Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/k_6NpZrr5-99leqwVhXMxSYt_zg.roa
File: k_6NpZrr5-99leqwVhXMxSYt_zg.roa (raw, json)
Hash identifier: 18+iIkFgYfOsPAXUbof0/82hq96N+uTSOX2AI2J7b2A=
Subject key identifier: 93:FE:8D:A5:9A:EB:E7:EF:7D:95:EA:B0:56:15:CC:C5:26:2D:FF:38
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 0191E5B441A11EBC4FA4EA46E88FEDD887D5
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/k_6NpZrr5-99leqwVhXMxSYt_zg.roa
Signing time: Thu 12 Sep 2024 10:08:01 +0000
ROA not before: Thu 12 Sep 2024 10:08:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210654
IP address blocks: 185.188.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:b4:41:a1:1e:bc:4f:a4:ea:46:e8:8f:ed:d8:87:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Sep 12 10:08:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93fe8da59aebe7ef7d95eab05615ccc5262dff38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:a5:f0:dd:b2:29:1b:9a:e7:c8:41:8b:fc:
97:43:16:21:57:f7:c1:bf:36:09:1a:9a:3a:a3:d7:
d3:af:22:26:c4:21:15:da:23:eb:3b:93:cc:19:80:
e5:a3:b1:2c:0b:16:d5:ee:6e:3a:06:80:c9:83:3b:
41:c2:ee:95:64:a8:06:4c:3e:b7:9e:b0:dd:92:fd:
7f:d2:8b:b2:16:55:65:1e:68:2c:aa:eb:61:f5:04:
01:99:25:a1:e1:18:c7:f3:7a:f6:10:ff:58:b4:b5:
7e:ea:b6:03:ef:d7:16:76:b9:90:c2:75:79:0b:91:
27:87:6d:29:fc:1d:81:68:4f:a0:0c:10:0e:ef:a7:
20:c7:9a:9f:a8:82:66:44:4a:4e:f6:34:e4:c9:f0:
f1:3c:fb:8f:f0:e1:be:a0:e2:35:a3:50:1b:83:ed:
f8:2d:91:8b:94:85:9f:eb:0c:a5:e5:a3:65:5b:48:
47:9d:6f:96:7c:dc:52:50:9b:95:63:f0:1b:da:e9:
a2:04:8c:62:d8:02:46:9a:be:dd:e9:7c:07:05:76:
55:af:3f:5c:66:73:ea:ac:54:1a:e4:81:60:78:4e:
3c:4d:4f:6a:2d:4e:32:d5:f2:6a:f0:67:bf:11:3a:
43:55:06:26:08:34:4d:c9:1f:f9:33:20:6a:f9:ed:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FE:8D:A5:9A:EB:E7:EF:7D:95:EA:B0:56:15:CC:C5:26:2D:FF:38
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/k_6NpZrr5-99leqwVhXMxSYt_zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.140.0/24
Signature Algorithm: sha256WithRSAEncryption
f5:fb:3c:1a:ba:a4:e8:4a:d1:42:46:e1:73:06:43:a6:9f:25:
0e:37:3d:79:0a:8c:cf:30:1d:b5:9e:64:2f:69:3a:2f:73:14:
1f:16:4f:5a:72:4e:27:76:b9:29:fa:b1:ca:67:29:9e:e3:71:
93:36:1c:1d:fc:f0:b5:c0:1b:97:c9:c3:70:5a:ff:d2:0b:1c:
cd:85:82:29:d2:71:f6:a2:17:5c:b6:df:ec:4c:61:54:50:8b:
df:2e:db:51:00:cb:7e:a6:3f:34:3a:5c:79:55:10:6d:98:61:
a7:20:9a:cb:4e:9c:e1:43:43:e5:76:0f:55:65:38:0b:0f:ce:
70:89:a9:5b:bf:18:11:ab:bc:b6:4e:b1:c2:7c:69:79:ec:0a:
e5:92:bc:41:35:2f:e9:b3:c0:51:b1:7c:22:b5:9e:c6:dd:b8:
42:e2:8b:2a:40:a6:f5:16:46:92:44:31:e0:c5:aa:40:33:8e:
6d:80:cb:20:26:b5:69:04:1a:6e:2d:4b:dd:56:55:31:5d:f5:
cc:86:96:76:4e:6f:ee:69:54:34:9b:a2:10:af:39:65:3a:ca:
df:27:69:92:7b:41:fe:8f:64:a9:9b:f3:be:80:97:d6:b2:ff:
e1:dd:77:8d:4c:e2:44:b3:87:2e:7b:de:59:50:a6:70:9a:bc:
eb:03:54:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:25:50 2024 by rpki-client on console-ams.rpki-client.org