Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/kwOs2JnZDH6TAqGMyxuGssogJVA.roa
File: kwOs2JnZDH6TAqGMyxuGssogJVA.roa (raw, json)
Hash identifier: S4FNf1N7n6YX0EGnjOGWfeX2dt5Y9JobD5F35PtX27Q=
Subject key identifier: 93:03:AC:D8:99:D9:0C:7E:93:02:A1:8C:CB:1B:86:B2:CA:20:25:50
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 018CC42465708B4886CD7573262FE35D01E8
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/kwOs2JnZDH6TAqGMyxuGssogJVA.roa
Signing time: Mon 01 Jan 2024 08:29:28 +0000
ROA not before: Mon 01 Jan 2024 08:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29099
IP address blocks: 185.99.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:65:70:8b:48:86:cd:75:73:26:2f:e3:5d:01:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Jan 1 08:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9303acd899d90c7e9302a18ccb1b86b2ca202550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:17:d3:fe:59:1f:4c:42:59:d6:f9:d1:0f:1b:
0c:e6:87:6f:67:75:18:28:d5:f0:d6:23:e4:2e:23:
3f:7e:aa:a5:ad:42:3c:a0:a0:53:30:02:ea:fd:1e:
42:54:36:5c:2a:ec:65:f6:a1:1f:85:d3:11:c5:95:
60:4d:fa:61:da:39:ff:a1:b8:c8:93:8a:f3:b3:3a:
42:06:39:7e:65:f4:18:f6:55:20:23:a0:96:63:4d:
ca:c7:eb:2c:fb:e6:b3:62:dc:4f:3e:1a:3f:1f:86:
07:53:93:98:65:9f:e5:a1:dc:06:82:97:ac:66:32:
55:eb:7c:ab:85:c1:19:1f:56:f1:d9:1c:9e:ba:79:
1c:1f:ec:72:1f:4e:f4:db:29:55:bc:08:5d:3e:f2:
69:4b:d2:eb:ee:d0:f7:f8:88:b6:55:64:ab:7e:de:
19:ae:5d:f9:dc:c1:7b:2a:85:57:bc:23:75:2b:00:
14:b8:f4:64:00:16:89:f4:ba:2f:52:70:7c:dc:8c:
5c:1e:78:8b:94:bd:6b:52:b7:8e:06:e3:79:c8:23:
9f:e2:b4:88:d7:bc:89:3a:6c:5f:81:1d:d2:a7:74:
26:e6:8c:8c:8e:94:cc:c6:33:e9:ee:2c:d0:2b:bd:
01:e0:36:e6:9e:df:a1:c8:5f:3e:6e:e1:7e:56:7f:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:03:AC:D8:99:D9:0C:7E:93:02:A1:8C:CB:1B:86:B2:CA:20:25:50
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/kwOs2JnZDH6TAqGMyxuGssogJVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.34.0/24
Signature Algorithm: sha256WithRSAEncryption
39:94:72:50:51:6e:02:f3:c0:6b:48:17:ac:f9:76:f0:0f:36:
50:2b:71:de:2c:b2:9e:97:26:53:13:63:df:34:7e:eb:17:7c:
92:29:d6:27:4d:a5:f1:c3:e8:b2:34:ca:01:b2:0c:e7:3d:12:
f8:22:36:0f:9f:9c:c0:1d:56:75:05:be:63:91:46:4b:26:64:
16:8f:c8:54:fa:9d:9c:86:94:1a:23:3b:cf:6c:c5:ba:f4:f2:
35:17:3b:59:02:68:07:74:6b:bd:98:ca:aa:b9:5d:53:ce:96:
a0:a9:c0:5e:74:db:ae:b3:cb:c9:36:11:0f:d2:eb:0e:fe:38:
3b:8d:21:8a:69:ff:12:55:f7:35:55:1c:06:a2:e7:99:3d:7d:
7d:de:0f:d5:5c:f0:53:89:eb:dd:d7:b0:9a:62:a3:40:8e:82:
5d:7c:a8:4f:a3:9f:8f:f4:30:e7:44:5d:89:c8:4a:bf:a9:f4:
b5:48:dc:fd:de:ae:bd:f9:64:dc:bc:b5:53:07:42:02:6b:be:
13:a6:7a:a3:14:c7:22:ca:e5:99:5d:3d:57:6a:47:a3:97:fe:
19:27:5e:d6:65:89:37:69:ec:eb:53:34:8b:98:77:15:54:ae:
cb:66:03:dc:b0:d1:cc:7a:39:34:10:24:c9:50:4f:79:37:56:
47:4d:89:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:22:47 2024 by rpki-client on console-ams.rpki-client.org