Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/k4kNdgNtrjPJ6fFdqqM-MZz9DW4.roa
File: k4kNdgNtrjPJ6fFdqqM-MZz9DW4.roa (raw, json)
Hash identifier: JSOqWM97Nxw+U0LKo9sKF/Z68QMlQWo9HwFM2StT4Pw=
Subject key identifier: 93:89:0D:76:03:6D:AE:33:C9:E9:F1:5D:AA:A3:3E:31:9C:FD:0D:6E
Certificate issuer: /CN=673b3a71cf772755a3df8ced5d73516f871c0a11
Certificate serial: 018CC493791152B2C8668C88132D0F5BDC45
Authority key identifier: 67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/k4kNdgNtrjPJ6fFdqqM-MZz9DW4.roa
Signing time: Mon 01 Jan 2024 10:30:48 +0000
ROA not before: Mon 01 Jan 2024 10:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209236
IP address blocks: 170.102.144.0/24 maxlen: 24
170.102.145.0/24 maxlen: 24
170.102.192.0/24 maxlen: 24
170.102.192.0/23 maxlen: 23
170.102.194.0/24 maxlen: 24
170.102.195.0/24 maxlen: 24
170.102.193.0/24 maxlen: 24
170.102.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:79:11:52:b2:c8:66:8c:88:13:2d:0f:5b:dc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=673b3a71cf772755a3df8ced5d73516f871c0a11
Validity
Not Before: Jan 1 10:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93890d76036dae33c9e9f15daaa33e319cfd0d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:e9:82:e2:46:2a:8c:44:d4:e9:a3:91:81:
98:da:8f:be:45:f5:0c:0c:03:30:c8:63:5e:48:fa:
d6:00:ad:9f:15:c3:a9:f8:1f:43:22:c8:bd:87:08:
83:89:bc:1b:f2:77:d0:1c:37:83:9a:b8:97:5d:07:
f3:c6:56:22:31:d3:7a:23:00:bf:54:dd:01:3d:1b:
78:ab:28:62:6c:55:6c:b2:6b:2d:f7:bd:9f:b3:8f:
38:7b:b4:07:b8:dd:0e:a8:f7:02:d6:72:c0:75:94:
f4:56:db:e7:dc:75:85:f1:c7:72:5f:11:b1:65:62:
84:87:f9:f7:3e:6f:28:47:6c:6b:23:b0:5a:e6:25:
da:25:dc:c2:b2:c1:46:48:31:de:1b:46:35:2f:c5:
d1:04:5f:0e:0a:5a:bb:0b:aa:1e:50:ca:c8:f1:ba:
ea:ac:6c:04:22:a2:d6:28:82:ac:5d:f6:5e:36:ff:
73:56:69:11:73:27:11:2b:2e:20:24:85:ab:5e:ab:
d9:f7:12:c4:02:eb:d2:e3:77:be:8e:f7:ba:50:a5:
d7:cc:e1:c5:be:68:f9:d2:46:66:8b:6b:01:1a:1c:
4e:5e:8a:bb:4c:8d:3d:d9:be:9b:9a:c1:74:86:60:
09:4c:f2:d8:14:30:44:33:3d:39:ca:8b:da:63:99:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:89:0D:76:03:6D:AE:33:C9:E9:F1:5D:AA:A3:3E:31:9C:FD:0D:6E
X509v3 Authority Key Identifier:
keyid:67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/k4kNdgNtrjPJ6fFdqqM-MZz9DW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.102.144.0/23
170.102.192.0-170.102.196.255
Signature Algorithm: sha256WithRSAEncryption
70:3d:56:ee:f0:16:1e:53:37:07:84:16:cf:f4:96:8e:3d:dc:
00:b6:0d:64:6c:f2:f0:ef:4e:16:2c:bf:e3:63:4d:92:c7:84:
67:c9:6b:bf:87:2a:18:9d:38:fc:28:6a:52:18:fd:b2:91:ad:
b1:06:3a:d6:b9:55:5a:43:4f:4a:47:5b:83:eb:3d:7a:d9:dc:
1d:a5:ab:39:61:1b:e7:6a:58:7d:f4:90:40:54:27:7a:c8:a9:
b5:61:9d:f2:3b:ca:38:54:16:5e:e1:c7:26:3a:3b:7f:94:7c:
4d:fc:db:9c:ca:83:ab:5b:c9:cd:6f:6a:c8:06:f8:09:e9:a2:
e9:a8:6a:39:43:46:6e:ad:2c:15:34:f2:d6:40:9b:6e:76:60:
ef:67:99:e1:eb:8a:82:cb:a0:f2:83:40:69:7d:27:f9:0b:4d:
a2:e3:bc:f8:f2:36:5e:14:90:e2:aa:22:70:66:34:ff:ea:1b:
21:e9:97:ef:5f:81:dc:b0:30:4c:2d:70:e5:52:e9:64:92:8f:
61:72:1d:f4:ee:a7:96:15:bb:01:9d:3f:8b:e7:0d:73:3e:09:
79:83:0c:bf:1b:94:e8:de:8f:5e:58:2f:8f:99:64:99:8b:cd:
e2:59:05:1f:35:8d:c9:d6:fb:26:09:b0:9e:eb:4b:55:07:59:
dc:89:f8:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 1 01:41:36 2024 by rpki-client on console-fra.rpki-client.org