Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/klpH2P_IJ9PUMh5-i3_gWDOqZ2M.roa
File: klpH2P_IJ9PUMh5-i3_gWDOqZ2M.roa (raw, json)
Hash identifier: zUyBrxM5Awr5x4kyL05fny4xVmxasFcFv56th1dvj6o=
Subject key identifier: 92:5A:47:D8:FF:C8:27:D3:D4:32:1E:7E:8B:7F:E0:58:33:AA:67:63
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 018E0E8464B1F1986E8727A4C46C848BBC1B
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/klpH2P_IJ9PUMh5-i3_gWDOqZ2M.roa
Signing time: Tue 05 Mar 2024 12:09:01 +0000
ROA not before: Tue 05 Mar 2024 12:09:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215383
IP address blocks: 92.114.1.0/24 maxlen: 24
93.117.64.0/24 maxlen: 24
93.118.44.0/24 maxlen: 24
188.241.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:84:64:b1:f1:98:6e:87:27:a4:c4:6c:84:8b:bc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Mar 5 12:09:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=925a47d8ffc827d3d4321e7e8b7fe05833aa6763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:e7:b1:3e:c7:2d:e7:51:af:0f:fa:b8:16:
90:2b:a1:a9:d8:14:e8:af:0d:15:62:74:37:ff:4f:
67:9d:d0:2f:07:1a:92:75:fa:cd:f4:05:d1:ff:6f:
42:26:7e:56:70:ed:f4:27:55:83:06:b1:f4:8d:e9:
0c:65:ba:e1:f7:01:a6:c3:8e:43:19:a1:e2:fb:ba:
bf:5d:c5:19:f9:cb:c6:88:ab:3a:da:9b:97:a8:86:
46:68:95:9a:7e:df:ce:f8:b8:76:ee:2f:b6:b5:04:
9c:d8:40:04:4f:81:47:25:46:60:b8:8b:3a:2f:b2:
ba:9e:54:89:26:cd:3c:ea:19:c9:8a:f4:31:45:de:
55:a6:83:e7:ac:49:e1:6d:fe:58:f5:a9:16:50:57:
bc:2a:c0:d0:c2:72:33:c9:c5:c5:e7:c5:76:0e:7a:
83:a5:15:41:e7:bd:3b:f2:1a:b3:f1:4a:b6:73:82:
4c:f6:01:e3:1d:35:b1:f0:ad:cc:4d:6a:e9:82:f1:
fb:5f:2d:45:09:31:35:ed:0d:68:21:5c:c2:c6:53:
f1:65:f9:e4:ba:b5:59:39:20:7b:5a:31:02:c0:d2:
3d:51:54:5b:fb:88:c5:c6:8d:50:66:d1:2c:82:b1:
7c:47:67:29:40:a7:af:0d:07:23:41:87:9b:05:6a:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5A:47:D8:FF:C8:27:D3:D4:32:1E:7E:8B:7F:E0:58:33:AA:67:63
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/klpH2P_IJ9PUMh5-i3_gWDOqZ2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.1.0/24
93.117.64.0/24
93.118.44.0/24
188.241.70.0/24
Signature Algorithm: sha256WithRSAEncryption
34:a0:c5:7b:bf:fa:16:e2:fb:df:06:82:05:55:a5:68:5b:3d:
40:49:b8:d7:e7:d7:08:a8:d5:84:31:94:ed:3a:46:9c:de:50:
ce:af:ce:14:f8:01:d9:94:1e:96:a9:8e:6f:95:c3:6e:9f:d8:
ea:28:8a:3d:37:c6:16:99:c5:14:7f:f4:34:3f:52:1f:e2:64:
58:f2:c9:7d:a7:b0:d1:23:12:b6:ad:cd:8a:fd:2f:51:ab:04:
e0:bb:e7:6e:de:0d:c0:27:75:3d:ca:28:39:a0:2d:31:6e:d1:
cc:1c:77:01:b1:b4:4f:3c:6a:a3:23:53:cf:51:b1:b0:d2:6e:
9d:18:f3:74:04:e8:b6:15:c4:25:ca:e0:39:08:9c:a0:cc:ea:
08:5d:ba:22:f5:61:b0:33:2c:73:49:ef:d6:92:3a:65:48:9d:
c1:d0:d4:ff:36:b9:57:1c:52:44:a5:31:d4:02:00:c3:a2:92:
4f:24:b9:63:82:e7:fe:93:97:25:9d:11:a7:cd:62:35:18:33:
33:ae:c4:e8:1a:b3:7f:e2:c8:91:80:8f:d4:20:93:9f:7c:4c:
48:b1:d0:7a:35:da:32:32:89:d1:80:8a:42:cf:74:59:9b:7e:
1b:44:3b:3e:97:7a:d7:73:c0:f3:21:19:0f:fe:32:4d:e8:8d:
2d:c3:ca:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:38 2024 by rpki-client on console-ams.rpki-client.org