Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/K2lrg1TpCCP_S4v7NzfENjjMLzo.roa
File: K2lrg1TpCCP_S4v7NzfENjjMLzo.roa (raw, json)
Hash identifier: 1iNAgFFrQTVWzs5gmes051JigLl4w5J4JHoez6XScrQ=
Subject key identifier: 2B:69:6B:83:54:E9:08:23:FF:4B:8B:FB:37:37:C4:36:38:CC:2F:3A
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018CC9BC9FCA77E43DDA67F6DEF88AC211F3
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/K2lrg1TpCCP_S4v7NzfENjjMLzo.roa
Signing time: Tue 02 Jan 2024 10:33:51 +0000
ROA not before: Tue 02 Jan 2024 10:33:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1128
IP address blocks: 145.94.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:9f:ca:77:e4:3d:da:67:f6:de:f8:8a:c2:11:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 10:33:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b696b8354e90823ff4b8bfb3737c43638cc2f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:41:92:33:57:8c:94:f6:61:04:f1:9e:00:cf:
cb:80:60:28:15:7d:01:f7:7c:06:d5:fb:4e:d4:10:
a2:f3:7e:6f:5a:0d:dd:1a:eb:2b:6b:07:7c:45:02:
51:ab:27:12:b6:e2:7b:39:1f:f3:1d:d9:3a:bc:09:
25:ca:02:a7:14:68:6d:93:c6:76:dd:26:2f:a1:f1:
7e:13:cf:8a:2d:07:42:f9:f5:81:45:2f:1f:a6:51:
ae:6a:2d:53:2d:9e:06:30:1f:d8:7e:d6:95:4e:0f:
be:03:94:c3:39:25:32:6f:a2:4c:90:51:cd:2b:0b:
b4:74:4e:7f:a9:12:22:24:60:30:af:d0:05:a6:9c:
fe:3b:cc:e1:92:ef:c8:26:f0:b3:37:3e:12:43:e4:
12:ba:38:1e:1e:6e:5f:e2:97:dd:37:cd:39:cc:ba:
50:69:2b:bc:9d:ba:b3:1c:cb:72:09:ed:df:54:14:
cf:71:93:9a:cf:2f:69:be:86:e4:c4:9a:6a:49:23:
41:9a:60:d5:38:f1:3c:ac:57:21:6d:6a:cc:06:b5:
6f:29:8e:69:18:3d:8e:ef:96:30:49:a7:9e:b5:27:
75:19:3d:89:39:e6:88:ec:16:40:04:4d:22:eb:6a:
5a:ea:85:51:15:4c:be:70:e1:d8:4e:a3:c8:d3:64:
fa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:69:6B:83:54:E9:08:23:FF:4B:8B:FB:37:37:C4:36:38:CC:2F:3A
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/K2lrg1TpCCP_S4v7NzfENjjMLzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.94.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:37:89:be:09:2a:a3:c2:49:3d:e6:11:d3:04:56:aa:2e:0d:
ac:c5:e6:c2:02:aa:b5:28:cb:a3:f8:71:9e:04:9d:91:d7:c6:
d3:89:a0:b1:d1:24:57:2a:4c:be:f8:27:f1:2c:c6:94:b5:ee:
be:da:e0:c3:26:5f:e8:0e:d2:6b:86:10:9b:df:f1:f6:21:a7:
fa:3c:16:3b:fd:1d:07:9e:23:4b:d7:27:9a:d0:46:05:53:b3:
60:db:82:2c:1c:8b:fe:13:21:3b:3a:1d:a3:64:cc:02:03:69:
df:d7:32:ae:c8:10:71:de:78:84:ac:77:5f:41:6d:98:6e:5e:
f9:be:9d:64:95:9a:1e:00:8d:4f:4a:e4:07:5c:3f:9a:c0:22:
aa:53:ed:94:44:70:d3:17:bb:81:09:68:68:e6:49:85:26:e0:
88:0d:ca:52:7e:23:33:d5:cc:44:97:3a:1a:0d:b6:c1:e5:f2:
dd:a5:2c:b5:21:5f:82:c2:ce:c1:c3:f3:42:a9:e1:ec:fe:01:
ef:f9:87:73:b4:ec:93:a7:11:56:93:47:ed:7a:da:81:4f:9f:
cb:7b:01:5a:36:00:3d:b3:2e:64:f9:23:ca:15:34:d3:68:72:
04:f1:62:c6:5b:9a:c6:69:a9:13:c6:ef:55:ec:28:cb:b5:c5:
92:ec:9b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 05:23:35 2024 by rpki-client on console-fra.rpki-client.org