Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/h_kvi-6KEb2X2jSHpIxRd5lTivA.roa
File: h_kvi-6KEb2X2jSHpIxRd5lTivA.roa (raw, json)
Hash identifier: TNUlg8UI9u4PO73J2h7hT2NI8Jb6350gcNywu+slHZs=
Subject key identifier: 87:F9:2F:8B:EE:8A:11:BD:97:DA:34:87:A4:8C:51:77:99:53:8A:F0
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018D35AB8E02FE92F47E42E9DC73C010BE0D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/h_kvi-6KEb2X2jSHpIxRd5lTivA.roa
Signing time: Tue 23 Jan 2024 09:34:11 +0000
ROA not before: Tue 23 Jan 2024 09:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 45.83.31.0/24 maxlen: 24
193.26.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:35:ab:8e:02:fe:92:f4:7e:42:e9:dc:73:c0:10:be:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 23 09:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87f92f8bee8a11bd97da3487a48c517799538af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:b1:5c:9c:98:7b:2a:51:2b:c4:0f:92:d3:
ef:3e:69:83:a2:2c:98:fa:5f:d0:a5:31:d3:44:e4:
b6:c9:dc:de:ef:c1:e5:a2:93:60:5c:00:e5:b5:71:
25:e1:d1:63:f7:a3:31:b8:51:7c:4e:96:b6:90:98:
89:a6:71:01:aa:39:7d:62:7e:42:ec:81:d6:cb:8d:
41:d7:3f:17:c6:37:65:19:fb:60:66:81:50:15:29:
12:f4:a6:19:aa:12:ed:cb:e8:2e:0c:48:d7:07:48:
dc:30:ad:ce:46:6c:ab:e7:b8:3d:4c:38:7b:dd:4c:
12:fd:ef:62:85:19:4a:f1:3e:3f:57:ad:bb:2d:0e:
bb:e5:d7:ce:43:35:1a:a5:8a:b9:6a:bf:78:9e:66:
97:01:ad:2b:5b:26:c8:87:09:b6:c6:84:d8:40:c0:
9e:9e:1b:3e:89:f5:74:10:49:c4:d5:25:3b:9b:57:
54:f4:cc:8c:9a:e8:6c:58:5f:bd:2c:7e:6b:e0:9b:
e2:5f:19:1b:29:62:ac:30:ee:1a:3f:ca:93:1e:52:
7e:f7:e9:bd:fe:7d:e1:99:a7:3b:9b:d1:b5:ee:0d:
9f:b9:f8:a9:08:55:30:ea:bb:f4:f0:72:3d:52:6b:
e9:8d:60:54:f7:e7:4c:1d:73:4e:a0:4d:46:ce:8e:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F9:2F:8B:EE:8A:11:BD:97:DA:34:87:A4:8C:51:77:99:53:8A:F0
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/h_kvi-6KEb2X2jSHpIxRd5lTivA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.31.0/24
193.26.115.0/24
Signature Algorithm: sha256WithRSAEncryption
30:07:ff:49:9c:d9:b6:6b:4e:8a:d1:38:96:e4:dd:c9:0b:72:
b3:87:66:d0:97:bf:c1:ec:0d:a8:f4:df:f1:5b:a6:b5:88:ad:
10:91:0a:3e:9c:0e:42:40:95:58:ca:e2:ef:2f:4b:9e:15:d7:
7f:ca:20:aa:9f:00:3c:63:8a:e7:c0:7b:81:95:b5:a2:b7:26:
87:ba:44:b1:78:0d:2c:aa:af:13:21:7d:1d:fa:74:ba:11:2c:
a6:b8:d9:7c:42:f4:a3:47:aa:1c:cd:dd:0d:c8:28:23:23:ec:
96:c5:53:90:6b:d5:63:41:d1:98:32:4c:76:06:ea:79:82:bf:
e2:dd:d2:bf:0e:73:85:6f:af:5f:40:00:80:6e:c6:b5:59:7a:
26:aa:b8:d0:10:48:ec:25:60:32:f9:18:ae:a2:c3:b8:32:5c:
65:de:30:a8:1d:79:6a:7c:d5:b7:9d:4a:3b:10:33:f6:4e:a6:
24:29:2f:a2:b1:6e:72:41:2a:ca:9f:34:79:85:54:a2:00:40:
25:5f:22:6f:0e:0b:26:05:24:36:5e:06:3b:5a:03:44:7f:8b:
d3:5c:03:65:2d:48:09:da:f5:46:88:98:85:bc:c9:f3:95:c8:
e8:3f:f9:fa:3e:dd:69:a3:9c:83:7b:bb:eb:a1:b0:f8:91:42:
84:74:db:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:15:23 2024 by rpki-client on console-fra.rpki-client.org