Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/kQrdvWOP3McAGxsfRGAKYtgHRik.roa
File: kQrdvWOP3McAGxsfRGAKYtgHRik.roa (raw, json)
Hash identifier: 7C5h6oSl9bssasYn+o6uw7gVL/ZcZVDKhcS6loTHJYY=
Subject key identifier: 91:0A:DD:BD:63:8F:DC:C7:00:1B:1B:1F:44:60:0A:62:D8:07:46:29
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 018CC7945C6886BB190C215FD2A172BCC67B
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/kQrdvWOP3McAGxsfRGAKYtgHRik.roa
Signing time: Tue 02 Jan 2024 00:30:38 +0000
ROA not before: Tue 02 Jan 2024 00:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59494
IP address blocks: 5.59.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 22:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:5c:68:86:bb:19:0c:21:5f:d2:a1:72:bc:c6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 2 00:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=910addbd638fdcc7001b1b1f44600a62d8074629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:63:e5:23:d1:c8:20:b8:5e:ae:cb:bc:26:22:
75:26:16:c9:d5:6d:7a:9b:89:a9:11:43:40:56:5c:
5f:3c:92:5b:82:2f:0f:8b:03:6b:b1:ba:da:2d:16:
41:9b:b8:57:fb:4c:75:49:9f:94:c5:09:a1:b9:09:
41:ac:1d:d8:87:a4:51:67:39:c6:e1:0b:a2:95:65:
90:98:79:1c:0e:8f:65:54:00:19:f2:2d:4c:8a:cd:
06:db:92:18:36:fb:dc:e9:dd:2e:72:0e:b9:61:44:
91:db:98:bc:b6:c6:04:6b:16:5e:54:75:3e:69:a8:
ba:a3:3b:ba:9d:97:98:cc:05:9e:f5:03:a5:64:79:
52:79:02:96:f5:6b:66:da:81:30:dc:7e:35:66:21:
a7:31:e8:bb:d6:2a:9c:30:0f:2b:e0:0b:65:1c:57:
67:d0:a2:c7:0b:30:7e:61:92:a5:18:91:3a:e2:06:
a5:4b:4a:a3:00:38:a1:21:7b:01:e8:b4:37:7f:cd:
83:01:db:dc:9d:ff:31:73:e9:8a:4f:d2:34:5d:ff:
99:30:c9:d0:cd:0f:67:ad:6d:91:47:5b:61:95:5c:
96:7a:45:d9:d9:b4:9a:8e:4a:7f:c2:89:52:12:18:
82:76:e8:32:0b:9a:05:ce:7b:0c:a5:c9:f0:bc:67:
fc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0A:DD:BD:63:8F:DC:C7:00:1B:1B:1F:44:60:0A:62:D8:07:46:29
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/kQrdvWOP3McAGxsfRGAKYtgHRik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.44.0/22
Signature Algorithm: sha256WithRSAEncryption
16:67:b3:cd:e7:72:1f:ef:f9:9a:13:5b:4a:42:2a:17:d7:70:
ad:71:74:3a:bc:7e:9a:64:4f:59:16:99:4f:a8:b8:39:59:9b:
87:e7:4c:ca:71:2c:a6:4a:34:d4:f3:25:5a:d9:df:62:29:00:
71:1f:3f:1e:88:b2:2e:48:93:f8:8e:da:d4:67:71:03:af:ad:
e3:83:ac:1e:d2:78:da:c1:31:70:e1:0e:e8:43:d1:a4:ec:97:
87:cc:df:e4:90:e1:36:26:63:ae:1d:6f:34:72:21:29:e2:23:
04:e8:25:7f:e7:1e:cd:fa:31:84:3a:d2:c0:e9:b1:cf:ad:1f:
19:c8:7a:ed:ef:1c:02:9d:c0:ef:00:d7:08:fe:9a:3f:f6:f4:
81:ee:57:55:9b:e0:b2:65:d6:d3:54:eb:16:6f:e8:b1:ae:51:
a8:3f:f3:5a:9a:bc:c3:9d:27:ad:7c:c9:c3:0d:5c:54:32:d0:
4c:ce:bc:23:2e:8b:4f:2d:6f:65:77:31:e7:9b:17:91:38:cc:
88:92:95:b3:c6:5b:46:d7:d5:70:09:1c:eb:25:2e:b4:cc:1c:
70:f6:f7:18:2e:9a:cf:c2:f2:04:39:ce:e8:5d:ae:11:d9:1e:
d8:80:67:d4:da:dd:3d:92:32:98:b2:38:f4:e7:da:81:aa:46:
9c:86:46:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 07:36:37 2024 by rpki-client on console-fra.rpki-client.org