Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/kYZXW9paXnWYcfgTdGhdj1jTtAQ.roa
File: kYZXW9paXnWYcfgTdGhdj1jTtAQ.roa (raw, json)
Hash identifier: hwwEud6JDZI44E7SOu5DKZFn/2v0WU7+I4KwuYJfhUs=
Subject key identifier: 91:86:57:5B:DA:5A:5E:75:98:71:F8:13:74:68:5D:8F:58:D3:B4:04
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 018CC727143C72B2231E6E7D0DDEF9171E8F
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/kYZXW9paXnWYcfgTdGhdj1jTtAQ.roa
Signing time: Mon 01 Jan 2024 22:31:16 +0000
ROA not before: Mon 01 Jan 2024 22:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2586
IP address blocks: 176.124.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:14:3c:72:b2:23:1e:6e:7d:0d:de:f9:17:1e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Jan 1 22:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9186575bda5a5e759871f81374685d8f58d3b404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:69:9d:72:77:c7:ce:30:3b:5e:6c:62:a7:
21:62:14:f0:82:99:10:9a:be:b1:e8:42:3d:74:44:
cb:c6:eb:5c:35:27:9d:17:0f:77:e4:0d:89:e5:cb:
dc:9a:2b:4a:69:51:cd:37:6f:07:2a:ba:ff:fd:09:
b3:e6:bb:06:d6:de:80:47:ed:c5:46:a2:18:7b:30:
66:59:72:2b:fe:13:65:54:42:90:b9:61:68:ff:9e:
9a:0c:47:3b:64:24:27:f8:0c:3e:09:10:03:43:0f:
39:40:7b:5c:6e:2a:83:d1:f7:8b:d8:bd:d9:b2:57:
6c:d1:6b:5e:05:7a:ef:26:fe:71:eb:d2:8c:e2:97:
70:25:8e:6f:31:90:43:29:7d:11:c6:ba:41:5e:61:
d3:c3:cb:cc:e9:75:67:a5:ef:84:1f:9a:ad:1f:2d:
d0:dd:6a:a3:f9:81:d0:e0:37:a2:82:f9:04:1e:37:
0f:e8:65:80:d4:de:77:ab:b8:3f:fe:e3:8c:ae:29:
83:1e:6e:20:c0:57:7a:7b:e0:4c:06:be:ab:9a:7a:
96:ea:98:e8:00:08:69:38:41:b9:2d:23:3c:d4:a4:
68:26:c8:bf:c2:f4:0f:6d:e3:f0:c7:6b:f3:50:f0:
8a:be:19:46:46:ae:48:f2:9e:35:7f:4e:0b:23:48:
bf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:86:57:5B:DA:5A:5E:75:98:71:F8:13:74:68:5D:8F:58:D3:B4:04
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/kYZXW9paXnWYcfgTdGhdj1jTtAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.247.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:eb:6e:04:2b:da:0e:be:eb:55:35:47:8a:9e:49:ab:14:21:
c2:de:45:55:65:a0:44:0b:13:61:fe:1f:e5:a1:47:e6:df:ae:
eb:e4:6f:7d:a2:b8:2a:e3:64:79:28:18:51:5f:f6:36:f3:cc:
77:7d:d6:21:18:f1:c3:62:b9:d5:1c:f4:85:f0:d2:15:f0:d6:
10:f3:19:21:93:4d:8f:47:96:9e:06:40:4e:5d:48:9a:76:44:
b4:12:fe:b5:63:12:ff:94:7e:69:69:74:af:d0:95:ec:e2:ab:
c8:da:17:21:bb:07:f4:75:b3:8c:bf:be:59:97:a8:34:1c:14:
41:ae:d8:2e:0e:53:4f:5d:e4:e4:b6:bb:69:89:3d:b3:ab:f6:
f4:9f:4a:e2:ad:29:55:b9:a3:7c:1b:28:20:1d:67:eb:1a:71:
e7:ec:a1:42:23:7a:cc:e0:80:b1:43:03:8b:8a:b5:02:d1:70:
65:3a:45:20:3b:5f:33:4e:51:94:8f:1f:38:b3:20:27:50:db:
ce:8a:56:12:bc:e0:d5:3f:ed:8c:17:28:13:98:bc:f3:bd:9e:
3a:4f:dd:1d:fe:2b:c6:ab:63:39:92:7c:3c:69:1e:bd:33:20:
ba:b9:5c:e6:ac:48:64:60:91:41:3f:b8:b5:0d:2f:41:a0:48:
c1:b5:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 13:39:59 2024 by rpki-client on console-fra.rpki-client.org