Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/K16E5IQl8QeDAKkdiZTEKTlSM4k.roa
File: K16E5IQl8QeDAKkdiZTEKTlSM4k.roa (raw, json)
Hash identifier: 2WLqPC+N5xGSkd6zSRkz+XcaubWI3L5U6Nwl49YzS3w=
Subject key identifier: 2B:5E:84:E4:84:25:F1:07:83:00:A9:1D:89:94:C4:29:39:52:33:89
Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial: 018E5658EC406E0259814700599DA1E67E32
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/K16E5IQl8QeDAKkdiZTEKTlSM4k.roa
Signing time: Tue 19 Mar 2024 10:54:11 +0000
ROA not before: Tue 19 Mar 2024 10:54:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43668
IP address blocks: 94.131.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:56:58:ec:40:6e:02:59:81:47:00:59:9d:a1:e6:7e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Validity
Not Before: Mar 19 10:54:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b5e84e48425f1078300a91d8994c42939523389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:35:31:b5:19:b8:55:11:d2:18:29:5d:ff:e2:
be:41:7d:88:d3:cd:50:e7:c8:5e:22:83:da:c3:d2:
0c:bb:3a:ed:d4:c8:b8:61:c2:0b:a0:1b:bd:47:fe:
8c:cc:0b:4d:74:a1:cd:f1:eb:1f:be:dc:60:dd:f7:
65:07:20:98:4c:9a:fe:c3:e6:bb:6f:3b:fa:87:fb:
d2:0d:2b:03:47:9e:9d:b1:bb:8d:de:52:da:11:b1:
13:91:88:9e:12:06:b0:47:3c:cd:c1:08:a4:65:4e:
22:64:f2:07:4d:c4:52:bb:74:37:9c:bd:69:27:83:
cf:9d:b0:81:93:5a:d6:f7:82:61:4a:37:e0:4d:19:
a2:c8:3f:b1:58:d0:d5:3f:4b:a1:ef:b0:96:c4:1a:
8c:ca:86:8a:be:05:38:b0:73:35:7d:0c:39:7b:ee:
21:fc:fd:e2:9c:54:2c:75:3b:e7:74:24:03:f2:6e:
89:fc:d1:b7:ed:05:81:83:02:aa:c1:d8:36:54:1d:
e5:65:4e:1b:e3:f9:1f:a4:13:66:fb:8d:e6:90:6e:
5e:5d:74:9d:9d:1f:9d:a9:08:ea:22:20:0c:88:3d:
39:1a:47:a4:d7:13:dc:34:7e:51:34:8f:8e:74:d5:
77:47:18:aa:d8:61:cc:5b:bd:b5:4a:ef:4e:38:64:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5E:84:E4:84:25:F1:07:83:00:A9:1D:89:94:C4:29:39:52:33:89
X509v3 Authority Key Identifier:
keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/K16E5IQl8QeDAKkdiZTEKTlSM4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.221.0/24
Signature Algorithm: sha256WithRSAEncryption
78:96:0d:47:57:54:cf:57:db:4f:35:5a:b7:c1:fe:f2:e3:64:
12:76:c7:41:38:4c:3f:1d:e3:04:82:e5:6a:f2:26:68:7f:f9:
41:14:e9:1c:1b:12:57:2d:82:1c:5f:7e:a1:2c:71:9a:ba:50:
90:6c:74:95:c3:8e:58:45:6d:2d:c0:b0:0a:3b:1a:6b:38:07:
47:32:8b:56:03:6d:c6:7e:56:03:a9:0d:2f:f4:e7:aa:63:da:
28:49:33:cc:44:d7:cd:6c:db:b4:ff:96:57:c1:db:43:9d:cf:
1c:dc:bc:6f:4b:9c:04:65:a3:fd:05:3b:3b:1b:7c:87:70:ac:
6b:de:57:49:fe:88:ba:73:96:4d:4c:ff:50:55:bf:c7:8c:aa:
b3:ce:38:7c:fe:06:57:92:e8:84:06:b2:59:5a:87:73:bb:31:
15:4e:ef:cb:0a:bc:dc:03:53:08:58:e0:94:fa:1e:e4:87:4b:
a3:10:93:a5:e9:9e:cb:45:4d:5c:b5:2a:84:91:d6:4a:8e:d6:
ae:c8:ce:6d:4a:40:c9:63:89:b9:f1:c6:7b:ae:b3:55:12:1f:
9d:b4:ff:d3:fe:2f:11:b4:29:bb:9c:91:ae:02:a3:88:17:a7:
f4:aa:31:64:d3:b7:4b:81:ae:45:b0:17:78:44:94:72:8f:d1:
86:ef:89:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:49:27 2024 by rpki-client on console-fra.rpki-client.org