Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/KwO5YT2MukXZgr0zps6sT9OFDOE.roa
File: KwO5YT2MukXZgr0zps6sT9OFDOE.roa (raw, json)
Hash identifier: bMsXWd9B0kB/6xYL0jCq0wkP/S9324TmVvZ+VJJ6Dag=
Subject key identifier: 2B:03:B9:61:3D:8C:BA:45:D9:82:BD:33:A6:CE:AC:4F:D3:85:0C:E1
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 018CC501017E98ACA6CDD142A19E7AF65B96
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/KwO5YT2MukXZgr0zps6sT9OFDOE.roa
Signing time: Mon 01 Jan 2024 12:30:26 +0000
ROA not before: Mon 01 Jan 2024 12:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33906
IP address blocks: 193.200.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:01:7e:98:ac:a6:cd:d1:42:a1:9e:7a:f6:5b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Jan 1 12:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b03b9613d8cba45d982bd33a6ceac4fd3850ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:26:8e:5d:93:6a:9b:8f:e3:17:23:05:58:
24:bc:e9:fc:77:69:fb:92:9c:08:38:71:04:7c:82:
4a:a9:9c:01:4b:fb:63:e8:c4:55:c3:81:bc:6c:1d:
1e:d9:44:a8:71:6d:5c:94:9c:a0:77:23:48:1a:3e:
f3:59:4e:d2:da:3c:4f:37:f3:e3:1b:b7:29:d4:7b:
7c:7c:29:41:59:b4:6a:87:03:6f:b6:6c:65:4b:48:
a5:f3:5f:b5:eb:c5:4b:43:6e:81:11:22:6e:26:64:
69:62:54:cb:35:a2:24:a0:64:18:5d:a1:c6:5d:4c:
93:5a:5c:2c:56:ba:8d:52:00:65:0f:ed:16:07:1d:
8f:d8:b6:57:9f:9d:36:1a:7f:15:e5:d3:cf:92:85:
ff:5e:63:14:b2:91:af:b2:c7:37:c2:35:24:8e:45:
d2:d5:c4:7e:f1:15:4b:4c:41:bd:df:92:48:ac:46:
24:a9:6b:8e:24:66:27:12:49:c7:5b:c8:06:c8:a5:
3c:b9:b8:54:50:01:66:57:22:50:22:93:6b:a4:32:
61:e6:df:3e:50:ed:ab:84:19:f3:7e:99:db:64:03:
3f:93:77:29:dc:60:6f:67:54:83:a4:b4:26:85:6c:
98:33:62:12:db:88:57:df:67:97:36:cb:98:be:d6:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:03:B9:61:3D:8C:BA:45:D9:82:BD:33:A6:CE:AC:4F:D3:85:0C:E1
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/KwO5YT2MukXZgr0zps6sT9OFDOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.141.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:7f:ba:a6:74:b8:0b:c5:4f:80:0a:bb:f5:1e:67:6a:3e:2f:
30:1d:ff:53:ea:8a:41:91:3b:90:0d:9b:7b:33:80:95:be:ce:
ad:4a:16:64:10:e2:16:72:ba:6b:fa:18:88:cd:ff:69:a3:4e:
4f:a5:2f:2e:68:41:09:d1:61:dd:8c:44:a5:77:8a:e8:5b:b7:
a0:38:58:2f:f4:c9:5b:ca:8b:de:4e:41:aa:e5:c5:05:f9:bb:
47:97:2e:ed:19:ac:e7:51:31:7c:8f:2e:30:7c:94:55:06:b8:
5a:66:12:62:cd:c6:34:40:46:e6:3a:c9:39:9d:be:97:43:4f:
c5:f9:13:97:d9:8b:88:37:db:b4:56:b5:88:7f:b6:1f:e3:92:
5b:20:36:3c:c5:63:6a:b5:11:77:68:b9:cb:ef:67:9c:80:51:
04:77:74:c5:59:e4:b0:1a:5f:1b:bb:c5:24:59:a3:13:c3:41:
70:b2:ff:b7:3e:18:2a:25:92:82:87:ff:a6:e6:92:e3:ce:bf:
4b:e2:81:ff:f6:2f:fb:fe:04:41:fc:fa:94:dd:dd:e5:6c:2c:
6b:8f:3f:89:f5:9b:82:2f:79:ba:23:54:5a:6a:ce:4d:9f:a3:
31:db:82:83:70:6a:cc:3b:a6:07:90:03:b1:d0:40:cb:9f:8c:
35:b0:da:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:05 2024 by rpki-client on console-fra.rpki-client.org