f:f8:8c:2c:5a:
30:ca:15:9d:3b:4f:9f:1b:f0:09:3e:5c:20:59:2d:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EF:67:3B:C6:56:4B:5D:C6:23:8C:80:73:25:72:CB:26:C9:48:F0
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/K-9nO8ZWS13GI4yAcyVyyybJSPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.212.0/23
62.93.246.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:04:58:ab:52:b0:35:c1:6f:41:02:26:6e:33:e0:c3:ef:71:
f0:a5:1d:eb:dd:cb:73:84:1a:44:7a:67:ba:62:74:03:29:9e:
e9:c5:16:e3:9a:35:b4:06:01:fd:82:31:ce:49:e4:5e:5e:d8:
84:ea:4b:4d:9c:89:4f:8d:3e:ba:38:63:c3:32:ad:6d:81:21:
20:c2:dc:2f:87:b4:e0:43:d3:f3:25:92:11:1e:ed:42:17:36:
fe:c4:ce:23:be:b8:27:82:ba:c3:c1:fa:cb:2f:83:14:85:28:
2f:f8:2e:5c:b5:ff:0b:49:fe:02:89:d3:1c:48:18:bc:39:ed:
2a:8d:06:db:41:73:b4:e1:04:d5:cc:85:5a:c1:62:e3:c1:8f:
b9:b1:82:38:a2:83:8e:ae:e0:f0:1c:a5:fb:c8:f9:21:23:a9:
4e:7d:78:19:94:a0:01:0f:76:d1:c0:09:57:43:cd:cb:77:e6:
c8:95:d9:f3:8f:33:57:0d:09:28:bf:0b:64:89:9c:d0:bc:35:
59:31:2e:c0:ad:eb:aa:4d:8d:be:9e:48:94:4e:ed:0b:41:13:
dd:0a:d3:ac:6c:35:f5:3b:6a:c6:ab:08:24:7d:c5:88:54:d9:
31:03:2c:49:95:73:c3:b2:c7:9d:cf:a8:2b:e3:1f:4e:65:19:
49:1d:ff:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 07:26:39 2024 by rpki-client on console-fra.rpki-client.org