Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/KGwDjtI9HAMS8ZZvKIkx7gaDOXk.roa
File: KGwDjtI9HAMS8ZZvKIkx7gaDOXk.roa (raw, json)
Hash identifier: mtH6mT3OvtmR4ML/LV6hr5TUhQwtnZXyO9yQvHsBGEI=
Subject key identifier: 28:6C:03:8E:D2:3D:1C:03:12:F1:96:6F:28:89:31:EE:06:83:39:79
Certificate issuer: /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial: 018CC794D43288535C350EEA684865C185ED
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/KGwDjtI9HAMS8ZZvKIkx7gaDOXk.roa
Signing time: Tue 02 Jan 2024 00:31:08 +0000
ROA not before: Tue 02 Jan 2024 00:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50304
IP address blocks: 185.12.72.0/22 maxlen: 24
2a02:e340::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:d4:32:88:53:5c:35:0e:ea:68:48:65:c1:85:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Validity
Not Before: Jan 2 00:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=286c038ed23d1c0312f1966f288931ee06833979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8b:53:21:7b:5d:69:69:ca:e8:e4:ac:a1:b4:
3c:14:60:d6:44:23:51:3a:02:20:c2:65:f1:5c:00:
1d:60:6c:e5:7a:3f:f9:d8:11:22:1d:e8:0f:cb:a8:
37:19:b1:a8:00:ba:26:65:fe:77:c8:7b:6c:95:7f:
70:0d:86:b5:65:48:02:09:76:31:3f:2e:85:e3:41:
09:b5:09:b2:b5:bb:21:2e:50:0e:96:d1:b9:17:f3:
9a:a0:1b:1b:40:e2:be:89:bd:bf:c2:0e:a0:bc:2a:
8e:d0:3d:73:6b:4e:d8:e8:8f:48:27:67:ee:28:f0:
06:07:bc:8b:2c:05:a2:82:e0:2f:8a:c9:1d:df:9d:
67:a8:79:e7:da:c2:f3:6a:61:6c:8d:9c:2c:2d:52:
ee:0e:61:ac:19:61:a0:a2:50:6c:10:f0:6d:bd:3d:
98:6c:b0:16:dd:3c:d7:45:ad:e5:b6:56:a0:e6:f0:
dd:c3:82:9f:83:db:b7:86:8c:fa:a4:02:17:72:a9:
fd:b2:87:4a:1e:9c:e2:b5:bc:30:4b:9b:1d:5f:72:
71:e6:15:db:8b:cf:54:d4:dd:3e:79:35:91:12:08:
fb:23:cf:8a:37:37:18:1d:97:fa:c3:6b:05:3c:57:
de:65:61:0c:b0:ae:60:53:ce:55:29:1e:e3:30:a5:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6C:03:8E:D2:3D:1C:03:12:F1:96:6F:28:89:31:EE:06:83:39:79
X509v3 Authority Key Identifier:
keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/KGwDjtI9HAMS8ZZvKIkx7gaDOXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.72.0/22
IPv6:
2a02:e340::/29
Signature Algorithm: sha256WithRSAEncryption
78:fd:dc:d2:a9:a7:44:09:8a:8a:03:d5:ee:75:3a:6e:67:ce:
38:ef:14:c0:c7:d0:2b:38:c4:2c:3b:5a:0b:89:56:ab:66:ff:
af:98:a8:44:b5:c8:08:a4:37:91:4d:41:2a:b9:be:72:e7:51:
04:e8:c4:5c:a7:ca:af:56:24:d3:af:48:9f:f8:c0:4a:ef:df:
b9:12:a0:59:e2:6e:c3:8e:99:00:ff:b8:41:97:95:4a:a4:25:
4b:36:82:f3:34:6a:db:f8:4e:d3:27:48:d5:48:6f:82:93:4e:
ae:97:db:ff:cc:e6:bb:03:4f:ac:16:46:1d:43:f1:45:4d:8b:
53:c3:41:a0:71:19:5a:70:fa:e9:0c:d3:b0:a5:10:86:cc:32:
b7:d8:85:87:f3:23:c9:32:ae:3e:44:00:ec:13:7c:40:cd:6c:
ff:95:c6:be:86:bd:e6:96:b8:27:3d:8f:2c:8b:9a:c7:38:ab:
bb:44:0b:b2:70:8e:7f:a8:68:3a:1f:48:5d:e6:be:cc:a5:f2:
a9:76:72:1b:02:5d:cd:86:7e:06:f6:0e:e2:90:0f:e3:5b:55:
f7:28:a8:35:a9:d8:12:48:f6:13:73:40:e4:fb:84:86:93:fe:
c5:5a:20:c2:8f:25:50:89:86:1c:b5:d2:56:75:b4:aa:ed:eb:
13:3b:d9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:26:46 2024 by rpki-client on console-ams.rpki-client.org