Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/kwSvI56IlFWybpzO1z-SpKL9Uao.roa
File: kwSvI56IlFWybpzO1z-SpKL9Uao.roa (raw, json)
Hash identifier: kM6WLK0XXkcxHuk7IYES7eXQU5roKTiPKfln0TDlKI8=
Subject key identifier: 93:04:AF:23:9E:88:94:55:B2:6E:9C:CE:D7:3F:92:A4:A2:FD:51:AA
Certificate issuer: /CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Certificate serial: 018CC6B7D27D45284C8F9843936652BBF250
Authority key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/kwSvI56IlFWybpzO1z-SpKL9Uao.roa
Signing time: Mon 01 Jan 2024 20:29:44 +0000
ROA not before: Mon 01 Jan 2024 20:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206130
IP address blocks: 185.110.112.0/22 maxlen: 22
2a06:55c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:d2:7d:45:28:4c:8f:98:43:93:66:52:bb:f2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Validity
Not Before: Jan 1 20:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9304af239e889455b26e9cced73f92a4a2fd51aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a4:1b:f8:8f:bd:70:ee:b0:bc:c6:06:42:1c:
25:46:f8:a0:99:1f:c0:17:f9:35:fd:aa:af:a1:a4:
97:35:6c:35:01:ae:a5:5a:88:24:af:07:a1:47:20:
d9:b7:4a:22:ab:54:5d:52:af:99:3c:2e:5a:d9:d8:
00:3f:53:36:26:b7:cb:9c:00:a7:72:d4:43:e7:c7:
b6:0b:8a:68:0c:5b:63:4c:f1:74:a0:51:63:6b:f4:
cb:24:e6:21:e7:6d:71:72:b9:d8:c3:51:dd:84:da:
c9:88:a5:d4:6c:ea:f1:b2:7f:95:5a:6f:13:b3:b1:
22:b1:2c:be:66:c8:23:b2:88:48:1e:cc:de:fe:87:
ef:2a:e3:be:35:9e:d3:cb:1c:c5:01:06:df:0c:08:
35:5a:8f:95:86:57:bf:8c:13:b9:88:c9:03:5a:35:
50:bf:24:c3:3c:c3:f4:b4:1f:ee:60:0d:7e:5d:24:
27:11:93:3e:a9:1d:75:ba:8a:cc:95:75:0f:fe:00:
e9:0d:a9:44:9a:95:b7:cd:a6:4d:6a:3c:ef:a5:16:
34:64:cf:f1:8c:1f:a7:1e:12:d3:9b:57:c4:a3:2a:
1d:9a:b0:be:90:44:11:d1:2b:ea:b7:3f:3d:dc:56:
d3:39:fd:37:22:08:ca:c7:bd:39:55:25:bc:67:18:
01:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:04:AF:23:9E:88:94:55:B2:6E:9C:CE:D7:3F:92:A4:A2:FD:51:AA
X509v3 Authority Key Identifier:
keyid:B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/kwSvI56IlFWybpzO1z-SpKL9Uao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.112.0/22
IPv6:
2a06:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
4d:39:72:9c:f6:a6:9e:27:44:d2:a4:41:61:f0:78:17:4d:03:
a1:69:1b:b1:2b:ef:de:00:47:5d:a2:69:be:4b:7e:f6:89:7c:
84:b3:a2:3c:d7:4a:9f:be:99:95:b6:14:42:54:55:88:da:96:
9f:5f:81:e6:f1:38:9e:38:1c:16:ef:82:fd:9b:97:90:83:f5:
8f:b7:fb:c9:c7:3b:73:d4:47:ff:44:07:22:3c:70:73:47:57:
bd:5b:a6:c6:70:53:47:b5:43:64:ed:2d:fb:9c:d9:b9:7c:ec:
c2:59:22:bd:d4:38:69:bf:f6:d9:ce:8f:42:e4:fe:ae:e0:9f:
b0:91:3b:f2:97:42:60:e1:5a:cf:0d:6e:8c:10:68:02:72:a7:
83:76:e3:1d:ba:ee:40:b0:e4:33:67:fc:da:82:b1:e4:49:74:
df:27:f4:5a:63:9f:42:ee:f8:45:b8:62:47:58:63:e5:76:f3:
46:26:b5:85:c7:58:d5:4e:bf:78:65:3d:30:b8:62:44:f8:f9:
e1:78:94:83:4c:b0:14:8b:65:55:ce:46:6b:31:b1:35:a8:60:
a3:00:f6:8f:cb:f0:4c:8a:a9:44:c9:83:63:4b:42:b0:b0:bb:
05:1f:84:38:d3:e2:41:46:3e:a2:9c:fb:95:fb:ed:3a:b3:b1:
a0:fb:63:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:53:29 2024 by rpki-client on console-fra.rpki-client.org