Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KfDXIkZ7d_jQjDWZLQFvXTPDtnA.roa
File: KfDXIkZ7d_jQjDWZLQFvXTPDtnA.roa (raw, json)
Hash identifier: 7i4DqbQGbFbkOFkIVsdzBqH22b5o1EJZAaetJAZZ8tw=
Subject key identifier: 29:F0:D7:22:46:7B:77:F8:D0:8C:35:99:2D:01:6F:5D:33:C3:B6:70
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018E161B23B0E2D9E22202F99FCC39DA3ED7
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KfDXIkZ7d_jQjDWZLQFvXTPDtnA.roa
Signing time: Wed 06 Mar 2024 23:31:01 +0000
ROA not before: Wed 06 Mar 2024 23:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 5.180.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:16:1b:23:b0:e2:d9:e2:22:02:f9:9f:cc:39:da:3e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 6 23:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29f0d722467b77f8d08c35992d016f5d33c3b670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:06:b2:b5:88:cf:c3:b4:f8:3a:e4:47:06:5a:
93:0f:5c:a1:ce:ec:f6:6e:fe:cc:d1:ba:c2:2c:a3:
db:05:25:fa:f9:a2:80:08:1e:6e:64:be:0f:39:8d:
c2:46:3e:4e:e5:bc:d8:c3:bd:5f:2a:ca:b8:97:99:
39:f6:bb:09:dd:0b:4a:62:f0:ce:ea:62:7c:72:76:
9d:24:04:c8:b8:eb:85:b4:ec:25:77:1c:3b:86:52:
af:ee:3b:47:b2:98:69:5d:f8:77:8a:80:81:4b:e2:
04:a9:4d:eb:79:c5:4a:16:ea:90:1e:a1:f1:8a:f3:
85:cd:a3:e0:26:ca:6c:df:99:1a:55:d4:92:0e:a8:
d5:72:bf:77:50:8d:98:31:e1:77:90:af:3b:8f:a5:
5b:02:03:1b:fa:ea:5e:3d:a0:fd:84:b3:13:43:21:
da:66:a3:a2:4d:98:fd:cd:62:17:9c:82:fe:3e:3b:
00:09:c9:f1:03:2d:6a:ba:b0:79:5a:8f:4c:4a:e7:
9b:1b:80:10:4c:0a:36:b8:aa:27:79:d7:2c:2d:8a:
c3:25:3c:03:53:e5:2f:1c:b7:51:7f:e6:6f:70:04:
b8:5d:88:ec:9e:bf:5b:3b:04:19:b5:56:df:14:d2:
2e:4d:4b:fa:2a:a2:f4:3b:0e:64:ef:52:df:3d:38:
43:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F0:D7:22:46:7B:77:F8:D0:8C:35:99:2D:01:6F:5D:33:C3:B6:70
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/KfDXIkZ7d_jQjDWZLQFvXTPDtnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0/24
Signature Algorithm: sha256WithRSAEncryption
af:36:89:6f:c0:03:5b:c5:63:3f:0a:cc:84:c8:07:ec:c1:e6:
9d:9f:40:4b:76:83:fb:17:f7:c0:72:09:42:74:a8:c8:e1:2e:
77:35:fb:50:ee:5a:05:0e:b2:dc:8d:58:ec:8c:fe:87:e9:17:
48:de:4e:f1:29:28:6a:7b:0d:27:04:aa:52:cd:e4:fb:83:65:
be:8f:fb:2c:d5:7e:88:dd:bb:5f:ce:8f:57:5e:b5:8b:a3:0e:
bc:3e:d2:aa:db:37:76:ac:45:80:15:73:59:fe:73:ee:d9:e5:
32:b2:ac:44:90:9c:4f:ba:e5:64:64:0b:f5:43:80:3d:74:07:
74:ef:dd:ef:d1:86:9d:24:a3:89:5d:64:ed:4e:55:04:bb:c9:
6c:7d:a3:bc:8e:06:c4:04:d1:15:79:9f:bc:a9:3a:7c:38:61:
f1:3a:5b:c9:85:35:21:9c:cc:06:06:3e:98:aa:69:ba:1a:34:
41:2a:3f:da:1f:21:e8:5d:2c:4b:5b:6c:75:ca:39:ae:b5:a7:
c5:56:a2:45:9d:21:59:02:5a:01:72:4b:9f:44:0d:20:73:19:
38:58:12:0d:84:10:a2:f1:5f:67:e3:7f:b8:3e:bd:a1:0b:1e:
28:09:f9:d0:10:e5:fb:58:31:94:65:27:35:27:25:f0:dc:c2:
5d:90:23:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 04:37:55 2024 by rpki-client on console-ams.rpki-client.org