Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/kXWRAw3Mp4zMgJKgxtzBvZyBYuI.roa
File: kXWRAw3Mp4zMgJKgxtzBvZyBYuI.roa (raw, json)
Hash identifier: U2ztNK39Ls99OwmFhGPq71w/pP2CHcEPd6ZEyXOY+FY=
Subject key identifier: 91:75:91:03:0D:CC:A7:8C:CC:80:92:A0:C6:DC:C1:BD:9C:81:62:E2
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 018CC649A491DDD82B981ACB4F183E1418B1
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/kXWRAw3Mp4zMgJKgxtzBvZyBYuI.roa
Signing time: Mon 01 Jan 2024 18:29:24 +0000
ROA not before: Mon 01 Jan 2024 18:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206610
IP address blocks: 5.180.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:a4:91:dd:d8:2b:98:1a:cb:4f:18:3e:14:18:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Jan 1 18:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=917591030dcca78ccc8092a0c6dcc1bd9c8162e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:4b:ca:25:c9:77:3d:95:22:74:52:a2:b3:
d8:ae:7b:45:65:73:11:dc:2e:0d:05:ab:bf:32:c5:
0e:09:64:12:cc:4e:dc:c1:e4:d7:39:b8:1b:2f:c1:
1d:6c:e1:c8:42:02:9e:27:d5:18:40:9f:3b:3f:4d:
8e:4d:8a:76:d3:eb:4c:0a:e0:e6:66:3b:a3:99:c3:
b2:df:b7:2a:e6:3b:b8:e3:93:6f:f5:a7:e2:ba:dc:
20:a9:72:76:39:78:84:20:71:b4:fc:6c:a9:12:e3:
14:0b:f8:d7:b9:27:70:11:07:98:5d:92:a1:7f:1a:
ee:b9:21:24:23:08:3e:24:fd:3e:8c:0a:07:c6:81:
07:13:60:dc:c4:13:34:42:e2:c7:9f:b8:b0:1d:85:
1c:95:c7:90:db:df:29:db:3d:fb:e1:66:d9:b5:b6:
a2:96:85:ec:28:de:a2:3a:bd:de:c8:63:77:75:8d:
c5:51:8b:25:73:1f:b5:a5:af:f6:97:77:bc:43:6b:
65:a4:dd:3b:2b:49:c6:73:11:e5:52:80:e8:fe:b3:
29:7f:c2:f5:41:f7:86:d2:8d:a8:31:90:96:38:42:
00:48:73:4b:b3:15:64:05:76:61:a1:d7:26:10:d1:
8d:b3:43:5e:51:c0:a2:1a:1c:71:94:db:40:a5:fc:
4e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:75:91:03:0D:CC:A7:8C:CC:80:92:A0:C6:DC:C1:BD:9C:81:62:E2
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/kXWRAw3Mp4zMgJKgxtzBvZyBYuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.164.0/22
Signature Algorithm: sha256WithRSAEncryption
14:00:fb:40:46:d1:6e:c7:ef:37:83:ec:92:97:78:09:bf:3a:
d4:07:9a:ba:55:c6:c7:6b:8b:eb:d9:d6:0c:ce:8c:d2:fc:34:
96:54:2b:ff:12:3b:50:01:e8:ed:39:c1:a5:1f:11:10:b1:de:
91:b8:f8:b6:d0:21:2c:b9:2e:8e:44:e0:f6:c9:e5:63:12:ef:
5a:2f:76:f7:45:4e:50:6c:25:37:b3:73:3f:a2:52:8e:79:cb:
54:4b:6c:65:e6:ad:5e:31:e1:3f:c8:a9:30:9c:4e:75:d5:e1:
0e:6e:b5:01:7d:61:de:ec:98:35:29:a9:04:ae:bb:22:39:13:
80:69:8e:43:ee:f2:89:c8:38:d7:67:a5:27:50:1a:cb:c3:b2:
8d:75:0e:d1:28:36:f1:d0:84:47:0d:56:f3:ea:75:6e:1f:8b:
24:9f:af:ae:84:ac:31:06:ce:f7:48:d0:cc:55:aa:65:bf:8f:
59:69:b1:84:ab:10:b0:6f:a9:b7:cd:32:2a:1a:66:80:dd:8e:
5c:8f:90:7c:cc:61:fa:41:9d:0d:24:72:2c:34:72:79:c2:0a:
fa:2d:1b:fe:dc:43:c7:dd:a1:11:3f:0c:15:5b:94:3a:8c:f8:
d7:3a:9e:8c:99:d2:15:ea:d1:3e:27:c6:b2:6c:c6:e4:89:9c:
93:8c:c8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:14:18 2024 by rpki-client on console-ams.rpki-client.org