Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/knJ-WOw4MnbmeqseldlbvQKSm6Q.roa
File: knJ-WOw4MnbmeqseldlbvQKSm6Q.roa (raw, json)
Hash identifier: W1kWjkeDi85UU9wVewc8//GnNU/6Ea4MztQ9aYXs0MA=
Subject key identifier: 92:72:7E:58:EC:38:32:76:E6:7A:AB:1E:95:D9:5B:BD:02:92:9B:A4
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018F8C2F5B4C31D60C9846DFF1108979FA07
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/knJ-WOw4MnbmeqseldlbvQKSm6Q.roa
Signing time: Sat 18 May 2024 14:51:04 +0000
ROA not before: Sat 18 May 2024 14:51:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142019
IP address blocks: 45.93.17.0/24 maxlen: 24
45.155.225.0/24 maxlen: 24
103.240.148.0/22 maxlen: 24
160.238.64.0/24 maxlen: 24
160.238.65.0/24 maxlen: 24
160.238.67.0/24 maxlen: 24
185.245.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8c:2f:5b:4c:31:d6:0c:98:46:df:f1:10:89:79:fa:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: May 18 14:51:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92727e58ec383276e67aab1e95d95bbd02929ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1c:e8:db:25:ce:94:d3:56:ec:97:27:74:db:
4a:4a:5d:56:6d:97:1e:d5:3d:ff:7b:34:84:ac:b7:
cf:6c:ab:be:26:7e:6e:8b:32:3a:c0:4b:82:65:6a:
3a:66:3a:c7:0b:00:6f:29:ff:58:84:20:ef:ae:83:
49:a5:cc:47:eb:d9:f1:a1:69:84:99:2e:2f:3e:ec:
26:53:f1:a0:89:3a:a0:c4:49:84:26:27:23:f3:71:
1e:46:b4:d5:45:9a:d4:3f:bf:e8:b7:48:7a:a7:b9:
70:6d:8f:37:83:cd:4f:13:1a:31:50:a1:11:29:d3:
85:ed:f5:a9:b5:81:87:e6:4c:c2:e4:f4:47:50:9d:
aa:d5:8c:54:7a:9d:9e:4e:00:69:89:d5:39:3b:98:
7f:da:6d:f8:cd:a5:9d:f8:8b:ec:0a:c1:ed:c8:9f:
24:b2:68:c9:d4:fe:57:97:50:44:2c:04:ba:83:2b:
8b:39:5c:f7:b2:67:9d:e0:98:48:54:49:2c:9d:f6:
68:0c:c8:6e:7e:ba:77:50:13:75:bb:34:df:77:73:
d4:67:2c:d6:34:85:71:49:56:5e:50:9e:5a:7e:cc:
3c:f7:a5:f9:dd:9c:99:90:ca:c1:fe:81:28:30:8c:
f9:47:93:89:be:6b:ec:29:34:4f:61:6c:fc:ae:73:
1d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:72:7E:58:EC:38:32:76:E6:7A:AB:1E:95:D9:5B:BD:02:92:9B:A4
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/knJ-WOw4MnbmeqseldlbvQKSm6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.17.0/24
45.155.225.0/24
103.240.148.0/22
160.238.64.0/23
160.238.67.0/24
185.245.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:3a:0a:44:99:6c:19:34:2f:dc:3c:e6:0b:8c:6a:2c:fc:02:
f0:b9:0d:ae:03:41:ca:ee:73:58:00:f4:cf:52:12:29:f6:22:
1f:d0:7c:0b:47:aa:d7:67:48:28:47:0e:af:87:12:64:c8:8c:
64:85:f4:af:df:30:09:fb:24:5e:c4:1b:6e:c7:99:4e:08:b2:
97:5b:dc:b8:96:4e:9c:1d:f9:24:83:90:32:7f:e7:c5:23:79:
c2:6b:8a:41:2c:d9:ed:94:7d:2f:a1:65:c1:40:b3:b6:a5:59:
7f:f6:f4:04:28:46:93:fa:f7:30:5f:46:cd:21:5f:29:69:f2:
79:f4:8f:34:6c:b7:12:51:c7:83:eb:7f:3b:7a:45:66:18:8d:
25:64:37:0c:fb:cb:12:8c:4b:71:17:51:09:ef:e4:21:3d:d8:
2c:da:19:1f:05:18:1c:fc:55:5f:22:92:bf:41:05:68:20:93:
d8:bd:41:ff:62:cd:ac:c7:0c:10:25:8f:a5:82:bd:fc:57:5d:
5f:d1:62:23:d7:e6:99:80:db:d5:89:6c:f0:cf:d9:e8:f4:d8:
62:ec:22:a3:39:48:2a:84:1e:79:8e:b1:f7:f0:13:7b:5f:6e:
20:6d:97:d4:b6:75:e8:53:6e:d6:16:72:22:31:8b:92:d2:83:
9f:65:83:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:48:06 2024 by rpki-client on console-ams.rpki-client.org