Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/kkHHAaSqOIpF41BvFIRpBxmxckY.roa
File: kkHHAaSqOIpF41BvFIRpBxmxckY.roa (raw, json)
Hash identifier: 4nwcvWOOabVJ+0+e3iTJD4XthkzdD7/tbQ46R+o54MU=
Subject key identifier: 92:41:C7:01:A4:AA:38:8A:45:E3:50:6F:14:84:69:07:19:B1:72:46
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649E05CE001CEB50E0C0B191ADBAC3A
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/kkHHAaSqOIpF41BvFIRpBxmxckY.roa
Signing time: Mon 01 Jan 2024 18:29:39 +0000
ROA not before: Mon 01 Jan 2024 18:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51830
IP address blocks: 212.36.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:e0:5c:e0:01:ce:b5:0e:0c:0b:19:1a:db:ac:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9241c701a4aa388a45e3506f1484690719b17246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:c6:e9:2a:4b:01:54:b3:3e:15:d2:e3:ce:
47:74:2f:33:34:88:1b:c7:1b:69:88:41:33:ff:0a:
9b:95:54:22:51:10:4e:ce:79:1f:ab:83:25:a6:e4:
4d:7f:92:dd:7f:16:07:d4:19:f0:7a:f8:96:ba:cf:
e8:ca:23:4b:c0:67:3d:f5:83:27:94:38:a9:d6:45:
14:df:8a:20:3b:7d:e5:21:96:c5:e2:ad:2a:d7:5b:
39:20:a7:80:ec:b2:61:90:22:83:01:0b:bb:aa:53:
44:b4:42:bb:75:78:7e:dc:5b:0f:0e:f2:86:b8:1d:
9a:81:6d:5b:fe:7d:d4:0d:cb:68:64:58:b0:ae:f8:
5e:ea:28:da:a2:8a:75:b9:11:17:8a:a7:04:34:b5:
fe:0a:89:f8:9a:8d:99:89:ad:95:20:02:ae:1a:8e:
8a:ba:44:16:8d:f5:a9:c3:3b:4e:64:4f:30:1a:b3:
98:56:c4:8b:5b:ce:69:c3:bf:7d:b5:53:48:1e:bb:
d5:1c:66:2a:b9:d1:3b:a7:07:09:d8:39:07:6a:6b:
4e:b1:2d:49:fb:62:f4:c6:c6:1c:0c:93:d4:c8:45:
85:ff:f0:c0:88:b9:f8:2f:ee:5c:68:9d:78:39:58:
6b:01:11:29:0d:97:17:41:16:0b:ef:c9:fb:18:d8:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:41:C7:01:A4:AA:38:8A:45:E3:50:6F:14:84:69:07:19:B1:72:46
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/kkHHAaSqOIpF41BvFIRpBxmxckY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.36.19.0/24
Signature Algorithm: sha256WithRSAEncryption
14:5c:c6:38:17:76:f0:6d:70:13:a1:ec:bf:8d:97:91:cc:66:
15:1c:20:43:1c:9e:2f:91:30:f5:9e:f4:55:af:aa:9c:2f:52:
b8:06:b0:cb:09:1c:75:e2:c8:a1:63:fe:cd:f9:dc:e4:a7:79:
ee:e6:0a:23:32:85:2b:8e:90:15:a6:57:ee:68:d2:a5:08:a7:
f1:31:82:40:7f:58:81:e0:97:13:a1:d6:ce:9e:8c:35:6f:5b:
30:17:6e:91:8d:ba:f6:1f:f9:a5:b5:40:f0:57:88:74:b7:43:
ca:8f:2c:92:fd:f0:fb:d0:d4:04:13:05:86:6d:b0:bd:c8:97:
97:a8:8d:3d:c0:25:09:0b:3c:50:9f:7c:ac:4a:b0:0c:1c:a3:
eb:56:ce:0b:86:57:d1:7c:d0:09:aa:64:71:e8:b9:1a:09:1e:
fb:11:ac:3a:3b:0d:7c:31:89:0f:dd:12:64:c8:58:c4:de:0d:
83:94:b1:ae:da:1a:8d:91:0f:14:c7:18:8d:52:93:fb:3f:49:
f7:d4:df:99:01:7b:6c:ea:cf:5e:5b:c3:98:ef:a5:02:cd:76:
af:84:9b:72:1a:f5:90:05:1e:a7:c4:75:03:c3:97:e6:47:53:
70:fd:71:e0:b6:0e:e7:91:8e:2b:3e:8b:bf:c9:51:0b:99:a3:
c2:62:f1:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSeBc4AHOtQ4MCxka26w6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjQwMTAxMTgyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjQxYzcwMWE0YWEzODhhNDVlMzUwNmYxNDg0NjkwNzE5YjE3MjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp7G6SpLAVSzPhXS485HdC8zNIgb
xxtpiEEz/wqblVQiURBOznkfq4MlpuRNf5LdfxYH1BnweviWus/oyiNLwGc99YMn
lDip1kUU34ogO33lIZbF4q0q11s5IKeA7LJhkCKDAQu7qlNEtEK7dXh+3FsPDvKG
uB2agW1b/n3UDctoZFiwrvhe6ijaoop1uREXiqcENLX+Con4mo2Zia2VIAKuGo6K
ukQWjfWpwztOZE8wGrOYVsSLW85pw799tVNIHrvVHGYqudE7pwcJ2DkHamtOsS1J
+2L0xsYcDJPUyEWF//DAiLn4L+5caJ14OVhrAREpDZcXQRYL78n7GNgFewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJJBxwGkqjiKReNQbxSEaQcZsXJGMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEva2tISEFhU3FPSXBGNDFCdkZJUnBCeG14Y2tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1CQTMA0G
CSqGSIb3DQEBCwUAA4IBAQAUXMY4F3bwbXAToey/jZeRzGYVHCBDHJ4vkTD1nvRV
r6qcL1K4BrDLCRx14sihY/7N+dzkp3nu5gojMoUrjpAVplfuaNKlCKfxMYJAf1iB
4JcTodbOnow1b1swF26Rjbr2H/mltUDwV4h0t0PKjyyS/fD70NQEEwWGbbC9yJeX
qI09wCUJCzxQn3ysSrAMHKPrVs4LhlfRfNAJqmRx6LkaCR77Eaw6Ow18MYkP3RJk
yFjE3g2DlLGu2hqNkQ8UxxiNUpP7P0n31N+ZAXts6s9eW8OY76UCzXavhJtyGvWQ
BR6nxHUDw5fmR1Nw/XHgtg7nkY4rPou/yVELmaPCYvG1
-----END CERTIFICATE-----
Generated at Mon May 6 15:22:55 2024 by rpki-client on console-ams.rpki-client.org