Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/kD3iBu9EXHSRWPzBrVPQmGeM3_8.roa
File: kD3iBu9EXHSRWPzBrVPQmGeM3_8.roa (raw, json)
Hash identifier: Lx2mEprcccx64ZlCOVKeg7Me4Rl87KsXtr4ObOxqt7g=
Subject key identifier: 90:3D:E2:06:EF:44:5C:74:91:58:FC:C1:AD:53:D0:98:67:8C:DF:FF
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 018CC8DFA5BEB3AF1C231E8049B2492870C3
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/kD3iBu9EXHSRWPzBrVPQmGeM3_8.roa
Signing time: Tue 02 Jan 2024 06:32:29 +0000
ROA not before: Tue 02 Jan 2024 06:32:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15854
IP address blocks: 195.203.152.0/23 maxlen: 23
149.250.0.0/16 maxlen: 16
192.109.236.0/24 maxlen: 24
217.27.2.0/23 maxlen: 23
217.27.0.0/23 maxlen: 23
195.203.0.0/17 maxlen: 17
195.203.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a5:be:b3:af:1c:23:1e:80:49:b2:49:28:70:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jan 2 06:32:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=903de206ef445c749158fcc1ad53d098678cdfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:0b:e4:44:3b:52:e2:35:39:c5:1c:c1:38:
eb:80:b8:0f:c1:e8:af:2c:39:9b:47:cf:5e:ee:52:
1f:38:d4:d8:d4:1f:ca:23:4b:49:72:1f:a7:ca:a4:
02:64:90:e1:8e:fd:0d:85:b4:f5:28:db:0f:b4:20:
f5:bb:07:6c:0a:b8:20:32:d8:90:12:58:fa:91:61:
9b:35:c1:98:0a:29:4e:34:c5:da:99:ff:a5:65:b5:
ff:c8:a7:2d:5e:00:00:a0:fd:14:23:8d:53:2d:c9:
e5:f9:b7:05:a4:cc:01:56:f4:9b:3c:20:09:1d:e7:
6d:95:e4:35:c9:27:ce:93:07:d8:64:02:96:46:39:
28:b4:fb:00:7a:45:16:ea:7e:b1:a9:fd:5f:0a:63:
f3:17:aa:77:c9:18:8a:ac:e7:d8:57:e1:7d:25:65:
ab:0e:30:c0:c2:03:df:5f:99:40:83:58:ca:25:66:
85:3a:14:7e:b5:34:53:67:c3:fa:75:3b:d5:2a:1c:
28:4b:f9:01:ab:f0:6d:13:a7:3d:64:ab:ff:5c:da:
c5:2d:a4:ce:9e:59:fa:47:6f:62:7d:c6:ef:42:55:
65:27:6f:88:ed:f0:fd:fe:b7:07:27:d8:9d:74:72:
5f:f3:f7:4b:6d:08:49:88:f5:9e:f7:93:02:15:b7:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3D:E2:06:EF:44:5C:74:91:58:FC:C1:AD:53:D0:98:67:8C:DF:FF
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/kD3iBu9EXHSRWPzBrVPQmGeM3_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.250.0.0/16
192.109.236.0/24
195.203.0.0/16
217.27.0.0/22
Signature Algorithm: sha256WithRSAEncryption
46:ba:cc:10:1f:94:bf:b6:2a:52:d2:ab:4f:f4:13:de:6c:11:
a5:9f:a4:98:93:2c:e1:b2:f6:07:09:54:d0:ad:72:ed:9a:dd:
f0:33:b3:c1:34:6a:85:a5:16:fe:59:6a:19:96:67:10:2e:e7:
41:7a:c6:d5:bd:23:c6:f2:0a:98:be:9b:f7:48:a2:8d:ea:b8:
87:c7:7e:ad:93:40:df:e1:27:07:2e:ac:a8:2c:5b:be:71:e1:
4f:ee:72:26:d3:39:88:4a:d4:d2:ce:93:af:5e:9c:73:07:cf:
9a:cc:20:46:0b:21:bc:85:8f:6a:a3:68:a8:88:17:96:9c:0d:
81:2f:9d:1b:50:8a:40:d6:21:e7:6c:08:eb:18:10:1b:ba:e5:
c4:d5:fd:c0:69:cc:fb:c5:38:03:0e:02:e0:1e:9a:8c:3a:48:
dd:38:16:bd:bf:04:c3:f3:bf:6a:31:8d:66:47:94:f0:a2:3d:
5c:f5:a1:9b:b7:54:ed:b7:71:07:c7:8c:c3:68:f5:8a:89:7b:
11:23:33:8f:17:e8:17:6e:f2:26:70:df:06:b1:b7:ff:24:6f:
e4:15:6e:8f:6c:b3:9a:64:53:80:97:61:1d:59:85:55:59:43:
56:18:dd:5e:6d:30:b5:6e:05:92:c1:80:f8:56:81:bf:4e:1f:
1b:82:00:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:41:09 2024 by rpki-client on console-ams.rpki-client.org