Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/KnfH3YpsNd8ohHPRr5fr9mzfFoc.roa
File: KnfH3YpsNd8ohHPRr5fr9mzfFoc.roa (raw, json)
Hash identifier: GqxobQaD8I55RI5HntACylwJNaPLpgE3PoXXjQaLHtc=
Subject key identifier: 2A:77:C7:DD:8A:6C:35:DF:28:84:73:D1:AF:97:EB:F6:6C:DF:16:87
Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial: 018CC348CA7C21878D2C60A004EAF9598922
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/KnfH3YpsNd8ohHPRr5fr9mzfFoc.roa
Signing time: Mon 01 Jan 2024 04:29:36 +0000
ROA not before: Mon 01 Jan 2024 04:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58175
IP address blocks: 193.200.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ca:7c:21:87:8d:2c:60:a0:04:ea:f9:59:89:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Validity
Not Before: Jan 1 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a77c7dd8a6c35df288473d1af97ebf66cdf1687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:29:05:a5:1e:5c:b6:b3:0d:49:b7:3e:2e:
48:c8:7f:12:66:7d:c6:11:66:d6:4d:e7:40:2b:a2:
13:1a:46:73:40:97:86:95:3e:ea:c1:88:6e:d9:5a:
dd:df:83:97:2d:fe:84:e5:7e:75:4c:c8:06:8c:84:
11:cd:d1:e7:68:82:a6:43:eb:f1:29:84:22:ae:28:
58:79:7b:53:28:6e:37:ae:c3:e1:39:b0:f1:dd:65:
e6:35:9f:7c:7b:9d:56:9b:2f:49:66:c7:50:c1:37:
cc:0a:af:83:55:c2:c7:45:a9:9d:ce:82:95:e5:c8:
f4:e0:de:c7:8c:69:74:56:77:0b:5a:cf:ce:82:f5:
a1:8e:eb:9d:ce:92:47:d9:57:06:71:3c:67:b7:df:
14:de:8d:82:19:55:b2:e7:da:3e:6f:5c:f7:ca:63:
26:58:a4:9c:8b:d4:07:54:73:88:bb:a5:52:79:5e:
31:d0:fa:ae:87:1e:c1:89:ce:99:c6:58:9b:41:e6:
98:28:b0:44:32:b9:71:5a:12:a6:1e:82:45:cb:0f:
bf:20:bf:70:8c:5d:41:2a:b0:d5:43:63:78:a6:52:
05:16:c9:8c:9b:90:af:2c:03:02:6a:67:20:a9:0a:
e5:3f:66:e1:c5:0e:e2:1b:97:a3:6d:ea:2d:60:2d:
42:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:77:C7:DD:8A:6C:35:DF:28:84:73:D1:AF:97:EB:F6:6C:DF:16:87
X509v3 Authority Key Identifier:
keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/KnfH3YpsNd8ohHPRr5fr9mzfFoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.254.0/24
Signature Algorithm: sha256WithRSAEncryption
87:86:a2:cf:10:b0:4a:a8:33:6e:ac:46:2a:73:ce:3a:0e:35:
5f:d4:dc:c4:0b:ad:69:c0:3e:a1:3e:b0:f8:b3:5c:e6:5b:af:
c8:9d:9a:55:ec:ed:cd:5b:31:7b:48:9f:d7:df:ae:04:55:f7:
b4:72:04:c1:63:c2:91:ab:83:fa:d9:c6:1c:1f:0b:54:4c:b8:
25:23:a7:af:dd:64:60:a1:94:4f:c5:5f:11:f4:30:5e:d9:d3:
14:4b:f3:10:13:85:72:08:73:b4:63:9f:b5:18:ad:ad:24:44:
ce:08:53:18:18:8a:8d:46:be:50:e8:61:cf:55:ed:57:f6:fc:
04:1d:02:62:dd:27:33:ae:6f:1e:b2:06:45:1d:4f:1a:81:cc:
e5:9a:2c:4c:4a:31:60:65:0b:bc:93:81:bc:01:6a:f6:a2:f7:
f9:61:1b:e6:83:de:b6:ed:2e:47:20:7c:09:25:8e:7a:e1:73:
36:58:d3:dd:31:3d:ef:0a:79:82:ce:bd:99:f1:31:2c:88:a6:
ca:6d:c3:a5:63:dd:b2:73:41:83:04:d2:2c:96:b5:7b:00:36:
8c:f9:d6:c5:c1:a5:b3:66:1d:0d:86:74:30:cb:4a:29:5e:d8:
f9:8c:10:e9:b6:70:ea:eb:c7:17:9d:55:42:69:c5:f2:bf:d1:
4b:08:df:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 23:45:08 2024 by rpki-client on console-ams.rpki-client.org