Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/kcd8nG8HS9RzGThuI8VeJLSEOPo.roa
File: kcd8nG8HS9RzGThuI8VeJLSEOPo.roa (raw, json)
Hash identifier: HkJ1TLmhdaz+8MMGqiaAzbtXFo4xttsAD/7n5J8e3E0=
Subject key identifier: 91:C7:7C:9C:6F:07:4B:D4:73:19:38:6E:23:C5:5E:24:B4:84:38:FA
Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial: 019001C328FC8CD20416365CD74D81899CFF
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/kcd8nG8HS9RzGThuI8VeJLSEOPo.roa
Signing time: Mon 10 Jun 2024 10:48:05 +0000
ROA not before: Mon 10 Jun 2024 10:48:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49025
IP address blocks: 95.173.200.0/22 maxlen: 22
95.173.201.0/24 maxlen: 24
95.173.202.0/23 maxlen: 23
95.173.208.0/21 maxlen: 21
185.2.40.0/22 maxlen: 22
2a02:a48:f000::/36 maxlen: 36
2a06:5d80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:c3:28:fc:8c:d2:04:16:36:5c:d7:4d:81:89:9c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Validity
Not Before: Jun 10 10:48:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91c77c9c6f074bd47319386e23c55e24b48438fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:22:38:3c:96:68:09:06:64:1e:5f:98:7e:db:
c5:2d:fb:d3:20:2e:ee:40:2c:08:b4:5b:3a:86:d7:
b6:f8:4d:69:7f:b5:23:47:3e:bc:90:2c:13:80:3f:
77:d3:ff:2b:da:43:8f:1a:d7:13:f7:0d:21:ab:58:
95:8f:0c:40:e6:35:cf:95:c8:03:2e:e9:a8:9d:a9:
b7:0d:04:ca:00:02:95:8f:09:08:79:67:de:ef:32:
bc:91:f3:3e:55:e6:ba:05:4f:70:7e:b0:10:a9:23:
9c:9c:7a:8f:72:75:3f:40:aa:12:b3:22:b4:d1:82:
be:36:6a:60:2e:52:46:5c:8a:6b:75:a9:45:27:00:
89:b7:0f:71:2a:74:7b:15:4c:43:74:8e:98:16:98:
21:40:d2:54:25:e8:b2:be:ed:f5:ca:10:f9:0f:2c:
34:fb:ff:64:7a:e4:21:e7:d0:68:a2:24:20:35:36:
7d:3d:cc:31:6e:45:4d:c3:92:0d:ed:3a:38:74:58:
ec:ae:3f:94:1e:a8:4c:3c:86:aa:ad:b3:6f:f2:f9:
9f:97:25:76:5f:9d:5a:f5:c4:8f:d9:b4:c7:e0:4f:
24:2c:19:09:e2:5d:8c:d2:0f:81:a8:86:e7:83:c7:
7e:03:b3:23:67:40:98:21:b7:bd:72:ac:2f:5d:c1:
7a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C7:7C:9C:6F:07:4B:D4:73:19:38:6E:23:C5:5E:24:B4:84:38:FA
X509v3 Authority Key Identifier:
keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/kcd8nG8HS9RzGThuI8VeJLSEOPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.200.0/22
95.173.208.0/21
185.2.40.0/22
IPv6:
2a02:a48:f000::/36
2a06:5d80::/32
Signature Algorithm: sha256WithRSAEncryption
5c:9a:52:96:b2:9b:f9:52:bd:ac:9f:29:73:22:09:26:19:38:
9e:d8:a4:a2:67:13:37:58:f5:89:18:4c:3f:f3:b6:10:d1:40:
bb:5d:f4:e2:f1:f0:d2:c0:c1:46:d3:6a:e6:1c:a7:b4:ac:46:
3a:db:78:46:5c:5c:f7:36:56:66:43:73:3b:94:b2:84:a9:81:
d5:4b:c4:92:fb:56:3c:49:43:48:db:27:ed:f9:ad:63:c2:42:
28:52:29:aa:89:7f:64:37:fd:a2:1f:e8:53:f3:7c:90:ad:2b:
1d:dc:a3:a4:cc:88:76:f4:4d:bd:79:2f:d9:a8:5c:c7:54:40:
98:b5:d8:70:f2:31:08:1b:7b:6c:67:05:be:44:ac:6e:7b:8b:
37:25:68:02:df:b1:52:a8:e4:2f:34:e8:8d:1e:f0:09:1b:27:
64:20:cb:a1:fe:ea:ab:67:8b:b9:e0:aa:5c:86:10:73:0d:82:
ec:4a:0b:ae:92:d8:00:2f:43:be:40:84:05:fe:e5:b0:16:aa:
95:ef:11:2e:b2:1a:70:b5:e1:ab:13:ea:5d:66:57:5e:44:5f:
74:c3:49:6a:dc:44:dd:9e:c0:1c:64:8a:f3:67:79:b0:48:9a:
a5:97:e5:d3:9d:40:b9:37:4a:7f:0d:6d:48:46:c0:c5:4c:36:
73:ab:a4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:26:39 2024 by rpki-client on console-ams.rpki-client.org