Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/ksTdIvTlmf3VyKCOwgTDjsC4u2o.roa
File: ksTdIvTlmf3VyKCOwgTDjsC4u2o.roa (raw, json)
Hash identifier: g/G/f/dhUywgYQDYl8y8m6H2ZKOmc/6gHiq97r5Rc0I=
Subject key identifier: 92:C4:DD:22:F4:E5:99:FD:D5:C8:A0:8E:C2:04:C3:8E:C0:B8:BB:6A
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018CC94DFE3FDBB9EEAB8CA53A7766EC1A3A
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/ksTdIvTlmf3VyKCOwgTDjsC4u2o.roa
Signing time: Tue 02 Jan 2024 08:33:00 +0000
ROA not before: Tue 02 Jan 2024 08:33:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49926
IP address blocks: 195.187.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:fe:3f:db:b9:ee:ab:8c:a5:3a:77:66:ec:1a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 2 08:33:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92c4dd22f4e599fdd5c8a08ec204c38ec0b8bb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:44:e9:3e:95:71:fd:73:7e:02:b7:20:30:d7:
1d:de:41:f1:71:5c:87:f8:ce:45:e2:c2:97:d0:1f:
cd:c2:07:f1:1d:1f:e7:57:6f:25:ec:05:e7:00:e9:
c2:cb:c8:d7:2a:51:a2:e6:b0:02:e3:09:65:ff:7e:
e6:62:20:29:e9:c6:21:79:21:18:86:fe:cf:ba:2a:
77:a3:82:28:ce:19:da:b8:ed:fa:2c:aa:c1:68:77:
24:58:20:7d:b4:05:cf:a9:6d:84:1b:b6:08:53:2a:
24:29:40:1f:44:dc:ec:8a:f3:61:fa:61:2c:e3:91:
97:25:09:68:8e:38:6d:65:19:ad:3e:53:28:ad:87:
1e:2c:4f:f9:fc:07:de:af:cd:e0:32:dc:7d:aa:f5:
a2:c8:75:b4:d4:ae:7b:5a:8d:52:61:1e:9f:4c:94:
e9:7f:4d:f1:0f:4a:95:1e:64:e3:76:bd:ba:c4:22:
06:26:08:8f:ff:a8:43:ff:28:a9:38:1b:ba:b5:25:
02:22:70:50:25:27:10:3e:c6:2a:fe:d4:13:2d:02:
d2:84:09:28:5d:ac:92:f0:3c:bd:54:43:66:4f:dc:
f7:6b:b3:6b:f6:30:0a:52:66:ce:e6:a5:af:ce:a6:
d4:8f:bb:b0:f2:d3:68:0d:d5:89:ed:60:fc:1f:ca:
f0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C4:DD:22:F4:E5:99:FD:D5:C8:A0:8E:C2:04:C3:8E:C0:B8:BB:6A
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/ksTdIvTlmf3VyKCOwgTDjsC4u2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a7:c3:9b:d8:c9:f5:df:5b:1e:47:78:6d:a2:e2:80:f8:d3:
c4:da:73:b9:fe:73:9e:1d:dd:ef:a7:d7:52:cd:ec:e9:fd:cd:
76:d8:05:ce:d4:ab:e8:2b:2a:77:6d:71:85:0f:92:92:da:ac:
e4:84:d3:3b:d9:75:df:aa:87:fe:b0:91:fb:1d:c7:6e:e5:14:
b8:c9:5e:0d:df:b1:30:60:5d:33:b4:da:c3:4f:8e:1c:c0:9d:
bf:a6:86:60:26:37:e0:73:82:dd:40:b0:3e:2c:1b:a1:96:39:
63:69:fa:89:02:56:42:73:cb:bf:72:21:7d:ec:07:e7:f0:47:
23:60:3e:76:72:7f:3b:78:7a:e7:cc:79:68:42:60:e3:ec:80:
d2:ff:b9:a7:60:95:82:93:68:ff:03:f8:0c:59:18:86:38:b4:
b5:9f:91:88:98:56:1f:24:1c:55:3c:d5:6b:a7:39:b7:3c:3a:
4b:c7:4a:d5:f6:f7:b1:e4:e9:a4:6e:e8:7a:50:1c:fd:86:45:
6a:c8:79:45:b5:ac:3d:6f:0e:a1:33:57:f7:28:62:14:c6:81:
df:42:5b:1d:b0:b8:bf:ed:c9:0c:9d:56:62:8d:bf:c1:ad:14:
93:58:1c:f6:18:3c:b2:c1:9e:65:26:60:be:08:cb:2d:51:0e:
48:1b:0d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 12:58:20 2024 by rpki-client on console-ams.rpki-client.org