Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ka7GdGScTjfJkh1IHn70O2EVlEA.roa
File: Ka7GdGScTjfJkh1IHn70O2EVlEA.roa (raw, json)
Hash identifier: buntDC14DumV0yckp0SdTSP16zHQPnKkKInFVFlE+KY=
Subject key identifier: 29:AE:C6:74:64:9C:4E:37:C9:92:1D:48:1E:7E:F4:3B:61:15:94:40
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EAE4051A8FB12CB3AC36007A70F6F2DF2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ka7GdGScTjfJkh1IHn70O2EVlEA.roa
Signing time: Fri 05 Apr 2024 12:33:54 +0000
ROA not before: Fri 05 Apr 2024 12:33:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215667
IP address blocks: 185.254.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ae:40:51:a8:fb:12:cb:3a:c3:60:07:a7:0f:6f:2d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 5 12:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29aec674649c4e37c9921d481e7ef43b61159440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bd:5c:fb:eb:4f:5c:eb:5f:cd:9d:5f:23:d9:
c0:67:1c:9b:74:93:c5:ff:21:2d:08:78:8e:3a:9d:
df:06:bf:d3:d7:c9:46:4f:ac:39:f5:fc:6d:16:64:
4d:4e:ab:b6:93:01:14:be:80:96:a5:c6:49:6d:75:
22:21:ad:30:d6:09:ea:57:36:8d:db:80:0e:ec:7c:
04:bf:9d:28:34:11:8d:50:be:4a:85:df:08:20:b4:
f6:e6:72:47:eb:62:3c:b4:f4:74:7f:32:6d:e2:97:
aa:9c:b3:21:7c:bf:57:71:1e:27:af:21:a4:2d:7c:
84:6a:35:ef:e6:ac:5f:d3:83:e2:1e:47:ef:65:74:
da:89:82:ae:9f:d8:31:1b:58:6c:f7:ed:d8:63:e7:
60:ce:28:80:b7:3d:72:9d:0f:5b:fd:8c:ce:10:25:
91:3c:06:d1:9b:c6:48:87:8c:5d:07:94:ca:b1:a4:
28:2f:b3:98:f5:1e:51:d3:83:f7:12:2d:64:85:e8:
49:34:fd:5d:9d:7d:ad:7d:6f:ff:89:2d:13:0e:59:
88:15:9e:20:66:89:45:90:8a:24:9d:01:a4:45:a2:
d7:7f:5b:bf:7b:6d:97:b9:9d:7e:ef:b7:28:3b:bb:
3e:94:55:ff:7a:50:77:e1:8c:59:a0:24:9f:17:5f:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AE:C6:74:64:9C:4E:37:C9:92:1D:48:1E:7E:F4:3B:61:15:94:40
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ka7GdGScTjfJkh1IHn70O2EVlEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.37.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:64:29:3b:f7:45:51:0e:01:16:96:04:e3:be:2a:6b:fd:f3:
6a:fc:1d:e7:d9:02:56:15:9e:70:ce:f1:1d:3f:00:11:19:3b:
ad:9a:6d:f3:91:76:ff:31:fb:dc:0a:bd:0e:90:6f:5f:0c:a3:
17:b2:e2:e1:c5:da:dd:45:03:99:cf:36:c9:f7:d0:58:0e:92:
35:48:ec:bf:c5:ea:1a:f3:fc:3b:ba:b1:01:59:d8:2e:fe:7d:
99:d6:89:f4:2c:9a:42:ea:bd:5b:bf:ef:73:65:34:0a:61:73:
b2:3c:42:6a:76:db:91:5b:e8:dd:a9:ec:fd:be:a6:01:ae:23:
db:e9:d4:ec:1a:aa:1a:f1:e2:97:26:3c:4a:ec:de:2f:75:5e:
ed:43:11:6d:39:d0:db:c7:8c:39:12:48:68:c3:b3:14:31:3a:
bc:94:0f:f0:89:f8:f7:00:1f:96:be:ff:38:0b:99:46:eb:4d:
f4:62:af:25:14:91:35:28:99:df:29:83:4e:52:eb:4f:eb:f0:
20:6f:90:73:00:82:ee:70:88:b4:46:82:f8:29:13:3e:10:8c:
6e:e5:95:27:88:4d:62:be:16:38:03:fe:7c:38:e4:77:11:91:
85:fd:1e:77:44:68:9f:26:3a:a3:97:41:97:f4:c8:7f:95:00:
2d:1b:25:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 06:57:12 2024 by rpki-client on console-ams.rpki-client.org