Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/KX892rzyjMXgrRcsyLvyE-v_AT8.roa
File: KX892rzyjMXgrRcsyLvyE-v_AT8.roa (raw, json)
Hash identifier: t7EpgxvFrdamcIfPlnABk2hl/vkdhYmXLhbjJNicuDc=
Subject key identifier: 29:7F:3D:DA:BC:F2:8C:C5:E0:AD:17:2C:C8:BB:F2:13:EB:FF:01:3F
Certificate issuer: /CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
Certificate serial: 018CC9BBE7DF12DFC767EF50D297DBF2EF21
Authority key identifier: 1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/KX892rzyjMXgrRcsyLvyE-v_AT8.roa
Signing time: Tue 02 Jan 2024 10:33:04 +0000
ROA not before: Tue 02 Jan 2024 10:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210991
IP address blocks: 195.66.96.0/24 maxlen: 24
2a12:7940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:e7:df:12:df:c7:67:ef:50:d2:97:db:f2:ef:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aac7db5193c1b3b7487e847d41a383ed5b26671
Validity
Not Before: Jan 2 10:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=297f3ddabcf28cc5e0ad172cc8bbf213ebff013f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:d8:a8:b6:cf:5f:be:7d:cd:28:d3:f3:4e:
b9:ea:18:93:9b:93:fb:d4:83:a1:5f:2a:72:f4:f9:
ad:eb:2f:d0:ba:e4:9f:25:4a:9f:e1:a9:91:a2:20:
3d:06:2a:6f:ca:41:bf:84:ae:c2:31:5d:fb:90:ee:
fd:47:66:4a:02:72:85:50:5c:0e:22:de:2b:7a:d8:
9f:10:3c:ae:4e:ff:13:27:69:ba:ef:3f:3e:5a:ab:
de:2f:4a:f0:b8:82:90:b7:cc:36:6d:7d:0a:f4:2a:
e6:f1:16:9d:3a:c7:74:89:e2:c5:d0:5f:1d:4c:d2:
7b:cc:1c:1c:43:b5:bc:d8:e2:cd:98:aa:f8:f1:6f:
76:34:59:93:e7:10:bb:34:a4:13:43:bf:4c:f5:13:
4d:a8:ea:9e:d9:e2:53:6c:ca:06:bd:b3:6d:9a:d1:
f8:24:2a:41:56:72:8a:53:58:2d:1a:04:3e:b4:ac:
c5:6a:1e:32:d7:5e:f4:d7:9e:f7:d1:b9:34:1c:b5:
33:5e:ad:0a:1f:f9:b5:bc:a5:80:7f:ab:36:e9:1f:
e8:0f:81:63:c3:f1:df:47:2d:39:1b:01:4b:14:bf:
b8:e1:0b:19:f8:7a:21:1f:f5:81:5e:32:19:bb:59:
84:5c:e3:e4:21:58:d4:28:e8:c3:0d:7d:75:77:fc:
af:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7F:3D:DA:BC:F2:8C:C5:E0:AD:17:2C:C8:BB:F2:13:EB:FF:01:3F
X509v3 Authority Key Identifier:
keyid:1A:AC:7D:B5:19:3C:1B:3B:74:87:E8:47:D4:1A:38:3E:D5:B2:66:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/KX892rzyjMXgrRcsyLvyE-v_AT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e6f1a4-a43e-47bd-a178-c36a96c04177/1/Gqx9tRk8Gzt0h-hH1Bo4PtWyZnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.96.0/24
IPv6:
2a12:7940::/29
Signature Algorithm: sha256WithRSAEncryption
a1:b1:03:2a:52:da:63:aa:71:e3:9e:cf:4b:c6:96:4d:90:81:
67:20:80:3b:e3:ff:df:9b:e5:35:60:f6:00:0d:1c:14:e3:9d:
fc:a1:d9:71:ff:41:50:19:a7:da:4f:44:e7:16:59:ae:79:94:
72:cd:27:c5:30:af:74:97:15:9c:f8:10:a5:5e:60:08:0b:3b:
f0:37:23:4b:e5:37:ce:5e:94:3a:dc:23:53:e6:6b:df:89:3f:
6c:0f:b7:56:3c:cf:56:4c:82:ec:9e:eb:25:c9:b8:e0:8e:99:
3c:33:d1:60:45:21:ef:3c:31:ed:66:5f:64:fc:99:01:21:4f:
0b:30:2e:8f:0b:db:71:ef:f2:2f:b6:8b:49:0b:13:d2:50:c3:
78:f6:5a:95:3a:24:b1:6c:8d:f4:3f:74:3b:00:d4:6d:3b:e4:
30:e5:27:cd:b6:64:17:d6:2c:2f:e3:a1:0a:c1:05:73:b2:7f:
3b:e2:b3:8a:3b:ad:e7:6c:f6:3a:3a:43:b5:61:ae:4a:4b:1a:
94:98:57:b4:85:51:9e:1c:5e:74:50:99:d4:c3:d2:21:1e:51:
0a:0e:87:8b:3b:ce:18:fc:50:ef:41:e8:2c:c8:a5:73:dc:18:
a0:5c:0e:9e:4b:77:a8:ed:60:7f:b6:4a:b0:b0:1b:47:6e:a9:
fa:a4:21:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:02:08 2024 by rpki-client on console-ams.rpki-client.org