Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/k9DsedWd6idcLXv_26DxMjQifhU.roa
File: k9DsedWd6idcLXv_26DxMjQifhU.roa (raw, json)
Hash identifier: tEv8esLFJn2iYI1szG+YW6NJxws5YDUeq6eUGcL1VVY=
Subject key identifier: 93:D0:EC:79:D5:9D:EA:27:5C:2D:7B:FF:DB:A0:F1:32:34:22:7E:15
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 019232F71E78AAB44B61CB96A77207E8132B
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/k9DsedWd6idcLXv_26DxMjQifhU.roa
Signing time: Fri 27 Sep 2024 10:11:48 +0000
ROA not before: Fri 27 Sep 2024 10:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 185.78.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:f7:1e:78:aa:b4:4b:61:cb:96:a7:72:07:e8:13:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Sep 27 10:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93d0ec79d59dea275c2d7bffdba0f13234227e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:4b:30:e1:4b:51:7e:e5:14:6b:57:df:31:
c0:21:67:a6:98:fd:69:af:1f:7e:8e:c3:8f:a6:36:
2e:41:66:26:55:8d:48:88:d5:0b:35:37:80:b9:54:
cd:f8:77:fd:cf:a9:30:b4:ab:8d:bd:68:eb:7c:47:
dd:0e:14:86:41:a7:8a:7f:e5:9d:72:ea:44:0a:60:
50:53:04:13:a8:5f:0a:eb:b9:35:f2:9d:9f:d8:87:
75:45:e5:d5:52:85:25:13:a5:58:c3:fb:56:7f:1f:
91:20:0f:2e:7b:05:e8:52:de:fb:8c:65:d0:c5:d3:
df:1d:aa:14:c0:28:20:6e:bf:f9:8a:94:15:87:a4:
5b:dc:0d:97:6e:e2:61:3f:32:0d:ee:07:cf:9f:57:
70:d8:09:0a:aa:09:36:2f:02:72:1d:59:65:47:a9:
56:47:9c:c9:85:97:c6:1a:54:86:06:61:77:4b:c6:
c8:33:64:a6:8d:13:e8:5a:51:b1:49:56:bf:cc:57:
4a:58:7e:c4:bd:d8:48:a6:d3:98:db:42:f1:8b:65:
20:7b:56:d5:9c:ad:4a:e7:81:2d:dc:ee:59:ae:6e:
b2:32:f0:a5:b6:7c:8d:60:a7:35:cb:0a:2e:dd:6f:
06:c9:a0:51:48:cd:48:36:db:7d:a0:8d:e6:fd:5b:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D0:EC:79:D5:9D:EA:27:5C:2D:7B:FF:DB:A0:F1:32:34:22:7E:15
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/k9DsedWd6idcLXv_26DxMjQifhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.168.0/22
Signature Algorithm: sha256WithRSAEncryption
20:4c:eb:31:de:9b:a8:9b:29:12:3f:6e:6f:2e:6f:f4:d5:e5:
5a:cb:9c:82:69:bc:3b:31:8d:02:08:f0:8f:57:c5:8d:aa:04:
2c:0a:4f:a6:a3:96:70:5f:b9:e6:ad:db:3d:56:3d:ce:84:06:
e1:d8:de:2a:0b:1a:3b:74:1f:48:d5:36:24:52:6f:8a:43:27:
23:33:3d:01:d9:0d:b2:95:c7:bc:72:6b:6d:e5:b7:35:5a:6f:
47:0b:35:0b:95:6d:85:8a:14:06:cc:77:f3:9c:da:4d:7f:48:
69:0f:8c:a4:09:a3:2c:09:1a:95:00:f8:ee:74:52:5c:8e:d7:
cc:2b:a4:6f:67:be:a3:e1:f0:aa:e9:41:cb:af:87:7e:db:12:
dc:a7:6b:0d:5c:cd:05:c5:bb:c8:68:68:83:f1:ae:d1:7b:0d:
7c:90:5b:77:4f:43:dd:80:d9:2f:c3:c5:ef:13:3d:78:9f:e2:
fd:f1:60:dc:62:c2:6a:2c:ac:65:94:98:fc:63:1d:1d:f3:ab:
88:75:c7:ab:8c:85:65:24:d9:27:8f:e1:e4:4e:5c:43:0b:cc:
19:c1:7d:35:6a:cb:8f:03:de:56:59:12:12:82:48:44:4b:06:
02:e2:99:df:95:15:ab:5a:0c:05:a5:46:2d:35:7f:ea:83:57:
d2:a4:ba:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:46:42 2024 by rpki-client on console-ams.rpki-client.org