Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/KCgSV76C53sdzC6Jop2Rh4kkqb8.roa
File: KCgSV76C53sdzC6Jop2Rh4kkqb8.roa (raw, json)
Hash identifier: ZtBBnWBX4hTnvqLYjkvBSwrIQpe4SLirKLrarv9+SE4=
Subject key identifier: 28:28:12:57:BE:82:E7:7B:1D:CC:2E:89:A2:9D:91:87:89:24:A9:BF
Certificate issuer: /CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Certificate serial: 018CC50081738C23260A228FE2CA26157198
Authority key identifier: EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/KCgSV76C53sdzC6Jop2Rh4kkqb8.roa
Signing time: Mon 01 Jan 2024 12:29:53 +0000
ROA not before: Mon 01 Jan 2024 12:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2119
IP address blocks: 138.14.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:81:73:8c:23:26:0a:22:8f:e2:ca:26:15:71:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4c3fc0122d831fbea8abb20a4e9b65c54039b2
Validity
Not Before: Jan 1 12:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28281257be82e77b1dcc2e89a29d91878924a9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5e:17:d1:9a:1b:4b:d8:a1:9e:56:91:b8:74:
ec:b0:5a:ea:0d:5e:25:82:ee:bc:11:a5:91:8e:c3:
f0:6e:be:d3:41:5f:b2:57:b0:e0:b4:8b:8c:1b:f2:
42:13:4c:d0:fd:d3:7f:43:fa:70:b9:8c:a4:f3:53:
6e:6a:c4:39:71:a8:41:a9:6e:e7:bc:33:d8:0a:91:
21:ae:c6:0b:a8:62:8d:8c:5a:d5:b3:64:2e:31:f5:
73:71:06:dd:d1:b9:c4:dc:56:8d:3b:d3:a1:3d:1c:
d9:2f:fb:65:23:b0:5f:42:92:cc:6c:0f:e0:9b:de:
f4:53:e5:e8:1c:1b:93:52:b3:08:79:d1:c8:a0:9e:
45:cd:ea:ce:b0:e6:2e:9f:fc:00:6c:be:f7:be:29:
ee:3f:3f:04:f0:2e:e2:fc:7c:fe:af:59:b0:64:b5:
1b:0a:79:37:c5:e7:ea:a6:7b:d0:f6:b2:d9:d1:d3:
a0:1b:4f:57:c0:2f:f5:71:1e:a9:ee:7e:ef:bc:51:
30:6b:9a:65:ca:a5:7f:9d:3b:71:ac:55:b9:92:21:
2b:95:65:58:bb:03:7c:13:f1:f7:ce:03:93:99:3b:
0f:30:e8:07:6a:08:c4:ba:3f:88:a9:79:c1:63:a5:
67:9a:93:3b:87:15:e9:c3:43:f8:19:ad:4f:aa:0f:
7f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:28:12:57:BE:82:E7:7B:1D:CC:2E:89:A2:9D:91:87:89:24:A9:BF
X509v3 Authority Key Identifier:
keyid:EE:4C:3F:C0:12:2D:83:1F:BE:A8:AB:B2:0A:4E:9B:65:C5:40:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kw_wBItgx--qKuyCk6bZcVAObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/KCgSV76C53sdzC6Jop2Rh4kkqb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ecd1bb-fbda-4dd9-9ef9-3ac7d9623291/1/7kw_wBItgx--qKuyCk6bZcVAObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.14.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:48:dc:d8:51:5e:8d:e0:6b:0d:34:89:b4:34:74:10:a3:ed:
04:28:8c:e4:4a:0b:c7:4e:eb:81:8d:f7:6a:75:28:a7:8e:5e:
c3:6d:ee:d7:3d:2d:34:fc:39:03:a5:e6:e1:5a:42:cd:8c:7a:
b3:9b:70:bf:a6:e0:55:aa:23:26:33:bd:2d:95:4e:69:24:76:
6b:5f:f9:e5:d3:f7:61:56:82:32:97:31:b4:56:31:01:9b:39:
4d:8f:62:3d:cf:2a:19:51:fe:db:9d:a3:9b:fe:16:91:e6:d6:
d5:66:9d:ff:10:32:f4:08:29:b4:4c:9e:67:21:7e:b2:f6:bd:
79:49:b1:e7:b2:4b:79:52:8d:1d:19:ef:dc:2c:96:06:b9:03:
42:b1:10:13:c8:4b:c6:7f:a5:79:51:04:78:43:e8:3a:50:2a:
33:c7:fc:6d:70:79:49:e7:33:90:ba:7b:3f:8a:68:b9:b1:18:
36:19:8c:02:93:4c:52:d9:8a:7f:98:31:3d:c9:fa:01:9e:b1:
be:ff:fa:9d:42:0b:28:38:e9:d3:32:6b:33:bd:1a:75:61:e6:
f4:85:71:1d:7e:ca:66:de:54:8c:c3:48:df:6d:90:13:6a:cc:
bb:10:30:45:35:b4:d5:77:4b:e5:e2:65:79:85:b3:d9:00:e3:
55:d3:08:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:33:56 2024 by rpki-client on console-fra.rpki-client.org