Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kn_sVBvgIjpoJ9exWWGyesaLorc.roa
File: kn_sVBvgIjpoJ9exWWGyesaLorc.roa (raw, json)
Hash identifier: RQfZvwmFVjwS6LhNC54KGUuMOeujke54qVpZD7WTXMM=
Subject key identifier: 92:7F:EC:54:1B:E0:22:3A:68:27:D7:B1:59:61:B2:7A:C6:8B:A2:B7
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D21F09653148A62131D964B94760EDF8E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kn_sVBvgIjpoJ9exWWGyesaLorc.roa
Signing time: Fri 19 Jan 2024 13:37:11 +0000
ROA not before: Fri 19 Jan 2024 13:37:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61424
IP address blocks: 185.112.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Jun 2024 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:21:f0:96:53:14:8a:62:13:1d:96:4b:94:76:0e:df:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 19 13:37:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=927fec541be0223a6827d7b15961b27ac68ba2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:36:ea:22:d6:13:45:aa:b8:05:80:10:d3:
ce:8f:0c:71:df:51:c0:8b:4d:71:7f:fa:78:91:4e:
30:a4:aa:1c:e6:a9:61:52:6d:76:f6:ab:57:66:10:
80:77:61:dc:f8:d6:09:91:18:a2:e7:95:0d:8b:dc:
b8:c0:cb:82:bd:2e:94:85:b1:63:e7:78:02:02:ce:
bc:5f:c2:7b:0d:af:69:f4:a1:65:97:d4:9c:46:61:
8a:aa:1e:fd:73:5e:4b:58:f4:bc:8b:46:e9:f1:e8:
60:f5:6f:6f:fb:6d:c6:55:3c:50:9f:e8:9a:ee:c6:
51:07:de:f2:44:16:7d:c3:c6:5f:3e:df:dd:e3:75:
8c:3f:f7:27:71:d2:bb:f1:83:2b:cb:a8:d2:54:84:
3a:12:98:52:3e:e7:65:36:4e:95:5e:dd:55:9c:51:
f2:00:52:aa:37:43:b1:9e:bf:6f:6d:6c:91:ee:8d:
2b:b7:45:36:e6:f2:7c:ba:e6:f9:5f:03:ed:f6:4d:
4f:bc:8d:7c:1b:2c:c0:37:f0:4d:68:1e:99:ba:44:
e6:44:67:12:c1:c3:db:ad:ec:d2:57:74:6d:61:6f:
2c:03:74:5c:f4:d3:34:a4:69:4c:32:28:06:c4:5d:
37:63:82:fd:94:63:ce:25:76:26:be:a3:ab:48:95:
99:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7F:EC:54:1B:E0:22:3A:68:27:D7:B1:59:61:B2:7A:C6:8B:A2:B7
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kn_sVBvgIjpoJ9exWWGyesaLorc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.249.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:0f:36:6e:91:9d:ec:7a:c5:09:d8:67:14:53:5d:28:16:17:
8c:bf:c6:b1:39:a4:dd:1e:8e:b9:16:e3:0b:f7:4a:ba:f9:71:
87:ec:62:3e:af:fd:0f:a7:e2:f4:38:04:61:07:fd:8d:0c:d6:
ef:7c:b8:d9:72:88:51:97:9c:02:1b:ad:70:f7:d4:4a:c7:c7:
d4:47:f6:97:71:6f:e6:7e:78:e7:5c:eb:ff:6a:ba:29:6e:0d:
ff:5d:8e:6e:e7:dd:f3:e6:a8:77:9d:70:44:41:1a:93:85:70:
3e:d1:c8:17:fe:33:f2:56:01:90:1f:e1:fc:38:2e:09:19:93:
fb:77:42:87:16:87:79:36:31:be:9f:0a:6f:a6:f2:b7:d9:b0:
d8:2f:ee:15:4c:f9:d8:94:6c:9e:21:7e:77:2e:f5:81:d7:11:
99:92:05:b7:eb:cd:02:05:f2:ae:6f:65:c4:f8:4d:ff:95:b6:
35:55:bc:26:d7:0f:45:5a:2a:3c:7d:c1:81:1b:54:af:ec:55:
c0:02:ac:0d:41:b7:de:e9:91:35:24:6c:96:f2:5c:ff:05:a9:
19:55:80:31:f7:11:4c:a1:f0:d4:c3:d1:e1:b4:52:3e:02:b0:
6f:61:45:7e:6d:5d:0b:ea:2f:90:2f:6c:71:29:2f:88:aa:e1:
26:44:b4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 03:51:46 2024 by rpki-client on console-ams.rpki-client.org