Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/sk1wKorW-QTwALnxzuSvjCOLJjU.roa
File: sk1wKorW-QTwALnxzuSvjCOLJjU.roa (raw, json)
Hash identifier: eLtYHCDqJWJMIZ52wvy/2kr3kUnXZX7vWe1REf8+RO8=
Subject key identifier: B2:4D:70:2A:8A:D6:F9:04:F0:00:B9:F1:CE:E4:AF:8C:23:8B:26:35
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 018CC94CAD068F1E6B562FF5BFDDC09427CC
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/sk1wKorW-QTwALnxzuSvjCOLJjU.roa
Signing time: Tue 02 Jan 2024 08:31:34 +0000
ROA not before: Tue 02 Jan 2024 08:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39180
IP address blocks: 185.24.17.0/24 maxlen: 24
185.24.16.0/24 maxlen: 24
185.24.18.0/24 maxlen: 24
185.24.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:ad:06:8f:1e:6b:56:2f:f5:bf:dd:c0:94:27:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: Jan 2 08:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b24d702a8ad6f904f000b9f1cee4af8c238b2635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:6d:bf:cd:4b:0a:0e:8d:e6:6f:e2:89:b9:
a1:4b:44:22:4c:20:3f:06:aa:3a:87:b4:56:43:a5:
6a:1d:3f:d1:53:ea:81:b3:7a:1e:e5:fc:f7:f3:7a:
97:cb:7a:a2:3f:fb:28:7b:a2:e8:f6:00:85:ae:47:
57:86:59:b3:33:48:d1:6d:84:9a:9e:7a:9d:db:5d:
55:da:8a:61:92:76:25:de:74:78:c7:28:b2:6c:06:
1f:07:21:3c:6c:2a:70:37:63:e0:4c:09:f2:6f:fe:
eb:a6:28:0b:f9:0c:dc:46:b4:d3:b4:04:d0:c8:15:
25:51:54:bb:3a:0d:9d:5b:36:c5:7e:e5:ea:17:fd:
35:f5:93:7b:39:6c:dd:46:96:d9:8a:ca:04:15:74:
3b:ce:6c:0b:43:88:ed:e3:bf:77:9a:ef:8f:3b:56:
87:16:dd:e6:4b:23:6f:48:37:6c:da:37:5f:cd:83:
a9:5d:f2:8d:aa:5c:30:98:19:27:e8:59:b8:f4:9b:
19:54:c7:f6:7d:78:0c:50:e4:4a:31:52:43:ec:d2:
4f:74:3a:1e:1d:b4:3f:2a:a0:92:43:1f:d5:1f:e0:
d3:61:e4:07:43:8b:e7:73:72:7d:1e:cd:94:37:11:
cb:da:89:0b:4b:e9:74:74:26:4a:68:ce:98:03:51:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4D:70:2A:8A:D6:F9:04:F0:00:B9:F1:CE:E4:AF:8C:23:8B:26:35
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/sk1wKorW-QTwALnxzuSvjCOLJjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.16.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:15:9f:66:1f:6c:36:79:52:d6:94:90:85:4d:5a:3f:21:13:
4b:55:66:13:f3:5b:e2:7f:96:1e:d0:31:0a:de:be:fe:39:80:
2c:df:3b:a9:6d:31:d7:94:4d:7c:9d:f0:e8:f0:56:d6:46:61:
2b:f6:30:93:e8:7d:e0:64:e6:1c:6b:4a:09:4d:9c:bb:7c:cf:
f5:fa:2b:be:be:a9:ed:e6:3d:3f:0f:2b:df:b3:f0:9c:57:27:
2d:41:30:4f:a4:d2:9a:f0:47:54:04:21:0a:4f:67:77:16:18:
0b:44:1e:d2:a9:e8:2d:44:85:08:2a:3c:52:b5:83:03:62:34:
ec:ff:59:f3:e4:14:1a:d2:d0:50:3c:15:c8:5f:8d:93:3d:49:
4e:0d:9f:a9:7a:b3:0c:78:d7:77:ed:bc:2f:09:bb:d4:ee:28:
bb:2d:f5:40:a7:2e:76:c4:da:d1:5d:32:70:59:5f:3b:48:4a:
77:16:1d:f6:47:9a:84:27:8d:e3:c0:c0:94:05:34:80:8e:3b:
16:b6:11:52:9c:f7:d8:33:b1:7d:6b:a9:09:d2:64:16:b3:dc:
a0:0c:56:6b:76:9a:08:cb:f0:50:a1:e4:f4:d2:3a:b7:42:00:
17:a1:0b:3e:d8:84:33:2f:6d:ba:1f:02:d4:9e:14:70:f2:b4:
cb:1d:39:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:01:25 2024 by rpki-client on console-ams.rpki-client.org