Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/tCykoDTHf0IRfJmb2nNDk4kv-c0.roa
File: tCykoDTHf0IRfJmb2nNDk4kv-c0.roa (raw, json)
Hash identifier: wB44xCciO1+I/I2F8v1w0b3IIDgsk/DwLt2d3RtJFdM=
Subject key identifier: B4:2C:A4:A0:34:C7:7F:42:11:7C:99:9B:DA:73:43:93:89:2F:F9:CD
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 018D87EE91C5350DF4F0B974D14B6641A3D2
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/tCykoDTHf0IRfJmb2nNDk4kv-c0.roa
Signing time: Thu 08 Feb 2024 08:56:15 +0000
ROA not before: Thu 08 Feb 2024 08:56:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212042
IP address blocks: 185.121.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:ee:91:c5:35:0d:f4:f0:b9:74:d1:4b:66:41:a3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Feb 8 08:56:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b42ca4a034c77f42117c999bda734393892ff9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:83:3f:9a:af:3d:ed:3c:fc:fe:4f:6a:b0:54:
21:50:0f:49:4d:b2:14:25:60:90:40:1a:d6:af:2a:
ac:5c:af:83:df:22:35:89:a5:1e:d7:49:bc:78:40:
85:69:21:99:40:96:c9:20:2a:03:e6:38:d0:54:92:
5e:fd:7f:42:46:a2:78:04:f5:7a:3b:43:a1:68:5f:
85:ed:2b:27:7f:ee:76:42:bd:b1:5f:8f:12:33:fd:
15:66:e6:f4:14:9b:02:39:ad:75:2a:41:94:4f:0b:
d0:50:05:59:56:8e:09:95:6c:91:9b:cc:2d:c8:3f:
cd:5b:72:b2:72:6d:1f:a5:97:9b:4f:ee:6f:05:69:
e4:bb:27:cc:61:1c:fb:6b:0d:4f:cb:0d:e0:35:9d:
88:16:2a:3c:61:c6:3a:44:c3:51:a1:95:9b:34:d7:
b4:d3:f1:18:41:e8:ed:bd:3d:5e:41:b1:9d:43:8d:
5b:aa:ab:80:db:3a:4d:69:29:9b:c6:46:7f:54:32:
72:c2:57:d7:2f:29:4a:ec:4a:8d:92:3a:2a:18:39:
97:80:ce:d4:1f:fc:cf:eb:52:ce:b2:a6:55:90:5a:
e0:89:bf:f2:89:8c:9f:27:0f:b1:57:7e:b0:4d:d6:
39:a0:0e:79:f8:b2:dc:91:ce:c7:6a:46:ca:87:e6:
f2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2C:A4:A0:34:C7:7F:42:11:7C:99:9B:DA:73:43:93:89:2F:F9:CD
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/tCykoDTHf0IRfJmb2nNDk4kv-c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:bc:a8:82:73:d4:80:cb:b2:a4:6f:f9:55:d5:b7:08:6c:fa:
2a:64:89:08:bb:de:b4:ff:a4:56:6a:67:5f:48:4e:60:93:c8:
8c:61:58:f2:8f:97:6a:4e:09:7a:53:f3:f6:89:8f:a7:1f:e0:
d7:70:ba:dc:59:1a:73:6c:26:f9:23:06:b1:7e:c6:75:12:22:
44:25:90:77:a8:54:6c:28:ba:24:27:bc:44:ed:4a:1e:27:4c:
25:38:2f:41:cb:42:fa:f9:18:c6:ee:7e:38:3b:33:23:1c:3c:
50:df:ff:87:f7:b0:e9:f1:e8:a8:7c:3c:f5:ac:d1:2d:90:2c:
54:06:9d:d0:94:0d:1d:2f:7d:f9:2b:a9:05:26:82:14:cc:48:
71:6c:4d:ab:ae:20:6c:d4:02:15:70:6e:89:dd:3d:8f:4f:5a:
65:5b:00:8d:dc:53:09:b1:a9:97:db:f2:85:73:7b:f9:52:96:
c0:52:6c:5d:32:23:3e:82:f9:54:05:42:bc:42:d8:ee:ff:b5:
f5:ef:21:d9:e2:3f:25:c6:16:df:e1:be:96:ff:9c:e2:b2:d7:
15:d8:9e:f1:1c:19:c6:38:9c:be:dc:3f:4c:21:2f:17:5d:05:
63:4d:48:2b:93:6d:23:bd:36:5b:ca:da:d9:82:ad:b7:cd:8c:
aa:be:c6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:31:52 2024 by rpki-client on console-ams.rpki-client.org