Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/K9WgGc9u_fHigoKJQQfMB9Plov8.roa
File: K9WgGc9u_fHigoKJQQfMB9Plov8.roa (raw, json)
Hash identifier: cwMavgSSRVxQWBMDMJ29BWIEKvJROt+BH/RkI/tPbOE=
Subject key identifier: 2B:D5:A0:19:CF:6E:FD:F1:E2:82:82:89:41:07:CC:07:D3:E5:A2:FF
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 0191CC3EF0FA3A966A33CA3FC4A7B211CF7F
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/K9WgGc9u_fHigoKJQQfMB9Plov8.roa
Signing time: Sat 07 Sep 2024 11:29:22 +0000
ROA not before: Sat 07 Sep 2024 11:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214263
IP address blocks: 79.127.73.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cc:3e:f0:fa:3a:96:6a:33:ca:3f:c4:a7:b2:11:cf:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Sep 7 11:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bd5a019cf6efdf1e28282894107cc07d3e5a2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:0d:17:05:0e:4e:5d:e9:c8:07:c2:bb:3b:
99:3d:f2:0d:db:7c:39:44:88:36:3e:6a:9a:81:02:
00:be:83:a8:4b:84:5d:1e:96:75:72:ef:23:1a:b7:
d7:a5:f3:e8:9d:f6:93:ab:8b:4b:6e:5a:06:f5:b0:
94:ed:9e:01:58:39:81:d7:09:ba:0e:aa:9b:a7:9a:
b8:56:26:96:87:55:7a:ef:44:2e:83:69:2e:2b:52:
ea:06:2f:3e:6f:10:5b:15:78:42:5c:e8:46:39:20:
cf:19:04:fe:09:d9:5e:0b:e5:37:ec:f3:f9:57:ae:
30:35:a4:29:63:b3:53:d0:7f:29:03:e1:27:5c:9d:
dc:64:f5:3b:d2:38:25:aa:6f:0b:63:28:96:8e:c1:
47:ae:9d:80:5c:65:d1:4e:61:bb:4e:50:c7:81:54:
ed:8f:e1:a4:32:2d:35:62:36:51:a8:06:b8:a3:61:
7e:10:66:65:97:c1:06:f2:65:41:18:07:3b:c2:09:
b0:c8:8a:83:f4:c3:e1:62:c8:fa:32:26:cd:9e:32:
be:a5:ca:1f:37:35:27:04:28:39:72:4b:23:e6:87:
1f:02:d1:94:ca:a8:4a:62:fb:4c:dd:b2:a0:ac:4b:
47:7d:73:52:48:91:43:fc:33:64:3a:ab:f9:f8:ce:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D5:A0:19:CF:6E:FD:F1:E2:82:82:89:41:07:CC:07:D3:E5:A2:FF
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/K9WgGc9u_fHigoKJQQfMB9Plov8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.127.73.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:49:74:84:cf:3a:64:f1:22:5d:12:1e:90:cf:41:5e:e0:6c:
b0:bd:be:f3:4a:70:7b:31:69:e2:28:6a:ed:b2:1b:5e:d9:0b:
ee:a1:ac:de:1b:f2:fa:fe:2a:f1:50:c2:7d:c6:c5:05:cb:da:
6f:bd:cf:fb:2a:51:fb:88:f1:63:90:27:6b:2e:7c:e5:d3:a6:
8c:3b:57:16:5b:7c:25:9b:9b:9d:3f:5b:07:79:63:69:d6:3f:
50:e9:cb:29:aa:82:bb:28:fb:51:01:f8:fc:98:f5:9e:02:d4:
30:7d:ba:ce:61:24:ee:91:85:30:66:dd:86:1b:53:1f:56:7e:
c6:1f:0c:4c:58:b6:b5:71:cd:b2:84:6c:ca:73:6b:8f:ad:d0:
42:cc:a4:19:e6:15:65:70:27:8b:47:9c:44:5f:12:35:0d:0f:
89:3b:62:13:40:c9:f9:cb:02:7b:68:09:66:04:ec:1e:b2:61:
fc:6d:04:7f:df:00:43:c8:f5:64:d0:d7:21:4e:fa:8e:bc:1b:
1f:15:db:02:a6:a2:61:58:73:d0:b9:ba:43:77:eb:02:ec:2d:
35:fb:a0:67:4c:5c:48:54:52:43:8d:c5:4f:67:74:13:93:e4:
af:ad:0f:af:a4:91:b6:ee:9e:b0:b0:f4:9e:20:44:d7:36:57:
92:3a:25:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:33:42 2024 by rpki-client on console-ams.rpki-client.org