Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/kKj0VKByUCq12myDYmzc4K7-L-Y.roa
File: kKj0VKByUCq12myDYmzc4K7-L-Y.roa (raw, json)
Hash identifier: zK7IcUbZVuLwbXCzmTAMFe98QoYxSmpSTXDCsVL74PQ=
Subject key identifier: 90:A8:F4:54:A0:72:50:2A:B5:DA:6C:83:62:6C:DC:E0:AE:FE:2F:E6
Certificate issuer: /CN=047ef5d6bd3e3594269cba442b3a8d3a14c5df70
Certificate serial: 018FEDA6C833574F96F6F9A8919F85CEDE01
Authority key identifier: 04:7E:F5:D6:BD:3E:35:94:26:9C:BA:44:2B:3A:8D:3A:14:C5:DF:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH711r0-NZQmnLpEKzqNOhTF33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/kKj0VKByUCq12myDYmzc4K7-L-Y.roa
Signing time: Thu 06 Jun 2024 13:04:41 +0000
ROA not before: Thu 06 Jun 2024 13:04:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198537
IP address blocks: 195.14.26.0/23 maxlen: 24
195.14.112.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BH711r0-NZQmnLpEKzqNOhTF33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ed:a6:c8:33:57:4f:96:f6:f9:a8:91:9f:85:ce:de:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=047ef5d6bd3e3594269cba442b3a8d3a14c5df70
Validity
Not Before: Jun 6 13:04:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90a8f454a072502ab5da6c83626cdce0aefe2fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bb:6d:c1:a8:7d:88:92:64:30:6a:4f:83:f0:
72:34:07:b4:e6:a1:de:84:01:11:96:5c:cd:b6:94:
ea:6e:1f:cc:a9:cf:86:1a:e1:f8:8b:7b:b4:a7:c3:
fa:46:d4:ed:8d:c7:cf:f9:66:1c:71:28:72:f3:fc:
94:df:3a:ab:0b:5a:53:6e:45:70:95:5d:f4:8a:d3:
04:ab:43:bc:49:85:b5:92:e7:38:2a:81:56:c7:11:
ba:98:48:93:7d:d5:d7:ea:94:56:64:d7:92:0b:17:
fe:02:25:a0:3b:74:a1:45:fb:03:99:34:a7:9f:b6:
3b:e4:27:22:30:22:3e:7b:62:23:77:50:6b:ed:24:
16:93:1b:06:8e:11:3f:17:d3:59:06:03:a3:84:39:
d5:bb:0d:d4:2f:d5:fc:13:98:4c:fb:80:64:21:ca:
a9:94:10:3c:b6:f3:b7:02:ed:6d:a1:73:a8:b7:e5:
fc:ee:71:af:d2:64:5e:9a:a8:33:8b:48:0d:81:6f:
92:86:f0:cd:eb:72:4e:9e:6a:09:c3:3b:54:fd:cb:
c8:f1:7a:0c:c7:37:ff:07:bc:df:75:95:36:ce:2b:
95:54:b2:66:c6:cc:d3:08:f9:87:78:31:c3:5a:ba:
c5:b5:04:aa:72:c0:26:19:b0:c1:95:02:8d:d2:ca:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A8:F4:54:A0:72:50:2A:B5:DA:6C:83:62:6C:DC:E0:AE:FE:2F:E6
X509v3 Authority Key Identifier:
keyid:04:7E:F5:D6:BD:3E:35:94:26:9C:BA:44:2B:3A:8D:3A:14:C5:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH711r0-NZQmnLpEKzqNOhTF33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/kKj0VKByUCq12myDYmzc4K7-L-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.26.0/23
195.14.112.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:f6:9d:f8:6c:84:e8:fc:0a:dd:6c:4e:14:23:d3:ea:23:1f:
a9:3b:65:b1:3e:37:1e:d3:a5:9e:2e:60:db:72:17:bb:7f:47:
ec:6d:0a:51:2b:e3:8e:5b:f0:12:4c:12:1e:c7:93:f5:7e:80:
89:ab:9c:d9:d4:7a:8e:02:54:14:bd:6a:08:f5:72:7a:72:95:
b4:37:cf:a3:60:62:7c:8a:d6:ba:93:db:67:30:df:8c:0b:cc:
ef:cc:15:ac:e2:bc:8b:35:bd:19:59:93:62:b3:ba:6c:c1:48:
92:22:85:d4:74:35:11:1d:1a:03:7c:1a:29:40:8a:1c:da:d8:
23:5d:46:b7:6b:12:db:9a:dd:d6:cf:61:6e:3a:82:d6:09:92:
3f:fd:f4:d0:28:c0:92:f1:bd:62:bf:39:9c:d1:19:37:65:c1:
1a:66:63:d6:20:18:c6:be:46:d7:f9:d3:d0:3e:4c:5a:4c:d1:
c7:4c:73:86:34:c7:1c:da:66:d0:48:11:7c:e0:d3:2c:95:9b:
c8:5e:18:de:04:ba:8b:06:d1:30:2f:87:a1:6e:a2:c9:8a:6a:
f1:eb:b0:08:15:b4:52:bd:a8:36:c5:c5:fa:2b:1a:ae:d5:5d:
b6:de:f9:05:f3:77:ee:67:92:b8:f5:1f:d6:f0:1b:93:90:3b:
c0:ae:b2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:54:56 2024 by rpki-client on console-ams.rpki-client.org