Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/B_kcfE_4339VZrrX-MU9k2VajNw.roa
File: B_kcfE_4339VZrrX-MU9k2VajNw.roa (raw, json)
Hash identifier: u+6i2PazBaUADzqxvOBqjIsVm1E0q+pzYfC3TX00BGg=
Subject key identifier: 07:F9:1C:7C:4F:F8:DF:7F:55:66:BA:D7:F8:C5:3D:93:65:5A:8C:DC
Certificate issuer: /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial: 018CC56E01B90D66ADC7562ABC978AF09DBD
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/B_kcfE_4339VZrrX-MU9k2VajNw.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201223
IP address blocks: 193.134.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:01:b9:0d:66:ad:c7:56:2a:bc:97:8a:f0:9d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07f91c7c4ff8df7f5566bad7f8c53d93655a8cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:88:fb:fe:f3:68:d6:29:07:48:ae:af:e1:
d2:c8:fd:6a:85:b8:d2:40:d2:f0:5f:a9:92:95:6d:
28:ca:7c:fb:87:6e:99:04:91:9e:b2:87:d9:e6:68:
03:ad:f1:80:61:75:e2:a2:ca:b1:e8:cb:e9:fc:db:
ea:5f:1f:ec:4e:c3:d9:73:27:5c:e8:63:9d:b0:27:
6a:a5:ff:e0:cd:d6:56:9f:f5:ff:b6:e8:ab:cd:7b:
05:5b:e4:5c:65:01:a3:62:fa:72:a0:12:4f:ca:d3:
ff:3b:6e:86:db:fe:5a:d4:9d:a0:ae:1f:db:21:e5:
68:29:e2:6e:36:d4:6f:31:3b:d9:8e:a6:c8:f4:5b:
18:cb:ec:dc:e3:aa:0f:1a:89:35:17:22:c3:73:90:
78:74:35:9e:bf:98:0e:87:b3:08:56:52:ba:55:6a:
f6:c9:3b:c7:40:51:4e:11:f1:3e:d4:76:e8:0a:8a:
f0:ae:64:4a:9b:59:65:fa:d9:25:07:19:ac:dc:d2:
fa:45:49:42:0d:2f:c7:7c:29:18:31:fd:5e:31:0d:
16:39:7e:ba:f7:cd:cc:22:9a:0d:24:d3:72:39:3a:
7e:87:71:94:48:dd:40:30:8b:ce:d5:41:7f:51:41:
69:24:8e:7a:eb:6b:77:5c:6a:9c:f7:2a:c8:99:a7:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F9:1C:7C:4F:F8:DF:7F:55:66:BA:D7:F8:C5:3D:93:65:5A:8C:DC
X509v3 Authority Key Identifier:
keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/B_kcfE_4339VZrrX-MU9k2VajNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.163.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:46:bf:78:68:74:6f:09:9f:f4:60:fe:c2:17:83:8d:24:ae:
8b:3d:fc:2e:da:d1:d8:69:7e:81:67:86:48:fb:b1:52:b0:33:
81:c4:85:af:4a:6b:3e:e7:24:2b:2a:7e:2d:03:d2:07:a5:51:
dc:ae:b5:d3:5e:2b:f0:98:6a:e2:b0:9b:64:9c:95:44:4c:56:
a6:04:0f:04:f2:7f:07:ed:66:bb:c8:b5:45:2b:61:91:8b:23:
5f:2e:ad:3f:f9:c7:57:46:c7:d1:33:1f:94:a7:c0:70:68:03:
1b:a6:55:ee:4b:6f:da:32:44:e3:71:8e:e9:53:ce:7a:41:f7:
a9:9d:79:a4:7f:1c:e0:70:42:b4:7b:e8:f5:ce:fa:8b:7c:39:
6a:9e:5d:2c:d2:90:2e:12:a7:f2:35:e2:e7:a3:fa:54:30:85:
78:12:53:55:71:83:5e:65:04:e4:1d:5b:a8:75:be:72:df:d1:
97:a8:8a:60:cf:26:95:7f:a2:e4:00:b4:ef:b3:85:e7:82:89:
b1:7e:e6:e9:b8:c6:e5:49:56:d8:b0:be:12:9e:f3:45:75:cb:
24:8c:48:f5:44:dd:98:f4:8b:03:18:0f:40:38:b7:71:0d:11:
c5:e5:af:50:54:fe:fa:eb:e5:32:01:3c:d4:d0:f9:aa:08:ab:
91:d2:c3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:01:04 2024 by rpki-client on console-ams.rpki-client.org