Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/k5SToErwCtuLapF8YvBv5H6u_j4.roa
File: k5SToErwCtuLapF8YvBv5H6u_j4.roa (raw, json)
Hash identifier: 8trP5wcpMjwKGSievsauVUeojjQIrVYq/Kzj+mdvBns=
Subject key identifier: 93:94:93:A0:4A:F0:0A:DB:8B:6A:91:7C:62:F0:6F:E4:7E:AE:FE:3E
Certificate issuer: /CN=2f600d291d4823835af103aad39ede05bd12c9b6
Certificate serial: 018CC42506424B5274D0BDF867ECB0F94132
Authority key identifier: 2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/k5SToErwCtuLapF8YvBv5H6u_j4.roa
Signing time: Mon 01 Jan 2024 08:30:09 +0000
ROA not before: Mon 01 Jan 2024 08:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59573
IP address blocks: 91.243.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:06:42:4b:52:74:d0:bd:f8:67:ec:b0:f9:41:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f600d291d4823835af103aad39ede05bd12c9b6
Validity
Not Before: Jan 1 08:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=939493a04af00adb8b6a917c62f06fe47eaefe3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:39:ea:45:47:48:9f:5c:ae:76:14:2b:59:
c7:c6:17:d0:19:aa:3c:dd:13:de:01:92:a4:5a:1d:
11:d5:bd:3f:41:26:f6:19:b9:60:24:34:ef:54:1b:
53:e2:71:d5:fb:9d:67:8d:3d:b4:56:61:7e:2e:8a:
bc:83:e0:ca:b4:43:c8:df:0f:09:a1:cc:56:92:49:
ec:92:64:1e:97:0a:af:ff:aa:62:98:41:87:63:05:
35:2c:bd:a6:25:8c:f7:24:3d:69:78:e5:d8:da:a2:
0b:0d:9d:ca:d0:e3:c9:ef:8f:f3:86:f2:0c:e5:e5:
e1:1c:99:b5:83:a3:2c:cb:b5:13:af:f8:b1:b0:99:
70:8f:b3:e9:62:0c:3c:c3:2f:35:77:08:a9:f1:a8:
c1:ca:b2:26:7e:31:e2:11:98:17:b5:32:3d:36:e5:
9a:76:d7:50:34:4f:0b:30:96:3c:8d:3c:f0:db:2d:
a2:eb:2d:8d:0e:46:73:cc:4e:c4:3c:84:80:33:b8:
8f:90:ef:27:cf:c9:51:64:07:1a:47:e5:3c:23:96:
da:03:70:60:f7:25:45:c7:a2:f4:55:fd:5b:b5:40:
a5:e2:a1:99:0d:49:91:c3:55:0a:cb:e2:9f:8e:4e:
df:c0:b8:65:41:42:ae:e4:99:65:46:45:a1:06:31:
ec:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:94:93:A0:4A:F0:0A:DB:8B:6A:91:7C:62:F0:6F:E4:7E:AE:FE:3E
X509v3 Authority Key Identifier:
keyid:2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/k5SToErwCtuLapF8YvBv5H6u_j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.160.0/20
Signature Algorithm: sha256WithRSAEncryption
98:c0:d6:38:f6:42:56:db:5b:8b:70:88:ee:e4:99:6e:f4:ae:
93:e2:6b:e9:d6:80:79:10:79:ee:fa:b2:5e:89:0e:0b:93:2b:
fd:17:23:2b:c5:b7:ca:f7:d5:2f:dc:e4:3c:5d:d3:f3:2f:d3:
17:ac:87:0b:7c:fe:b0:89:2a:17:e2:85:02:7f:c2:22:e6:8a:
64:22:77:6f:c3:dc:5c:58:e6:e5:e0:2d:ea:59:87:02:71:ef:
ae:38:ea:96:be:7d:54:3a:59:0c:5e:49:02:54:f7:10:36:1f:
c8:80:70:51:56:68:aa:3a:57:43:7a:6c:7d:8d:af:93:4c:2f:
4c:07:d9:91:36:e0:91:0f:eb:8a:eb:73:b7:41:23:1e:f3:b0:
e3:38:46:b0:aa:23:d8:9b:65:bb:bf:3e:3a:87:5f:30:2a:94:
b8:24:a2:14:d4:f7:6a:a5:d9:c5:11:ee:e5:73:59:9c:e6:c2:
e9:a6:a1:06:1b:e2:71:94:b9:be:8c:4f:cc:b1:57:69:cb:73:
99:ff:b8:23:88:4f:b0:40:e5:b5:56:bb:39:90:2d:9f:99:a5:
06:78:b2:2a:5b:e6:cf:01:46:46:fd:28:90:fe:af:85:9f:98:
af:6e:30:4a:14:da:3f:cd:d4:fb:0b:fa:51:83:5c:73:41:5f:
e0:af:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:18:36 2024 by rpki-client on console-ams.rpki-client.org