Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/KnMDCSnVzz-d32WYK6W9g1rQNok.roa
File: KnMDCSnVzz-d32WYK6W9g1rQNok.roa (raw, json)
Hash identifier: p177D3eKzDqkQOXp5Bl69f774McxEJuTMF9J69IbsSQ=
Subject key identifier: 2A:73:03:09:29:D5:CF:3F:9D:DF:65:98:2B:A5:BD:83:5A:D0:36:89
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 018CC6B8FD2D9DC8EF7E3233B3916790FA27
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/KnMDCSnVzz-d32WYK6W9g1rQNok.roa
Signing time: Mon 01 Jan 2024 20:31:01 +0000
ROA not before: Mon 01 Jan 2024 20:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8735
IP address blocks: 193.188.250.0/24 maxlen: 24
194.8.96.0/19 maxlen: 25
194.145.64.0/19 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:fd:2d:9d:c8:ef:7e:32:33:b3:91:67:90:fa:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Jan 1 20:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a73030929d5cf3f9ddf65982ba5bd835ad03689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:a9:d6:be:93:8c:e8:2f:51:22:d0:73:4f:
fe:05:f7:55:59:42:78:e8:a3:28:19:18:17:bf:5a:
78:ce:89:e2:40:0b:60:22:75:52:1f:4e:59:54:8b:
09:af:76:15:25:8d:f3:2f:b5:d5:1b:28:fa:2a:ae:
f2:e7:d0:86:0a:7d:4b:65:99:ef:08:4a:2e:ce:b7:
9a:68:81:76:e6:ff:8f:34:d6:78:96:c5:80:0c:a8:
ae:b0:65:69:a2:13:99:bd:42:da:79:c4:13:c3:c6:
04:db:d8:aa:2d:c7:f9:0e:9e:13:33:05:3f:4d:59:
01:91:42:ea:8c:f8:46:26:a8:13:3b:6e:d2:21:aa:
07:6f:c9:21:77:0d:f6:cb:09:67:0f:0e:af:56:d0:
62:88:58:d4:90:13:5f:67:48:f2:d4:b0:b4:fb:85:
8a:5c:a6:a1:d0:23:35:10:47:5a:36:ea:03:99:c6:
47:b4:ba:19:bd:4f:6d:e0:f0:68:cf:bc:96:6c:14:
39:1f:17:63:b8:3f:9e:03:8a:fc:f1:ff:fe:26:6c:
94:dc:bd:b4:69:96:bd:ad:6d:26:11:f1:19:3e:99:
01:2d:b5:d1:9d:2d:29:8c:c8:34:fd:48:6b:d5:5e:
b5:74:7c:da:f2:4b:13:8b:cb:aa:d6:a9:6c:99:e6:
e3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:03:09:29:D5:CF:3F:9D:DF:65:98:2B:A5:BD:83:5A:D0:36:89
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/KnMDCSnVzz-d32WYK6W9g1rQNok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.250.0/24
194.8.96.0/19
194.145.64.0/19
Signature Algorithm: sha256WithRSAEncryption
5a:28:8d:a2:a3:45:be:f8:71:49:01:e6:0a:8f:6a:b5:88:e5:
32:d7:4b:f2:34:57:a7:88:4e:d5:fe:4a:88:aa:6b:34:de:f5:
be:e0:8c:9f:61:9e:08:ff:a3:83:07:1d:23:eb:16:b0:67:0f:
3d:94:1e:c0:b7:d1:f1:d0:e5:09:d9:e8:14:4e:53:ae:f3:59:
a1:c6:0b:8e:84:9e:e3:cd:b6:d3:8e:b4:94:d1:db:c1:51:8a:
3d:ac:b3:55:0b:12:34:e0:bd:67:98:f4:bb:64:4b:b7:49:b7:
ba:e6:c6:5c:68:0a:37:a6:40:8e:4a:88:f4:a1:60:fe:7a:aa:
23:c9:90:01:ca:18:9f:20:07:1b:5c:7a:8e:d5:57:c9:b8:db:
cc:e6:20:f9:78:f7:6b:06:78:87:cc:71:e8:39:c2:17:a1:05:
d9:72:0a:36:19:45:0d:64:ec:b9:77:39:0f:dd:e4:36:25:fb:
d5:ae:ad:55:8b:9a:60:e1:fa:22:a1:62:87:9b:37:72:be:ba:
6c:82:92:30:bc:dd:07:4b:fd:cf:32:78:9a:7b:06:9c:61:98:
c6:98:c6:13:73:d4:11:1c:97:39:eb:72:6a:25:a3:75:af:75:
04:23:cd:90:61:ca:f3:f8:7d:42:eb:51:07:9d:49:c7:f7:03:
47:9c:7c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 07:19:37 2024 by rpki-client on console-ams.rpki-client.org