Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/kKaiiklxSLDqp0rZWbmYYGUYrGs.roa
File: kKaiiklxSLDqp0rZWbmYYGUYrGs.roa (raw, json)
Hash identifier: rQs3Z63nD7QHQaTYuIEAVSYHHNBsNg87Aw1zVk4K3ZI=
Subject key identifier: 90:A6:A2:8A:49:71:48:B0:EA:A7:4A:D9:59:B9:98:60:65:18:AC:6B
Certificate issuer: /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial: 0191B86044DE3991CD75959446B3A626D5B8
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/kKaiiklxSLDqp0rZWbmYYGUYrGs.roa
Signing time: Tue 03 Sep 2024 14:53:22 +0000
ROA not before: Tue 03 Sep 2024 14:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 194.36.12.0/22 maxlen: 22
194.169.100.0/24 maxlen: 24
194.169.116.0/24 maxlen: 24
194.169.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b8:60:44:de:39:91:cd:75:95:94:46:b3:a6:26:d5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Validity
Not Before: Sep 3 14:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90a6a28a497148b0eaa74ad959b998606518ac6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:4f:ff:0d:2c:c9:c2:8d:e3:9d:01:27:c5:
72:f4:8e:72:27:b3:12:6c:b2:c8:47:ee:0b:07:ea:
2e:4d:00:67:2c:aa:3d:fd:70:48:ae:9c:14:92:da:
67:3a:0e:06:a3:33:08:7d:40:c5:fe:96:e0:b1:2f:
2c:23:3c:b1:07:43:fd:d3:11:d3:c9:3b:a3:f2:cb:
f4:f3:92:db:c4:be:cd:3f:a5:bb:98:5a:2c:5d:e7:
c2:5f:4c:b0:91:72:20:99:75:46:7d:79:21:50:0c:
6a:ce:ab:19:09:e4:af:6d:cd:06:6f:50:5e:e8:e2:
37:3a:46:77:2f:3d:3f:04:0f:97:8b:08:3c:03:0e:
d5:47:87:61:3f:42:df:58:02:02:12:63:8c:3f:70:
2f:da:ec:02:70:9e:1e:1d:57:59:ff:dd:ee:99:e3:
50:f0:22:bc:22:49:97:1c:6e:b0:11:82:8b:29:cd:
a0:f6:08:44:e9:ee:7f:61:77:ac:13:60:93:40:a6:
0b:1d:7a:4a:2f:35:7d:d5:dc:58:cc:fd:2e:f8:19:
b9:b9:23:49:3a:82:49:0e:f0:cb:e7:e1:35:a0:df:
f4:83:87:54:0f:f0:0f:50:3a:3d:eb:fe:71:06:b8:
4e:46:c8:4f:0b:f2:e3:c3:52:d5:14:8a:21:ac:ca:
c3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A6:A2:8A:49:71:48:B0:EA:A7:4A:D9:59:B9:98:60:65:18:AC:6B
X509v3 Authority Key Identifier:
keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/kKaiiklxSLDqp0rZWbmYYGUYrGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.12.0/22
194.169.100.0/24
194.169.116.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:b0:a4:69:11:c5:1a:9f:54:30:13:84:2a:45:0f:39:58:49:
54:f2:44:af:52:83:d0:b9:f8:92:5c:91:c6:2e:cb:10:e6:e8:
fc:06:67:24:8d:21:d7:d7:4f:27:44:90:be:09:35:b6:e1:4e:
b4:dc:b8:1b:72:4a:fb:df:2f:1c:49:25:61:5f:ae:0c:14:00:
61:8d:9b:05:e8:ec:60:e0:59:84:d4:0c:71:b7:24:17:2b:c8:
23:fa:fb:cd:6e:24:37:6b:c3:34:39:96:35:d4:fd:0f:3c:cb:
95:aa:e3:02:29:e7:39:e0:e7:72:b7:8a:94:bc:48:83:7e:6f:
de:3a:c0:a0:2b:70:bd:af:ac:a8:35:89:69:3c:1c:1a:31:cf:
bf:bc:50:ea:c7:ab:7f:13:e0:48:6e:49:82:c6:87:22:c7:91:
3f:b1:d6:b9:52:5f:7e:b1:d8:54:58:84:fb:46:8f:67:3a:f8:
7a:c0:b8:55:4a:b4:42:c4:74:35:5a:70:6b:86:ac:59:06:73:
84:ad:76:c5:fb:ab:3d:f3:bc:5e:05:12:93:56:9d:1c:9c:f3:
f4:a4:ef:4e:3b:62:d2:2e:f4:9b:40:bc:d2:bc:dc:30:16:ca:
60:84:28:6f:1f:4b:98:c4:3e:f1:df:ec:b2:8b:5e:53:25:77:
7a:c8:0f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:39:32 2024 by rpki-client on console-fra.rpki-client.org