Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/kXwl7zLIIo1wVyLqCAP7rLpZcXY.roa
File: kXwl7zLIIo1wVyLqCAP7rLpZcXY.roa (raw, json)
Hash identifier: MwxoHM3vEk3eb7cvcq7ElEp7kNipwz1Q047cRcbqBUI=
Subject key identifier: 91:7C:25:EF:32:C8:22:8D:70:57:22:EA:08:03:FB:AC:BA:59:71:76
Certificate issuer: /CN=390d4b34493382383a2096ea9e0f9b7f94f33280
Certificate serial: 018CC94DC0B156D8CD0929DCE0322EA531BD
Authority key identifier: 39:0D:4B:34:49:33:82:38:3A:20:96:EA:9E:0F:9B:7F:94:F3:32:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQ1LNEkzgjg6IJbqng-bf5TzMoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/kXwl7zLIIo1wVyLqCAP7rLpZcXY.roa
Signing time: Tue 02 Jan 2024 08:32:45 +0000
ROA not before: Tue 02 Jan 2024 08:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32181
IP address blocks: 212.60.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/OQ1LNEkzgjg6IJbqng-bf5TzMoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/OQ1LNEkzgjg6IJbqng-bf5TzMoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQ1LNEkzgjg6IJbqng-bf5TzMoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:c0:b1:56:d8:cd:09:29:dc:e0:32:2e:a5:31:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390d4b34493382383a2096ea9e0f9b7f94f33280
Validity
Not Before: Jan 2 08:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=917c25ef32c8228d705722ea0803fbacba597176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8f:1c:28:a3:f5:83:70:3e:90:0d:f3:5f:54:
6a:32:d8:5c:5d:19:9f:8e:ab:7d:fa:ad:f6:2d:10:
44:7b:04:43:83:60:4d:70:51:db:3d:38:13:bf:4b:
e7:f2:0e:ea:26:9b:16:20:6c:b4:0d:7b:3d:b2:7f:
98:49:4d:58:6e:cd:e2:c5:90:05:9c:53:89:a8:26:
5b:20:38:d3:5b:01:e8:88:3a:ba:8e:95:a5:2a:1f:
aa:fd:41:08:d2:56:52:e3:93:5e:2e:8a:0e:72:b1:
68:54:16:5e:6d:f2:1c:ba:6e:66:46:bc:d4:47:e6:
19:8d:dd:93:3e:23:87:56:f6:65:e8:a7:da:33:58:
cf:e4:07:17:cb:aa:df:d5:53:be:01:ce:db:d4:84:
bd:74:4a:f3:f3:12:b5:09:e0:ec:3b:27:2f:e1:c0:
b7:f0:90:de:fb:06:38:16:8f:8f:b6:04:60:2d:37:
ea:ac:69:19:fe:26:56:92:8f:b1:50:ed:c1:da:0e:
9e:80:16:4e:7e:df:19:d9:f9:1a:53:a2:f7:63:81:
4a:b3:1e:aa:b7:75:14:95:de:4b:4f:b3:9e:7f:99:
60:f3:dd:1e:93:72:c4:4a:9c:b6:0f:47:8e:f3:f6:
80:6e:62:3c:a9:88:41:10:41:97:7c:0e:f4:5d:83:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7C:25:EF:32:C8:22:8D:70:57:22:EA:08:03:FB:AC:BA:59:71:76
X509v3 Authority Key Identifier:
keyid:39:0D:4B:34:49:33:82:38:3A:20:96:EA:9E:0F:9B:7F:94:F3:32:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQ1LNEkzgjg6IJbqng-bf5TzMoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/kXwl7zLIIo1wVyLqCAP7rLpZcXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f52785-7aff-4e3b-9c24-1d0fbedf4b9c/1/OQ1LNEkzgjg6IJbqng-bf5TzMoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.18.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:c5:90:68:33:1b:0b:75:d4:2b:a5:67:bd:ca:37:bd:58:9c:
6a:d5:99:13:a9:54:6a:ab:d4:ec:28:c2:e8:3a:79:25:ee:94:
9e:54:c3:1e:34:2d:8f:fc:1e:6f:54:75:23:0f:6f:1c:58:d4:
49:fc:10:96:aa:3b:79:ee:cc:a8:f3:fd:33:7e:74:9e:53:95:
a3:35:6d:4e:60:c1:84:f2:c8:63:6e:0f:73:72:33:35:df:c7:
b1:2a:de:74:9c:fc:3b:77:db:e4:34:fa:2d:29:ab:34:c6:81:
54:4d:9f:45:d5:b6:9b:71:c4:1e:fb:95:66:ed:66:2b:db:02:
b2:7a:86:f9:23:a2:2c:b4:45:7c:00:39:8b:5d:08:c1:74:e6:
6e:fa:74:15:23:ac:62:76:e7:5e:ba:8f:17:56:0e:f5:50:60:
33:1e:15:a5:7a:8a:12:5c:85:18:3b:dc:fc:60:ff:3a:31:92:
2a:b1:22:a3:9f:bc:4b:ee:b8:36:f7:d4:27:79:61:11:12:16:
72:67:0e:e6:c2:31:36:b0:89:2a:a5:a8:bc:a2:64:b8:62:cf:
8d:7a:9e:9f:7c:0a:2a:e8:e2:b9:fa:40:86:1c:f3:b0:01:f2:
dd:28:60:ee:77:88:c6:88:1a:ff:18:66:ec:78:27:39:d8:2b:
1a:3f:15:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:08:37 2024 by rpki-client on console-ams.rpki-client.org