Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/K23Ah2TLDD2WWv2Y7fQKeIyEUDs.roa
File: K23Ah2TLDD2WWv2Y7fQKeIyEUDs.roa (raw, json)
Hash identifier: fSVHLsyxhJK3gXCGcs8yBnF6BQNVrf0HVR7MVV+oIj8=
Subject key identifier: 2B:6D:C0:87:64:CB:0C:3D:96:5A:FD:98:ED:F4:0A:78:8C:84:50:3B
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 018CC7953C8E66BFF3F6699D106FC2BD7FCF
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/K23Ah2TLDD2WWv2Y7fQKeIyEUDs.roa
Signing time: Tue 02 Jan 2024 00:31:35 +0000
ROA not before: Tue 02 Jan 2024 00:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51435
IP address blocks: 91.217.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:3c:8e:66:bf:f3:f6:69:9d:10:6f:c2:bd:7f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: Jan 2 00:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b6dc08764cb0c3d965afd98edf40a788c84503b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:3f:3b:b9:c4:1d:6d:7a:2b:dd:3c:ec:d8:
7e:3b:e5:f8:7d:e9:64:ab:2e:06:72:e1:0c:23:c7:
5c:b3:c8:f5:ee:87:ce:9c:d8:c6:f8:bd:34:be:ac:
70:55:96:4c:30:d2:c2:99:e4:60:a5:5d:71:0f:65:
ec:96:41:07:9e:e6:8e:a2:04:59:eb:49:98:f4:df:
3c:c2:d8:f8:4e:01:5f:e5:88:29:27:b7:d3:eb:41:
f3:b2:e9:51:f1:7d:12:42:72:2c:22:57:20:a6:29:
c2:2a:57:fd:00:2d:30:f2:f2:02:0d:ee:04:e6:94:
8c:36:75:48:a3:65:34:68:84:52:d4:ea:24:7d:9f:
78:97:b3:21:bc:8c:6e:6a:8c:dc:a3:1b:30:51:83:
93:10:c1:82:12:c7:5d:23:2c:d0:c4:67:50:49:79:
ed:83:72:d9:9c:61:cc:df:8f:f2:fa:2c:67:94:a1:
53:0f:fc:f0:f4:45:18:11:d2:c8:02:bf:e7:c8:72:
37:1c:4f:3f:f2:ad:79:0e:5c:c9:e5:4e:ee:53:24:
59:7c:65:50:7b:4c:8c:14:c3:2f:7b:1e:18:0c:19:
4d:44:61:b5:83:a9:f7:e0:d4:40:53:29:68:d3:66:
5d:10:07:32:b5:b4:0a:32:05:a0:7e:d0:0d:7c:c4:
e4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6D:C0:87:64:CB:0C:3D:96:5A:FD:98:ED:F4:0A:78:8C:84:50:3B
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/K23Ah2TLDD2WWv2Y7fQKeIyEUDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.147.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:67:e3:31:f3:9f:30:b3:e4:74:66:e8:8b:d7:e1:67:b0:d2:
44:5f:64:38:ae:e9:9b:2a:98:75:17:1a:86:8b:ce:f8:23:94:
93:f1:9e:53:4c:6c:e3:93:96:0c:cc:cf:d9:fa:34:06:d0:b9:
ce:64:59:7d:dc:29:8c:aa:a4:e7:06:7d:2d:37:2e:6d:b9:99:
f7:38:4a:3f:8f:e1:b1:32:d1:b0:6d:fb:24:91:45:41:4e:05:
9c:b8:48:9e:b9:fc:5b:a8:8c:3a:3f:27:0d:ff:24:93:bc:6b:
33:de:e7:66:3d:be:5b:9e:a8:79:47:dd:80:32:19:7f:4c:68:
61:7f:5a:a7:b8:e4:be:24:8f:ab:66:92:e1:ae:a9:94:64:8f:
98:3a:a9:e8:33:1c:0d:ba:e8:df:c3:6c:b1:8f:4e:74:eb:42:
84:96:63:c9:41:34:d6:e4:e8:8a:33:e7:e2:e2:bf:97:5d:a6:
d4:f6:67:b6:93:49:83:95:a9:33:77:16:a0:69:ba:fa:eb:9d:
c5:1a:d9:55:cc:a3:84:8f:61:5d:26:7d:e8:3d:af:2d:30:6e:
e7:c9:b6:4e:2c:ec:81:cd:b7:10:b7:85:07:76:88:24:e6:4f:
8a:29:b3:0d:df:b9:35:e4:60:73:c6:8e:25:56:0c:02:02:f9:
b5:17:08:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:47:51 2024 by rpki-client on console-ams.rpki-client.org