Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/KXFcL43HYalSbX-PesxVKAgHl-0.roa
File: KXFcL43HYalSbX-PesxVKAgHl-0.roa (raw, json)
Hash identifier: 52MQye4EhqReIoAkom+SXe691vHyhnUo+ipW2W1C/vI=
Subject key identifier: 29:71:5C:2F:8D:C7:61:A9:52:6D:7F:8F:7A:CC:55:28:08:07:97:ED
Certificate issuer: /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Certificate serial: 018CC5DC075638EA382C8B2A0A7A73C68BDD
Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/KXFcL43HYalSbX-PesxVKAgHl-0.roa
Signing time: Mon 01 Jan 2024 16:29:40 +0000
ROA not before: Mon 01 Jan 2024 16:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57329
IP address blocks: 185.151.92.0/22 maxlen: 22
31.31.40.0/21 maxlen: 21
2a06:d440::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:07:56:38:ea:38:2c:8b:2a:0a:7a:73:c6:8b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Validity
Not Before: Jan 1 16:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29715c2f8dc761a9526d7f8f7acc5528080797ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3c:7d:3c:f6:0d:1b:1a:22:e3:da:78:b1:f5:
ff:01:db:7d:dd:bd:f2:87:c1:e8:75:58:96:d7:28:
01:28:b8:ea:78:b2:8e:f4:de:a4:82:84:19:57:bb:
5a:20:ba:a1:7d:bc:b5:57:cb:b1:4a:a2:a4:32:9a:
37:0d:33:a8:ef:f1:66:4f:18:d6:71:46:13:d9:6d:
5c:8c:ff:bd:c3:f8:d4:a6:6d:2b:69:f5:04:71:bf:
cf:fc:19:90:ad:2d:51:51:14:79:7e:c9:bb:50:45:
b4:cf:17:c4:39:21:73:17:54:35:0a:5e:4d:db:f6:
42:0a:2f:f3:d5:08:99:e9:0b:6f:ac:2b:3b:42:73:
a2:ac:e6:ed:41:c4:44:5e:99:c2:21:7e:04:29:69:
75:b2:47:d2:95:e9:67:4c:2d:b5:87:02:7c:88:7a:
1b:04:bb:49:34:dc:26:0f:6e:dc:68:fe:d6:4f:eb:
96:24:20:0e:5b:23:83:97:f1:3c:16:1c:2a:f0:4e:
09:c4:ca:3e:7a:0e:10:8d:35:66:05:ae:f4:d3:6f:
4e:92:66:c1:18:69:24:09:92:c9:17:dd:11:18:fb:
a6:bc:bf:08:ac:6d:5f:3f:ad:a3:6b:42:83:af:40:
46:e6:64:ea:95:73:e7:e2:5e:bd:a8:b6:7a:6d:c5:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:71:5C:2F:8D:C7:61:A9:52:6D:7F:8F:7A:CC:55:28:08:07:97:ED
X509v3 Authority Key Identifier:
keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/KXFcL43HYalSbX-PesxVKAgHl-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.40.0/21
185.151.92.0/22
IPv6:
2a06:d440::/29
Signature Algorithm: sha256WithRSAEncryption
c3:4e:de:b4:68:c0:44:ab:8f:23:09:6d:55:30:00:29:3c:a2:
7e:f4:db:3f:6f:b2:d4:50:4c:b7:2b:80:2e:21:2c:46:c0:cf:
a8:e9:a1:f1:da:f4:0c:a7:81:02:d4:ad:01:15:d6:d8:2b:df:
f1:64:01:ac:ce:43:20:21:63:64:9f:96:88:ad:bd:c6:cb:cb:
05:0a:4d:92:7b:60:ce:cf:31:9e:5b:89:a2:b4:c3:ad:55:1a:
99:6f:29:91:30:7d:6b:91:62:cf:9f:8a:ae:e4:10:6c:af:25:
2e:05:1b:b3:66:a3:c0:f0:7d:fa:a4:e8:34:6c:9d:84:6a:57:
59:24:50:1c:fa:c2:25:be:bd:1a:a3:d8:4e:76:83:6a:c0:33:
97:d0:28:cb:81:c5:60:8a:96:61:59:17:15:80:83:ad:09:37:
b6:03:99:fc:55:4b:8e:d9:7a:a3:50:6e:eb:cb:c1:c0:78:51:
9f:ee:91:e7:58:b4:80:48:d8:4f:e5:39:86:73:91:2a:1b:ab:
41:81:8b:28:87:37:1e:84:98:06:4a:ab:8a:a9:7a:38:c3:a5:
37:08:9e:0d:00:4c:b3:6d:d6:dd:73:3d:e8:ba:68:21:9c:a4:
f2:91:4d:a9:ce:ba:c0:8a:c8:83:66:1c:92:51:35:06:d0:b6:
2b:88:db:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:45:14 2024 by rpki-client on console-fra.rpki-client.org