Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/kI0-WuzIDsTsbnmrOFPls33Gn04.roa
File: kI0-WuzIDsTsbnmrOFPls33Gn04.roa (raw, json)
Hash identifier: JseEbM1Mk2j4m4aTEasYYBQuwDzH9XEzOciaYNz8Fc4=
Subject key identifier: 90:8D:3E:5A:EC:C8:0E:C4:EC:6E:79:AB:38:53:E5:B3:7D:C6:9F:4E
Certificate issuer: /CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Certificate serial: 018CCA2BD6DBE9FBD74B6FD7D1C7000A6055
Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/kI0-WuzIDsTsbnmrOFPls33Gn04.roa
Signing time: Tue 02 Jan 2024 12:35:19 +0000
ROA not before: Tue 02 Jan 2024 12:35:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 185.51.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:d6:db:e9:fb:d7:4b:6f:d7:d1:c7:00:0a:60:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Validity
Not Before: Jan 2 12:35:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=908d3e5aecc80ec4ec6e79ab3853e5b37dc69f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6a:e4:24:2a:55:ae:cb:b7:f3:ea:42:e8:67:
7f:28:4d:32:1f:20:82:7e:b8:eb:6a:53:d5:a4:d6:
13:d4:26:f3:bb:3f:5d:5f:ab:c0:70:ad:76:a0:c4:
0c:3d:96:31:e4:3a:43:b6:ab:29:2d:52:64:42:f3:
5b:25:42:ee:11:68:be:ae:7a:2e:12:91:d3:54:79:
e6:20:59:dc:8c:1c:ee:1a:b4:8b:1e:73:c2:38:fc:
17:c4:f1:44:21:42:22:3e:0a:c4:1e:c3:c2:56:7e:
a7:63:a5:54:14:a4:be:4e:ed:ba:d6:d8:f5:8f:ad:
2a:9b:b2:ac:17:6c:76:e8:04:31:d1:74:ed:a1:d0:
f3:93:98:87:a3:ac:5d:36:2b:e7:4b:fa:44:b5:d7:
54:f5:17:a9:73:32:64:68:14:71:ed:90:d3:be:d0:
fc:4d:64:aa:7a:0b:32:dd:c8:6a:3d:7d:7b:7d:fa:
f3:80:06:90:cf:7b:7d:76:57:70:8a:d6:2f:12:18:
68:b8:3b:96:e3:f0:71:35:6c:d3:a1:ba:6d:f0:05:
c4:25:4d:2b:7a:4b:6b:04:8d:fe:d0:01:27:a8:33:
b6:e2:6c:69:c3:46:34:89:fc:ae:28:f7:c0:11:99:
d9:6b:5c:bc:0d:b9:09:18:50:1f:2b:56:83:f2:79:
d6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8D:3E:5A:EC:C8:0E:C4:EC:6E:79:AB:38:53:E5:B3:7D:C6:9F:4E
X509v3 Authority Key Identifier:
keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/kI0-WuzIDsTsbnmrOFPls33Gn04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.20.0/24
Signature Algorithm: sha256WithRSAEncryption
17:00:b1:a9:29:2a:3c:9b:7a:41:b1:55:d9:f6:37:a8:63:1e:
c4:8e:85:ed:99:e1:4e:3d:54:2c:6e:c2:5c:c8:32:3e:4d:96:
c9:9d:7d:34:18:c9:48:e0:cc:81:ce:91:b2:98:35:0d:c9:a0:
42:02:28:ac:f4:37:a6:9e:6e:1d:f8:66:81:62:ae:a3:7d:59:
d7:0b:85:03:5e:d1:d7:a7:7d:72:84:5f:44:ae:9e:a0:fe:62:
ec:e0:94:ca:cd:69:ee:a9:a2:a9:52:27:f8:c3:d9:59:11:75:
8c:54:51:7d:85:8f:20:fc:27:8a:f6:a7:3c:35:f2:b6:2c:01:
61:4d:9d:7b:87:36:47:18:f6:8d:21:c9:13:13:c9:89:de:f4:
9c:a3:c4:90:03:64:1b:ab:a2:b3:30:10:c2:3b:f6:f5:d6:f2:
6e:8a:d1:2c:73:10:f5:55:68:bf:57:49:91:2b:58:26:87:9c:
d1:74:a2:2c:da:b9:f0:f9:2b:73:15:24:0c:3b:6a:f8:3d:6e:
62:47:65:ff:a8:18:a7:e1:ad:2b:d1:e6:f0:41:4c:1e:a2:b4:
1c:2a:b7:eb:d7:8f:fc:30:8d:68:85:82:7f:39:28:e5:95:3f:
2b:a0:d3:36:69:6b:a2:cd:71:ab:ed:83:23:69:86:ff:20:e5:
41:9c:b2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:05:59 2024 by rpki-client on console-ams.rpki-client.org