Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/KtZHeh9RUgjPS59Z3mILX-WmEsU.roa
File: KtZHeh9RUgjPS59Z3mILX-WmEsU.roa (raw, json)
Hash identifier: eUVjmIkBHFnUG4UPOM/qtWyhaTnClpsLCOw3rY1v9zs=
Subject key identifier: 2A:D6:47:7A:1F:51:52:08:CF:4B:9F:59:DE:62:0B:5F:E5:A6:12:C5
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 01928BCEB1FFE557CAD15FA32CB68AF35F3E
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/KtZHeh9RUgjPS59Z3mILX-WmEsU.roa
Signing time: Mon 14 Oct 2024 16:13:51 +0000
ROA not before: Mon 14 Oct 2024 16:13:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 193.43.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8b:ce:b1:ff:e5:57:ca:d1:5f:a3:2c:b6:8a:f3:5f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Oct 14 16:13:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ad6477a1f515208cf4b9f59de620b5fe5a612c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:7b:22:16:94:77:b2:01:ee:0e:34:f1:81:
73:8c:7a:6b:99:d8:e8:fd:8f:97:ed:eb:e6:7f:d1:
ef:5d:d8:57:37:c5:1f:5a:3a:92:33:34:fd:51:fa:
b6:fd:d7:8e:90:6d:ee:fd:26:b4:21:8b:24:0b:01:
86:f5:9e:5e:84:44:f6:a7:a8:f7:91:00:b9:f4:e2:
de:fd:7e:5f:53:7b:c3:aa:15:41:00:73:af:a8:8f:
94:93:76:4d:2c:7a:39:47:2d:40:75:52:19:14:30:
b3:41:03:86:f1:f8:e6:1d:47:45:c9:23:3f:88:33:
d8:4d:e3:66:93:85:af:7a:2d:d4:70:da:45:4f:14:
ff:10:e9:b9:3f:fe:51:79:ac:69:c5:1c:8e:38:d5:
dc:39:7d:ea:af:5e:17:8b:4c:61:c1:2f:65:56:b3:
e8:22:ac:d5:1d:8f:4f:a9:44:a5:09:1b:d3:67:46:
82:49:f0:bd:d9:10:4d:b7:9c:05:e5:85:1c:2b:a3:
4f:4c:74:47:92:a2:4d:a3:46:36:69:62:a7:3d:e4:
30:b0:ea:88:4e:b3:20:3a:b0:5b:59:e0:3b:fb:80:
69:65:4f:21:23:83:c7:7f:e0:10:e2:a9:6d:4d:f9:
8d:32:05:d5:39:48:b2:3e:9a:1e:d6:b6:cb:46:de:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D6:47:7A:1F:51:52:08:CF:4B:9F:59:DE:62:0B:5F:E5:A6:12:C5
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/KtZHeh9RUgjPS59Z3mILX-WmEsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.249.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b0:dc:1f:4b:28:de:61:2e:16:6f:e5:76:97:63:85:1a:f5:
0f:db:f0:54:d4:93:e5:25:d7:a3:f2:42:f3:e2:f8:2e:e8:db:
2e:df:7d:b7:4d:ae:1f:d5:a8:98:48:10:ac:1c:45:b4:cc:e9:
12:af:b6:2d:d7:52:36:1c:58:bb:b7:75:dc:2f:97:77:62:df:
05:00:0a:c5:ff:9c:38:d3:7d:fa:34:af:fa:84:6f:06:82:c0:
12:56:39:f4:15:43:4f:8c:e6:51:e5:08:c2:30:a3:d8:e0:b5:
a8:53:ab:b9:4a:e1:8c:ec:2d:fa:6e:1e:c0:22:0e:33:fd:4d:
a3:cb:fb:4f:e6:19:c3:e7:b3:2e:89:24:46:f9:3a:a3:87:2a:
19:14:78:fe:8a:0a:da:e6:a6:d7:1e:17:e6:49:cb:d8:83:5c:
90:88:90:41:a9:02:fa:e4:51:cb:e8:39:8b:3a:59:89:18:23:
2c:7c:57:e1:e7:9f:e7:bf:07:6d:5f:c5:2b:75:de:b8:11:3c:
81:ec:41:2a:f8:93:d1:37:2e:0c:47:ce:0e:18:f0:cf:c6:5b:
ab:c4:b2:61:7d:7c:0e:47:31:6e:fa:73:50:69:b2:1d:70:21:
2f:53:fc:52:51:44:2c:0b:9a:4a:a1:94:47:63:02:77:23:a8:
a7:50:47:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:12:08 2024 by rpki-client on console-fra.rpki-client.org