Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/KhTMiwDlbQdr3VWUjfS7HgG9_HQ.roa
File: KhTMiwDlbQdr3VWUjfS7HgG9_HQ.roa (raw, json)
Hash identifier: wlK1zCM52Xom6fG9FbjxzvpnmJ8rU67s+ZyCDOrIF/8=
Subject key identifier: 2A:14:CC:8B:00:E5:6D:07:6B:DD:55:94:8D:F4:BB:1E:01:BD:FC:74
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01932F013CC26B40162AD91EFD7A16B929D4
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/KhTMiwDlbQdr3VWUjfS7HgG9_HQ.roa
Signing time: Fri 15 Nov 2024 08:47:10 +0000
ROA not before: Fri 15 Nov 2024 08:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 81.22.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:01:3c:c2:6b:40:16:2a:d9:1e:fd:7a:16:b9:29:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Nov 15 08:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a14cc8b00e56d076bdd55948df4bb1e01bdfc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:61:b3:26:e9:e5:51:03:77:c3:91:d2:a6:11:
91:1e:60:5b:90:c5:ea:6e:0a:e2:91:a7:cd:9b:50:
2a:29:eb:d6:3f:ed:ed:20:23:d5:8c:69:d4:fc:90:
5d:5c:45:03:d6:2c:4f:1a:e2:51:af:c4:28:7f:6b:
c3:ad:7a:94:06:61:56:3a:c4:ff:86:d4:1c:fd:d6:
ad:19:ea:ae:10:41:12:89:09:21:61:9c:f3:41:fc:
1d:83:6c:1e:9b:60:eb:9f:0e:85:b9:59:6a:83:cd:
a6:8b:23:de:95:cd:c3:1f:12:71:85:eb:d9:79:f4:
8a:ab:19:32:ed:b9:f9:8a:65:a6:6b:85:3c:da:b1:
a4:bb:59:b6:0b:24:8b:c8:54:f6:7f:03:e5:98:b1:
de:ba:43:e1:f8:66:bb:38:0f:65:1c:17:3c:b6:56:
99:82:bd:9a:1b:06:7c:f7:39:0d:1d:86:f9:96:e4:
9a:9a:7a:a1:4c:66:38:f0:0d:dc:64:aa:46:97:ca:
c4:62:06:83:5c:31:d5:e0:1b:84:b1:9c:45:a6:14:
97:08:c3:d8:dc:eb:81:15:0e:d9:ff:74:6f:d4:95:
4f:2b:d9:d1:f8:9b:f6:57:13:9f:7a:ca:dc:27:35:
b3:45:11:85:4f:25:1e:30:41:d9:a1:41:c9:80:ec:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:14:CC:8B:00:E5:6D:07:6B:DD:55:94:8D:F4:BB:1E:01:BD:FC:74
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/KhTMiwDlbQdr3VWUjfS7HgG9_HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.141.0/24
Signature Algorithm: sha256WithRSAEncryption
86:25:e2:03:c5:83:bd:b2:b1:46:9f:59:ca:e2:0b:ad:c5:fe:
24:cf:16:08:a1:5b:c1:e4:46:8f:d9:40:f6:0d:d2:7d:d0:94:
1b:3d:3c:00:d8:88:b6:9e:db:06:23:13:ab:39:88:80:e2:11:
97:6e:b3:c7:c6:fe:1b:ce:e8:a3:c6:fc:23:a1:f7:19:49:25:
5c:13:d0:08:cb:a1:6b:04:94:e7:a0:c5:76:af:c9:21:1c:5a:
2c:e8:df:dd:1b:9e:c9:22:fe:a8:17:9e:a3:2b:19:1e:7a:5d:
33:9c:c4:77:46:fe:7d:48:47:d5:54:5e:51:78:21:51:15:bf:
60:a3:e3:af:2b:1f:98:97:c8:21:b5:e8:ad:58:81:0f:d4:ba:
a8:b7:af:50:a2:bb:66:b0:89:d7:95:87:5e:da:27:b1:32:f5:
b2:a0:0f:48:53:98:fb:0c:fa:3f:c4:26:98:1c:5c:77:e4:61:
61:26:92:53:50:55:21:9d:f6:f2:1c:50:f5:15:be:70:0d:a0:
eb:62:85:10:4c:1a:e1:3e:51:6f:89:a9:82:93:d5:57:9f:ea:
3d:34:5b:3d:a3:55:1c:26:0d:ae:12:36:ba:26:e2:b9:d6:0f:
b8:eb:0f:88:07:30:fa:34:55:fd:a6:48:41:68:66:25:33:96:
8d:ba:9b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:49:53 2024 by rpki-client on console-fra.rpki-client.org