Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/kHo8CInLKdU80OzBbrqxgRi8vj0.roa
File: kHo8CInLKdU80OzBbrqxgRi8vj0.roa (raw, json)
Hash identifier: 5p/v06N6B1kojhFeTuKB+n7rRHZZbBzSPxPPAonxuJA=
Subject key identifier: 90:7A:3C:08:89:CB:29:D5:3C:D0:EC:C1:6E:BA:B1:81:18:BC:BE:3D
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 018CC424938C7C6D506B50B793B5ED6ADD49
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/kHo8CInLKdU80OzBbrqxgRi8vj0.roa
Signing time: Mon 01 Jan 2024 08:29:40 +0000
ROA not before: Mon 01 Jan 2024 08:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200923
IP address blocks: 95.140.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:93:8c:7c:6d:50:6b:50:b7:93:b5:ed:6a:dd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jan 1 08:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=907a3c0889cb29d53cd0ecc16ebab18118bcbe3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:c4:fd:5f:5a:b7:15:27:21:0c:5d:97:b7:
f6:01:65:97:43:14:56:28:80:b8:01:9c:09:ea:91:
f8:63:af:f6:0e:d2:7c:df:2e:9f:f9:3b:b5:55:14:
39:1f:27:e8:46:27:a6:13:a3:88:6b:8f:b3:80:d6:
52:8e:af:98:f6:d6:5c:27:66:38:8d:6b:09:60:1f:
50:ce:3c:26:c5:d6:8a:69:e1:0c:03:3c:cd:8f:32:
5b:31:c8:93:93:bb:a3:39:ca:a0:81:79:cf:0f:ba:
ab:80:82:fc:a3:d3:58:f6:66:7c:d5:14:d6:cd:ca:
4e:df:03:c3:fc:79:ad:f7:d0:f9:40:06:f8:14:a1:
cf:bf:8f:c4:73:6e:5d:ff:20:5d:e4:7a:29:69:35:
e7:76:f4:6d:13:11:0d:fb:a2:6d:48:8f:68:38:fe:
a7:95:fb:8c:73:c2:37:7e:0c:e2:4a:98:c0:07:42:
b6:8e:9c:74:f1:16:32:67:7f:cf:2c:51:f7:c7:e1:
eb:38:ac:a9:d0:0c:b0:87:7c:90:28:6d:26:75:6d:
a2:13:3b:c4:a2:fd:cd:78:3a:7b:dc:4e:ce:1b:c3:
ba:36:6f:82:43:60:bc:bc:51:88:59:f7:8f:61:b2:
4e:8d:91:6c:05:4c:a4:fd:a3:69:f4:5f:ec:ae:b3:
f9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7A:3C:08:89:CB:29:D5:3C:D0:EC:C1:6E:BA:B1:81:18:BC:BE:3D
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/kHo8CInLKdU80OzBbrqxgRi8vj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.123.0/24
Signature Algorithm: sha256WithRSAEncryption
59:14:70:31:c3:65:55:92:e9:6e:d9:3b:eb:82:8f:84:47:c8:
97:a5:3b:b5:f3:49:b0:02:17:8c:e5:f1:e0:79:5b:ff:35:eb:
10:33:1e:da:b9:ee:46:f6:ed:87:bb:c4:04:fd:4f:4d:21:d9:
0b:0d:11:48:80:7c:67:96:51:24:1b:2d:ad:34:80:3c:07:d4:
d4:22:04:98:86:5d:5a:19:3f:1b:3c:1e:1f:a6:1b:4a:18:68:
4a:7e:c1:02:83:8e:ec:a5:59:b4:b4:d3:e5:74:0b:4c:54:c6:
57:01:a1:d0:56:a6:b4:e0:e5:c6:aa:99:9c:36:93:e7:b4:e2:
41:49:13:3d:96:fb:4f:29:02:88:2a:cf:cc:17:2e:fe:71:08:
d1:40:63:d6:63:08:15:42:56:38:a3:a5:d3:84:82:0a:8c:f4:
08:eb:11:97:56:0e:d8:d2:c1:14:56:d3:0b:e7:7d:5c:c1:5d:
80:f3:fe:92:29:31:11:0b:3e:60:52:8d:d3:b0:99:7b:0f:2d:
72:ed:4a:65:f0:c3:0f:60:11:8d:8b:10:92:5d:cd:80:e7:f0:
3d:1d:02:fa:a9:a6:44:a6:53:71:81:92:78:01:6e:81:13:9a:
2b:cf:52:1c:8e:36:53:b7:86:4e:23:1f:ac:2e:a4:ea:d8:0d:
27:70:8e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:25:43 2024 by rpki-client on console-ams.rpki-client.org