Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/CbKykKohRfcy7GHb1vxKWME43FA.roa
File: CbKykKohRfcy7GHb1vxKWME43FA.roa (raw, json)
Hash identifier: 9rG8c7Q01wMSxcDMrnR9wI2V00Mh8nMIRd0bdRZbz5Y=
Subject key identifier: 09:B2:B2:90:AA:21:45:F7:32:EC:61:DB:D6:FC:4A:58:C1:38:DC:50
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 018F90F93E9A88072A2E4DAA055064A64C08
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/CbKykKohRfcy7GHb1vxKWME43FA.roa
Signing time: Sun 19 May 2024 13:10:04 +0000
ROA not before: Sun 19 May 2024 13:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214920
IP address blocks: 185.7.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:90:f9:3e:9a:88:07:2a:2e:4d:aa:05:50:64:a6:4c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: May 19 13:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09b2b290aa2145f732ec61dbd6fc4a58c138dc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f7:41:20:fb:c1:90:cd:42:96:13:0f:0a:c5:
c1:1d:dc:cf:76:24:22:cc:44:1a:3d:ac:b5:c6:b5:
41:09:a4:03:45:d0:a5:da:6f:b4:0e:b1:8d:fb:2c:
97:20:60:a1:a6:23:f9:47:3e:6c:d6:39:1b:d5:81:
43:62:ac:0a:96:95:de:b7:5d:40:70:2d:0c:81:cd:
6c:e9:0d:60:38:78:45:3e:4e:f5:a8:c5:7e:c9:8a:
12:a4:31:81:b1:f1:fa:f2:64:49:6e:9e:1f:65:91:
f0:e9:08:52:aa:b5:73:f4:4c:ce:58:cc:33:d9:98:
21:6f:b3:54:2a:2b:56:f8:82:3e:6c:0f:9f:2d:3b:
c8:76:78:b1:70:05:f3:f1:a5:1c:17:4f:15:c2:c9:
aa:2e:d0:01:54:9b:f4:35:b8:63:96:4d:97:84:40:
4e:e5:d9:00:0d:0d:c1:d3:4b:f4:c3:a8:12:d7:24:
ee:5b:98:49:06:66:49:28:9a:8c:7e:49:9b:cb:d9:
1d:2f:79:b9:ec:6e:e5:86:7f:cc:61:34:f2:af:c9:
99:c1:f3:38:fc:11:18:83:11:44:ad:fd:07:33:e0:
d2:e5:e8:7a:f8:4e:ea:36:59:32:04:2f:f9:5a:ce:
58:49:f4:93:65:de:08:eb:ee:41:6e:67:09:39:2d:
eb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B2:B2:90:AA:21:45:F7:32:EC:61:DB:D6:FC:4A:58:C1:38:DC:50
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/CbKykKohRfcy7GHb1vxKWME43FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.123.0/24
Signature Algorithm: sha256WithRSAEncryption
25:83:d7:3f:98:31:78:f4:b4:cd:07:41:af:03:eb:ca:9e:cf:
06:65:2d:d4:04:48:a1:0c:a9:88:03:ce:bd:b7:bb:0e:e0:97:
a0:2c:ca:73:35:7f:38:98:03:46:a3:42:d3:19:fc:dc:c5:40:
f3:2d:0e:4f:ba:4a:26:05:b0:fb:9d:f3:95:6f:bb:65:07:9e:
52:ca:05:29:f4:1b:91:e5:9a:df:1c:79:b2:d5:64:82:ea:6e:
98:71:ff:bb:05:92:9b:49:0d:3f:e9:c1:13:87:67:73:7e:4c:
ad:81:5f:ae:80:a5:11:66:eb:d2:07:ce:4a:3d:3f:1b:98:c9:
75:ee:57:2c:6a:5c:fb:8a:03:32:5f:81:83:c4:30:c2:37:da:
99:97:d7:7a:26:ff:fc:7e:44:31:47:1f:24:c2:bf:52:28:0e:
43:e4:7c:22:99:2c:78:af:ca:73:97:29:61:9c:c1:c6:1b:b3:
11:23:64:22:b3:23:5a:37:d9:35:d1:30:51:6c:73:4b:ae:fd:
e6:66:bb:1f:7b:7d:2b:fc:28:b7:1f:47:16:6e:c0:f7:02:92:
95:da:1b:06:95:f4:06:82:ef:76:0b:49:81:8a:f2:ef:7e:91:
6e:9e:a0:79:df:c3:dd:32:54:d3:b5:3f:d4:91:c9:a3:23:30:
a3:bf:3e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:32:52 2024 by rpki-client on console-ams.rpki-client.org