Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/xKTRc2A3Y0Pc-13bWj9FU4SFnXs.roa
File: xKTRc2A3Y0Pc-13bWj9FU4SFnXs.roa (raw, json)
Hash identifier: IL36PxxJSsoNvW7tCa8VUEc0Z7ceH93gJxQoHn86ygo=
Subject key identifier: C4:A4:D1:73:60:37:63:43:DC:FB:5D:DB:5A:3F:45:53:84:85:9D:7B
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0191C1653B36B68EA383B2EF9C7531CE7F08
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/xKTRc2A3Y0Pc-13bWj9FU4SFnXs.roa
Signing time: Thu 05 Sep 2024 08:55:22 +0000
ROA not before: Thu 05 Sep 2024 08:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24768
IP address blocks: 92.61.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:65:3b:36:b6:8e:a3:83:b2:ef:9c:75:31:ce:7f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Sep 5 08:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4a4d17360376343dcfb5ddb5a3f455384859d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:77:53:6c:95:c5:e0:ce:b4:6a:f9:c1:b0:
2e:d7:2e:6d:de:7e:21:b6:a4:5f:da:8e:7f:20:ba:
d5:78:de:ca:7b:6a:02:be:98:48:10:9a:9f:53:b2:
9e:b1:da:72:03:68:29:f5:11:db:1e:4c:d8:c7:73:
25:09:e8:00:5f:c6:5b:10:07:1d:86:2a:7e:23:5e:
25:5f:d3:ee:c1:51:d8:de:fd:45:41:58:a7:1f:ae:
08:e4:f6:5e:6c:5f:52:43:9f:b6:20:d5:da:dd:4f:
16:a5:00:1f:df:b8:65:f1:e1:7a:27:e9:7a:cc:80:
89:57:9f:c9:3c:de:a6:49:ed:d6:89:e7:97:2d:7b:
15:2d:2d:3a:46:82:62:87:17:d2:1b:8a:a2:c3:8d:
65:a8:13:04:e0:dc:c0:60:84:04:0f:1c:ad:27:00:
8d:87:5e:c4:2d:aa:e6:ee:86:36:a1:c5:11:44:aa:
27:2f:28:d8:b1:93:c5:04:a7:e9:cb:17:67:81:b4:
55:01:6d:a5:06:78:a4:a0:83:44:1a:02:86:33:b6:
d6:10:57:6c:e2:98:e3:fc:66:79:93:fb:d1:52:1c:
34:eb:10:99:49:74:d0:e3:f7:2c:d1:c1:b3:5f:63:
6f:7f:c8:1f:f5:d8:52:00:07:7d:43:5e:07:dc:2f:
3c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A4:D1:73:60:37:63:43:DC:FB:5D:DB:5A:3F:45:53:84:85:9D:7B
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/xKTRc2A3Y0Pc-13bWj9FU4SFnXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.97.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5a:fb:e2:44:3e:a3:1e:ac:89:03:87:a4:91:45:5a:4e:61:
ed:5e:f5:45:a1:1a:29:f2:0f:b3:e4:fe:ca:47:fc:c1:d8:7a:
d4:2c:eb:7c:12:f5:1d:64:e8:9f:c1:24:1a:3b:44:16:d9:29:
40:d2:11:67:b8:02:ea:d5:f2:b9:94:f2:c4:af:4c:f6:e7:a3:
05:75:1e:12:1e:42:be:a5:a1:a0:87:5c:ae:09:05:2f:94:8a:
a5:e9:69:6d:1d:ec:81:88:fe:54:cd:4e:f9:76:02:f1:b0:4f:
25:74:50:e1:dc:a6:45:84:82:26:80:42:12:fd:ce:0e:4a:4f:
17:d8:be:ca:3a:13:fe:5b:1d:98:fe:c7:63:15:58:35:2d:3d:
a8:79:2f:d6:e8:09:43:22:ab:e3:55:81:21:c0:04:2a:83:52:
af:fd:cd:30:e8:62:c9:86:a8:c4:45:95:aa:c5:a1:f0:82:07:
c6:a5:61:bd:df:91:29:ed:e8:62:5f:81:66:91:59:2c:15:a8:
67:b7:2b:3d:ec:f6:11:ca:57:a2:97:a5:45:5d:9f:54:8b:7a:
d9:46:57:e5:98:ea:dc:f6:32:c3:5b:85:bc:b2:6a:3f:c0:80:
1b:b1:4c:72:ae:6f:6a:44:54:bb:bb:3b:9b:ec:15:b9:23:ea:
62:91:1a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:43:34 2024 by rpki-client on console-ams.rpki-client.org