Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kbc4Ka9qxlqumv5OnIWZ5naxaH8.roa
File: kbc4Ka9qxlqumv5OnIWZ5naxaH8.roa (raw, json)
Hash identifier: tzzImqfZJCEtqifCfCwqDTuyaOk/XTRfd+KXCvUxavE=
Subject key identifier: 91:B7:38:29:AF:6A:C6:5A:AE:9A:FE:4E:9C:85:99:E6:76:B1:68:7F
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01927637F6BEF9304DA8C0DED7155963267C
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kbc4Ka9qxlqumv5OnIWZ5naxaH8.roa
Signing time: Thu 10 Oct 2024 11:37:12 +0000
ROA not before: Thu 10 Oct 2024 11:37:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 164.215.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:37:f6:be:f9:30:4d:a8:c0:de:d7:15:59:63:26:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Oct 10 11:37:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91b73829af6ac65aae9afe4e9c8599e676b1687f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:61:31:df:5c:f4:0b:cd:56:31:1d:c4:e2:
be:76:5e:f3:59:15:59:8c:41:04:01:31:ea:cc:5a:
7f:7a:83:9c:3e:30:42:2f:76:c0:6f:85:fe:96:ed:
54:7a:0b:d7:16:3f:ad:63:98:15:75:75:f7:ef:5c:
a9:34:c2:d3:67:7d:06:29:3f:78:59:e1:81:e1:82:
7c:c7:42:57:8a:9c:68:43:98:93:1e:f9:b9:5a:3e:
6d:d9:99:c9:90:ca:75:d8:71:97:e4:5e:94:f5:40:
d4:55:87:72:8b:6c:4f:aa:25:93:e8:66:80:51:d1:
93:3b:6d:8b:43:9f:9f:55:35:00:0f:89:4f:78:eb:
67:e6:22:01:0b:a5:98:e2:4d:74:37:e4:9c:00:7f:
64:bb:b6:91:dd:71:2c:94:75:99:bd:63:9e:63:27:
e9:6a:1c:a9:de:e7:04:40:b9:00:79:14:66:b9:0e:
ea:34:70:eb:eb:52:fa:e7:cc:fc:27:a1:2d:d2:0d:
7c:d3:b8:00:4f:05:ae:6e:8c:1d:61:a5:c1:c9:f3:
ee:08:3f:05:73:64:63:2e:0a:ec:44:0c:ce:38:b4:
2d:bc:d1:70:86:c8:7c:8d:06:3a:23:16:e2:6b:e9:
8f:ec:a9:07:00:17:75:51:b3:4a:60:c6:ac:85:a6:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B7:38:29:AF:6A:C6:5A:AE:9A:FE:4E:9C:85:99:E6:76:B1:68:7F
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kbc4Ka9qxlqumv5OnIWZ5naxaH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.97.0/24
Signature Algorithm: sha256WithRSAEncryption
48:72:85:31:77:9a:74:46:39:34:82:e1:6e:09:49:7d:33:40:
d7:d1:cd:e7:80:a9:68:cb:01:b0:98:97:3e:7c:b4:8c:4a:93:
9f:e9:e5:0a:73:bc:5e:30:0a:62:26:42:f5:29:f7:1e:89:15:
fb:24:b0:38:38:4e:b0:30:58:35:49:05:3f:70:c2:8c:ec:69:
95:db:87:83:d4:ba:50:64:2a:43:e3:f0:e7:f0:3f:b2:67:f8:
a7:a9:83:e3:0d:33:78:38:8c:aa:81:1f:40:c8:df:c7:bb:43:
d6:fd:f2:81:98:7c:00:56:e8:7c:73:90:d6:e9:31:2b:cb:d4:
fe:f0:dd:20:34:e8:4f:5d:45:8d:36:aa:31:e7:26:3e:82:ed:
96:d5:f5:5b:36:5c:2e:75:f7:35:ee:65:2f:e0:0c:51:09:3f:
b1:95:72:fd:dd:5a:0c:1e:fb:25:a2:b5:7f:b7:65:57:ca:44:
75:0d:17:73:3a:e0:21:bd:dd:5a:55:4a:ac:68:5c:f7:ce:ed:
58:70:23:d1:56:d9:05:70:10:46:47:d3:6c:5f:c4:9b:20:d7:
5f:82:98:85:b9:0c:4f:a0:f5:5c:5a:01:8e:e4:46:bf:82:9d:
10:0c:aa:04:25:32:3f:df:dd:a7:88:cc:49:ef:f0:ce:94:12:
60:d5:b2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:03 2024 by rpki-client on console-fra.rpki-client.org