Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/kBPXRf28zyiRq98E_wCHdYJQuTI.roa
File: kBPXRf28zyiRq98E_wCHdYJQuTI.roa (raw, json)
Hash identifier: DQ0DAcXNp5fSgofu+1ekF7JSk7/wTpZAgTJ9w+2Obf8=
Subject key identifier: 90:13:D7:45:FD:BC:CF:28:91:AB:DF:04:FF:00:87:75:82:50:B9:32
Certificate issuer: /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial: 018CC79432F644B3F8B9AC78A4EBCFFEFB0E
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/kBPXRf28zyiRq98E_wCHdYJQuTI.roa
Signing time: Tue 02 Jan 2024 00:30:27 +0000
ROA not before: Tue 02 Jan 2024 00:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 193.219.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:32:f6:44:b3:f8:b9:ac:78:a4:eb:cf:fe:fb:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Validity
Not Before: Jan 2 00:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9013d745fdbccf2891abdf04ff0087758250b932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c8:98:42:b9:34:ee:db:bb:a4:60:a2:c9:38:
d6:f7:79:28:09:5b:60:4c:89:57:ca:98:a8:3e:82:
8c:af:20:ab:c0:63:db:de:87:45:31:e3:ee:ab:55:
b2:ec:51:c2:29:f6:13:78:2c:74:f9:01:f1:85:e4:
02:a5:37:09:72:f5:44:75:72:8b:9f:9e:e7:ad:f8:
e9:85:cf:db:36:0b:59:b8:11:ff:31:41:4d:03:78:
3b:be:d4:01:75:73:8c:93:4a:de:a4:8e:20:b7:ca:
08:86:0d:d8:fc:c4:cb:8a:d3:ca:f6:0e:6d:2f:2a:
bc:c7:ee:bb:bb:8f:38:0b:d8:df:50:85:10:2e:ff:
2b:3d:4f:08:dc:66:cc:48:74:35:f7:14:ae:2d:6d:
47:b8:24:a6:94:94:2d:86:30:e5:3f:ca:f3:72:8a:
3c:c7:ca:77:37:7e:7f:16:fb:8b:2b:5c:97:58:77:
3e:a5:0a:08:2b:36:f9:05:59:ac:2f:53:a5:cc:ff:
1c:88:19:5e:ac:69:da:e2:cf:0c:b0:93:2c:f1:6e:
64:1e:f8:fd:e3:31:ef:bc:12:c4:4c:67:25:ad:ab:
ed:92:1d:b4:ec:b2:6c:4c:d9:2b:23:13:44:2c:90:
0f:a6:1a:de:b6:93:79:75:95:7f:c3:22:95:91:fd:
bb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:13:D7:45:FD:BC:CF:28:91:AB:DF:04:FF:00:87:75:82:50:B9:32
X509v3 Authority Key Identifier:
keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/kBPXRf28zyiRq98E_wCHdYJQuTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.112.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:2a:00:db:33:9a:e5:b3:d5:89:ec:c6:98:d0:4b:32:d1:aa:
2a:c2:e7:01:18:4c:bf:a0:a3:88:c6:a9:3a:28:e2:cc:8e:cd:
a5:99:43:e6:0e:0e:dc:0f:2e:9c:9c:e5:c5:fa:64:92:69:35:
b7:af:f8:6c:85:81:40:35:6a:21:53:65:48:af:bf:2b:40:5c:
46:54:d2:45:dc:b6:5a:8b:c2:47:1b:2c:d0:71:6a:79:50:68:
e3:06:c4:46:fa:fb:e6:0b:8b:f0:55:8f:2e:b4:53:92:ee:16:
73:dd:8f:e7:ff:05:cf:67:7f:72:20:a6:67:ca:12:06:d8:b1:
46:d0:c7:03:1c:c9:cc:f1:ea:8b:c3:ee:10:19:cf:43:06:a1:
a3:21:cb:9f:83:58:5f:10:50:3b:53:78:b9:91:61:21:11:52:
ab:c3:1c:22:41:9f:c9:96:53:7a:b8:d8:25:99:6b:c8:81:8e:
7a:b4:c7:8e:5a:40:00:42:a1:82:96:a5:07:b6:c6:57:f2:9e:
9b:6a:f2:ab:e3:cb:2a:4e:08:21:95:02:80:88:2c:42:ca:32:
5b:4a:03:de:68:82:56:bd:89:fc:af:59:3e:48:7c:73:ca:9f:
a1:12:b0:d9:05:60:90:90:7c:2b:f4:52:ad:b7:78:f6:12:ed:
3a:8e:e1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:22:28 2024 by rpki-client on console-fra.rpki-client.org