Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/KbO55pMVi3ln2AmELQ--smGicNo.roa
File: KbO55pMVi3ln2AmELQ--smGicNo.roa (raw, json)
Hash identifier: WC2APzBd8ApDC5KLsT3q2SvEBpOnPIT2+TdGskGzdMQ=
Subject key identifier: 29:B3:B9:E6:93:15:8B:79:67:D8:09:84:2D:0F:BE:B2:61:A2:70:DA
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 018FC5267366AD92FF3802078C562431266D
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/KbO55pMVi3ln2AmELQ--smGicNo.roa
Signing time: Wed 29 May 2024 16:19:42 +0000
ROA not before: Wed 29 May 2024 16:19:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47455
IP address blocks: 185.144.252.0/22 maxlen: 24
2a07:4200::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c5:26:73:66:ad:92:ff:38:02:07:8c:56:24:31:26:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: May 29 16:19:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29b3b9e693158b7967d809842d0fbeb261a270da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:53:86:59:21:be:6f:3c:9c:76:d8:65:8c:
88:1d:66:64:f4:a1:9b:91:9f:ad:b6:d8:ca:1f:d5:
28:88:19:6f:d3:27:66:04:fd:34:0c:c7:a4:c0:80:
e0:82:59:b0:97:f1:91:cc:fb:05:92:e5:12:2f:09:
31:b5:1e:0f:35:a8:ab:8e:2d:a8:50:e7:7a:d0:ce:
a6:12:a1:0d:7d:28:73:db:39:20:14:6f:7d:a6:e9:
45:2e:bd:e1:35:d0:5b:59:4f:ee:71:c0:88:82:5e:
9a:08:8d:bc:81:9b:c5:43:59:eb:a9:2f:93:0f:77:
63:16:ce:cd:67:3b:b3:56:ab:cd:7f:ee:82:df:ae:
d4:b4:5d:07:14:3a:d8:5a:ea:ca:f6:42:85:83:ed:
0c:d6:a3:99:ae:74:de:e6:9a:92:6e:07:d8:cb:eb:
52:21:b6:16:8f:c0:66:7d:9c:8d:d4:f5:b4:1e:65:
b2:87:1a:33:0c:c9:ec:36:39:a3:2a:d0:18:a8:d9:
c9:a6:91:34:bf:66:86:44:1a:48:c5:7e:f9:73:fc:
c8:fa:90:d9:b1:1f:8c:23:11:d9:50:f3:9a:a0:4a:
2f:e8:12:75:67:76:1a:8e:d4:e8:0e:6a:e6:f5:98:
29:cc:81:37:4c:4d:73:0d:f5:05:45:bc:62:f5:11:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B3:B9:E6:93:15:8B:79:67:D8:09:84:2D:0F:BE:B2:61:A2:70:DA
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/KbO55pMVi3ln2AmELQ--smGicNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.252.0/22
IPv6:
2a07:4200::/29
Signature Algorithm: sha256WithRSAEncryption
66:4c:95:09:da:04:ef:17:88:36:b8:59:0a:26:8c:94:75:8f:
3d:a6:50:54:71:93:3b:66:f6:f3:91:52:90:ae:63:d6:ea:b2:
cf:6f:a1:16:b4:19:f6:a5:3d:db:c1:82:eb:41:8a:17:3c:fe:
f0:9b:3e:de:e4:8a:10:73:91:f7:da:0e:9a:e2:f9:ca:70:8c:
f7:f7:01:8a:a3:0c:f0:9c:76:21:bf:d3:cc:cb:ed:88:00:23:
85:3d:91:9f:d1:a1:39:bb:01:18:0e:20:f1:16:cd:bd:78:c5:
90:8c:d2:c8:4a:c2:d7:ca:64:25:a0:c9:9c:ba:9f:cf:eb:c0:
36:70:4a:c4:58:ff:f6:1b:74:b2:c9:a8:7a:10:8d:65:86:dc:
64:de:13:5b:d3:42:cc:32:1a:10:d0:1f:fe:0a:25:07:33:7e:
cc:dd:eb:24:04:20:94:09:8e:48:2a:42:be:5e:61:ba:66:29:
34:c8:34:54:eb:49:85:66:91:b5:bc:38:f8:c2:f8:89:8a:5f:
f6:d2:ff:60:d5:34:6a:45:d6:f6:8e:77:9c:bf:dc:04:87:cb:
ce:db:09:9b:aa:c7:05:dc:a9:1f:47:e9:a7:67:01:9c:21:70:
87:ae:19:85:65:bf:ae:7e:51:75:42:39:4b:af:05:54:17:fa:
51:3e:0a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:20 2024 by rpki-client on console-fra.rpki-client.org