Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/KovmQAJ5gXtnUAX7syj7tNHEqkU.roa
File: KovmQAJ5gXtnUAX7syj7tNHEqkU.roa (raw, json)
Hash identifier: JyMJ3idafY2GkyCe9NApeSUzfywcZUH3aawSSNJEyzU=
Subject key identifier: 2A:8B:E6:40:02:79:81:7B:67:50:05:FB:B3:28:FB:B4:D1:C4:AA:45
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018CC26D4C266F2833B7736D69A3DE142CAD
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/KovmQAJ5gXtnUAX7syj7tNHEqkU.roa
Signing time: Mon 01 Jan 2024 00:29:51 +0000
ROA not before: Mon 01 Jan 2024 00:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48090
IP address blocks: 2.57.122.0/24 maxlen: 24
92.118.39.0/24 maxlen: 24
45.142.192.0/24 maxlen: 24
80.94.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4c:26:6f:28:33:b7:73:6d:69:a3:de:14:2c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jan 1 00:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a8be6400279817b675005fbb328fbb4d1c4aa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d2:be:d9:ba:8c:a1:5c:69:fd:96:65:00:0f:
d7:7a:b2:58:85:73:b6:d6:7c:e3:ba:be:91:d4:1f:
91:56:d3:97:45:1c:12:45:55:37:32:0a:cb:1b:22:
78:5b:ec:cb:71:84:de:d8:f2:51:e8:be:b9:ae:10:
76:a7:d0:48:b0:28:b9:1e:c6:17:28:1b:30:9f:2c:
ab:41:e0:f1:2f:d8:28:10:f5:ba:3a:7b:f0:9d:31:
15:b3:29:88:a5:a6:fe:f0:87:73:b7:81:e2:cc:a6:
f2:70:ad:5a:f7:60:33:ff:30:fe:28:8e:64:77:f2:
9d:e3:db:9f:c6:3b:13:52:de:98:c4:5a:f0:a1:1d:
52:e9:54:5b:4c:47:d1:a4:f6:db:3d:bb:fd:38:02:
c9:8c:65:74:d9:c4:b7:ed:ca:6c:bb:2f:fd:b2:e6:
da:19:b4:e8:30:54:a4:16:b2:59:e4:9d:88:03:63:
68:9e:f5:49:d1:9a:e8:7e:7a:d2:1d:03:eb:95:78:
a7:f4:35:d1:51:43:8f:b7:fb:02:9b:2f:14:24:b5:
18:d6:8e:8d:2c:9d:18:b4:7d:70:61:d0:f9:5c:79:
cc:cc:42:76:44:65:ae:5c:61:e5:18:a0:09:8c:60:
79:9a:c2:03:a4:bc:ee:13:ac:03:3e:b2:0d:d1:e4:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8B:E6:40:02:79:81:7B:67:50:05:FB:B3:28:FB:B4:D1:C4:AA:45
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/KovmQAJ5gXtnUAX7syj7tNHEqkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.122.0/24
45.142.192.0/24
80.94.92.0/24
92.118.39.0/24
Signature Algorithm: sha256WithRSAEncryption
91:32:e8:16:86:c5:7c:9c:17:e1:27:6e:1a:ff:54:58:58:9a:
0f:78:59:9d:68:7a:f5:76:ff:3e:69:ce:a6:c6:ab:28:3f:41:
dd:f3:0d:93:6c:26:7b:b3:88:2f:4f:3f:5c:1b:08:8a:24:77:
ed:2f:3d:78:4c:8c:05:31:f5:b5:4e:ec:74:eb:e1:43:87:93:
0c:b3:dd:86:f4:b8:5d:1f:f3:6d:51:dc:1f:47:91:1d:1c:8d:
19:7f:fb:84:93:87:c6:cd:c1:24:85:54:0f:cf:3f:3b:68:a7:
d7:9a:ff:aa:7d:76:6e:1f:87:b5:d9:33:91:d0:5e:6e:9c:1b:
ad:75:2c:f0:a7:33:3f:c1:3a:01:cc:52:71:18:0c:fd:3a:a7:
2d:94:e8:58:42:01:0c:23:d7:ac:a9:d7:fb:00:67:d5:58:89:
9b:3c:2c:34:4f:4c:93:a3:11:4d:65:5b:b9:78:03:54:0a:cb:
58:4f:16:2e:9d:18:2f:4f:2c:1c:17:97:80:f0:80:a4:2c:cb:
5f:9e:35:18:2e:b1:e8:37:31:e7:d6:14:14:91:54:e7:7c:72:
80:40:ee:f6:fa:eb:87:f7:44:aa:49:34:bf:c2:26:b1:fc:a3:
09:7f:4d:85:c6:f2:2b:71:f7:c2:10:be:5f:bd:70:47:5f:a7:
a3:7e:a7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 08:51:48 2024 by rpki-client on console-ams.rpki-client.org