Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/kWhDWYQ-96bavKdEOzI3CKe6Zm4.roa
File: kWhDWYQ-96bavKdEOzI3CKe6Zm4.roa (raw, json)
Hash identifier: 6oYd2kjdbrfT4ovAkkTbHGkZKfAZyTbdts5n2qHWFjY=
Subject key identifier: 91:68:43:59:84:3E:F7:A6:DA:BC:A7:44:3B:32:37:08:A7:BA:66:6E
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 018CC86F31BE847A736581E58028068E3177
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/kWhDWYQ-96bavKdEOzI3CKe6Zm4.roa
Signing time: Tue 02 Jan 2024 04:29:39 +0000
ROA not before: Tue 02 Jan 2024 04:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47230
IP address blocks: 195.216.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 10:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:31:be:84:7a:73:65:81:e5:80:28:06:8e:31:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Jan 2 04:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91684359843ef7a6dabca7443b323708a7ba666e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:56:15:22:28:31:b6:2a:d3:a6:77:46:76:
3e:9e:c5:5d:4b:00:d0:a1:97:2b:d6:62:c3:60:54:
cd:06:66:0b:91:de:35:fd:a3:f3:dd:67:e6:f1:43:
5b:a0:d2:77:00:92:2b:11:d6:ce:a2:73:e9:af:4a:
98:5f:bd:75:0d:3b:21:0e:85:e7:35:f8:91:e7:a4:
ab:d8:d0:91:84:f4:af:02:23:18:2a:44:77:d0:f1:
3e:ab:9f:ec:e4:d8:40:79:95:f7:2d:86:1b:89:cf:
92:0c:f5:6c:e8:8e:0b:17:18:30:53:a2:04:7d:2b:
fd:cd:e8:bf:71:05:75:fa:ac:dd:fc:8f:31:4f:13:
c3:4e:a2:be:9a:68:46:bf:65:2f:77:e4:7f:d7:50:
d2:be:c4:c9:0c:38:bb:b2:6a:4c:b3:53:91:6d:90:
d1:49:0c:80:25:46:7a:78:8a:1a:a8:83:d9:24:1c:
a2:6d:1b:0c:c1:53:bf:d9:41:7a:b0:5c:75:57:24:
f0:66:42:69:1f:58:da:31:c2:d5:49:ed:2a:85:f5:
e8:8d:8f:36:94:46:a1:8a:12:25:44:52:ff:5c:d2:
ff:56:31:f8:96:73:23:ad:f3:c3:51:0d:7b:15:b9:
ee:11:8d:b5:fc:83:e9:85:de:da:00:e5:df:13:b6:
af:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:68:43:59:84:3E:F7:A6:DA:BC:A7:44:3B:32:37:08:A7:BA:66:6E
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/kWhDWYQ-96bavKdEOzI3CKe6Zm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.239.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:6f:81:cd:69:d3:2d:32:db:f0:0a:7c:07:a6:c7:f4:c1:a6:
e6:dd:f3:ae:ea:2b:71:19:b3:00:ff:ba:87:7b:25:c0:ec:0a:
e0:7d:72:5a:f2:7a:92:27:ab:c1:32:e1:99:5f:0a:a8:4d:36:
23:d0:6c:5a:05:41:9c:9f:90:9e:4a:3e:c4:a7:ae:ba:66:22:
8c:a9:7c:8c:43:a9:3e:27:69:29:87:ef:9f:37:8f:c9:ba:e1:
32:84:74:41:63:2b:17:29:fc:97:48:94:f6:79:3f:99:84:81:
b9:73:45:21:0e:20:8c:07:20:c3:46:d3:47:60:d1:56:d3:e1:
fe:2f:87:ee:fd:4a:96:29:a4:1f:d7:78:5e:38:ca:6d:c2:cf:
7a:ac:0f:64:ae:51:49:83:dd:60:a1:85:22:0c:e0:52:9c:89:
22:fc:d8:fd:d3:74:35:1b:bb:a7:db:44:a4:42:be:1e:43:03:
f4:19:a0:57:03:7d:d4:d0:5b:3a:a1:4a:61:2f:6d:82:de:8f:
8c:78:33:c1:42:c1:a3:c4:f0:f0:80:3c:6b:67:e2:92:f1:be:
8e:d8:f7:bd:30:8e:b1:0c:22:c3:95:90:50:4b:e0:9f:d1:15:
a3:87:d6:d9:2e:a2:61:22:01:b3:c5:d1:36:46:64:67:b5:5a:
cd:7a:7d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 14:05:07 2024 by rpki-client on console-ams.rpki-client.org