Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/kJdGzlKK6XfevKfqUbcEMw-3rfg.roa
File: kJdGzlKK6XfevKfqUbcEMw-3rfg.roa (raw, json)
Hash identifier: i/pZahZinWh3ZkPBe9Maat92jsHHZtVwOkiF4XR/9s4=
Subject key identifier: 90:97:46:CE:52:8A:E9:77:DE:BC:A7:EA:51:B7:04:33:0F:B7:AD:F8
Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial: 018CC727597C968D65AC3B0895ACCB832C67
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/kJdGzlKK6XfevKfqUbcEMw-3rfg.roa
Signing time: Mon 01 Jan 2024 22:31:33 +0000
ROA not before: Mon 01 Jan 2024 22:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 83.66.0.0/16 maxlen: 24
62.29.0.0/17 maxlen: 24
31.200.0.0/17 maxlen: 24
213.243.0.0/18 maxlen: 24
94.120.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:59:7c:96:8d:65:ac:3b:08:95:ac:cb:83:2c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
Validity
Not Before: Jan 1 22:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=909746ce528ae977debca7ea51b704330fb7adf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:e4:01:a2:6f:7c:79:1c:40:a2:ee:b0:f9:
c6:72:bc:29:7d:5b:10:31:6c:ad:f0:85:c1:1e:43:
1c:23:78:44:bb:01:28:af:53:56:9e:1d:d6:44:82:
28:ce:3a:83:1d:f2:5b:a1:aa:31:41:f8:3e:32:91:
6c:49:51:13:f6:d0:99:50:13:52:37:f0:c5:15:20:
02:d8:c6:e7:ce:b9:37:3f:ce:e2:83:20:a4:32:b4:
ed:78:56:e1:45:65:e2:c2:ed:f3:14:f4:34:9c:56:
44:55:d3:2e:34:ee:91:a1:9f:d4:99:0e:f4:36:af:
c8:d5:bc:85:46:74:c1:70:ba:b8:ef:71:33:23:a6:
f5:b5:31:10:e3:15:b9:fd:28:ed:5b:74:3b:99:83:
27:35:34:9f:c3:65:22:e2:43:2d:5d:fa:78:59:7e:
80:7e:43:76:ca:d4:71:70:32:39:9d:9b:52:ba:d2:
b8:72:b2:95:4a:f5:a9:a6:69:03:e6:7f:a0:3f:37:
ed:54:55:b8:21:fb:2c:9f:3e:57:2b:da:12:8c:79:
5b:38:93:07:da:1e:88:4b:e3:99:04:b1:85:0c:3b:
33:0b:90:f7:63:55:98:ba:12:14:f8:c1:30:ea:1f:
83:8d:5f:ca:d7:55:b7:8b:37:71:7f:ab:f9:79:0b:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:97:46:CE:52:8A:E9:77:DE:BC:A7:EA:51:B7:04:33:0F:B7:AD:F8
X509v3 Authority Key Identifier:
keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/kJdGzlKK6XfevKfqUbcEMw-3rfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.0.0/17
62.29.0.0/17
83.66.0.0/16
94.120.0.0/14
213.243.0.0/18
Signature Algorithm: sha256WithRSAEncryption
89:5b:77:13:a6:03:13:6d:85:44:ce:06:07:f4:77:5c:13:00:
fc:be:e0:6c:1b:0a:94:fc:95:72:ce:39:5e:cd:88:3b:cd:3d:
22:b1:a8:e6:bc:ad:fd:95:e2:03:23:9b:be:c7:aa:5c:49:97:
b8:b7:94:93:01:a4:09:22:90:ef:77:1e:73:36:2b:bd:7e:24:
47:ff:19:a9:ff:ff:d4:af:45:f2:6b:b9:ed:9a:63:5b:be:57:
da:89:23:6d:24:c8:95:87:a2:94:91:09:9c:e7:91:19:e6:c7:
b5:7e:bb:e5:75:2a:38:37:67:cd:df:2f:b0:5f:bf:c3:29:b3:
58:22:26:54:61:59:02:bd:d3:d8:22:2c:e5:dd:03:f7:ec:7b:
7e:11:21:76:8a:2d:d3:aa:cc:47:75:32:c0:73:30:26:27:d4:
ea:9f:b0:15:0e:60:17:56:2e:5b:48:09:81:aa:47:1e:68:cc:
04:f6:70:5b:a5:47:b6:4d:d3:9a:17:69:28:49:e1:cc:4a:78:
92:00:91:f1:f5:b9:d8:c6:d6:80:92:f6:20:ed:25:92:69:35:
a5:89:e8:3f:0f:d0:96:45:10:24:8a:55:9f:56:9c:3a:dd:6f:
1c:8d:71:bb:17:f5:90:0a:3b:02:ed:b6:63:3d:43:47:da:83:
3f:d4:40:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:23:56 2024 by rpki-client on console-fra.rpki-client.org