Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/kwNGqJi16v15vEKhIVHS7T4BnSM.roa
File: kwNGqJi16v15vEKhIVHS7T4BnSM.roa (raw, json)
Hash identifier: YuhN7wMChIhyi5JTmg/oRvYZa9RVGWcxEO6WM7P9mO4=
Subject key identifier: 93:03:46:A8:98:B5:EA:FD:79:BC:42:A1:21:51:D2:ED:3E:01:9D:23
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018CC56EE0D868F820511A713E177CBA7906
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/kwNGqJi16v15vEKhIVHS7T4BnSM.roa
Signing time: Mon 01 Jan 2024 14:30:27 +0000
ROA not before: Mon 01 Jan 2024 14:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 77.74.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e0:d8:68:f8:20:51:1a:71:3e:17:7c:ba:79:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 14:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=930346a898b5eafd79bc42a12151d2ed3e019d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:75:5b:8c:08:1e:df:15:60:87:2d:77:df:
e0:9d:f8:0c:66:e2:06:26:8e:41:60:9b:41:9c:67:
33:b9:23:1d:e5:69:94:9c:18:5e:37:e6:31:c0:55:
f9:2f:8b:0f:a3:7d:35:e7:33:dc:76:65:1b:e8:92:
3e:26:98:dd:2c:2a:57:52:8d:63:85:10:d9:e0:d5:
5a:e5:eb:53:b9:39:36:54:d4:bc:5b:9e:5f:c9:85:
2f:f7:78:c4:d2:6c:c4:0c:ed:d0:10:b9:65:8a:04:
cb:15:99:3a:61:c1:f3:78:98:76:91:9d:bb:b5:11:
6c:11:24:77:24:b3:98:39:91:30:db:1d:68:37:61:
73:c5:1c:f5:f2:0c:0f:35:bd:05:c4:21:df:33:08:
0d:f0:b7:4b:c1:75:49:8b:8f:cc:48:b2:6f:af:0c:
eb:5d:08:3e:10:35:8e:9a:22:b0:75:b1:46:aa:07:
39:a0:b1:1d:ec:9b:63:54:1a:3f:7a:6f:e8:07:79:
20:ff:c1:4f:26:07:3f:e5:12:40:46:c4:29:2a:24:
77:74:a6:f4:ec:f6:43:2d:c5:f2:05:2f:96:22:2c:
c5:7c:63:c0:2b:83:44:5c:7f:f9:a9:f1:61:bf:3e:
94:9f:84:17:05:6f:27:de:9b:15:2b:cc:12:fc:83:
41:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:03:46:A8:98:B5:EA:FD:79:BC:42:A1:21:51:D2:ED:3E:01:9D:23
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/kwNGqJi16v15vEKhIVHS7T4BnSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.225.0/24
Signature Algorithm: sha256WithRSAEncryption
81:03:58:84:da:1f:21:19:26:b3:68:70:5b:19:23:d2:1f:b7:
c5:dd:9c:12:2d:ae:13:73:24:a6:08:2b:af:4e:23:58:25:2d:
8b:bf:8e:24:29:4d:d1:23:58:c0:89:89:68:7d:24:a5:ce:32:
fd:57:57:98:d9:5f:a8:b7:71:d4:9f:66:5e:05:e2:9e:77:f5:
3c:6b:b4:44:7e:7f:fc:67:a8:76:86:3b:61:a4:d5:ad:39:de:
3a:87:5f:d0:af:eb:64:51:82:13:d4:50:ea:74:23:cb:6f:dc:
82:cf:14:0f:22:21:58:c3:c0:9b:db:82:4c:4f:28:03:2c:0c:
0d:bc:cc:49:03:2c:75:d1:d6:1d:e1:ae:f8:b7:d4:87:19:73:
91:87:3c:74:1d:bc:d8:95:05:87:ab:d5:b7:21:70:57:f9:cc:
e1:15:cf:85:3e:2f:4e:93:27:fe:6d:f2:90:96:a2:b1:21:e2:
14:62:b8:8f:d7:e4:4f:e8:c4:45:3b:6b:6a:df:40:97:86:79:
18:f6:58:0e:85:7b:d3:29:b7:48:f4:ca:00:29:66:e9:fa:48:
b2:c4:6a:e5:43:d0:9c:0b:2a:9c:df:6b:c0:91:e3:02:29:2d:
20:eb:73:ef:48:5d:62:17:70:19:46:b3:47:68:95:e5:ea:c0:
32:6f:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:11:29 2024 by rpki-client on console-ams.rpki-client.org