Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kwup-JQBOU2nbOeWuLJknLhQYaM.roa
File: kwup-JQBOU2nbOeWuLJknLhQYaM.roa (raw, json)
Hash identifier: 2TaAhGRQWAcI9TokCvsBc+ptpTsQYuLu/qqF8+hEckQ=
Subject key identifier: 93:0B:A9:F8:94:01:39:4D:A7:6C:E7:96:B8:B2:64:9C:B8:50:61:A3
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC50151BAC4DED0DC1EE4A6DA953DA118
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kwup-JQBOU2nbOeWuLJknLhQYaM.roa
Signing time: Mon 01 Jan 2024 12:30:47 +0000
ROA not before: Mon 01 Jan 2024 12:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400909
IP address blocks: 88.216.182.0/23 maxlen: 23
84.32.208.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:51:ba:c4:de:d0:dc:1e:e4:a6:da:95:3d:a1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=930ba9f89401394da76ce796b8b2649cb85061a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1c:3f:f8:3d:14:4f:c6:d4:8b:3f:c2:2b:9f:
b8:bf:33:f3:a9:f4:00:1b:1d:1e:b8:aa:57:dd:9f:
70:b0:d0:63:84:df:a1:54:83:7c:3d:7b:97:d8:4e:
9c:0f:5b:b1:19:88:75:1f:e6:bd:b5:fa:36:4a:b4:
37:49:a8:74:e7:02:2e:f5:cd:d6:92:d3:75:a3:09:
47:76:b8:1e:d0:d5:27:ac:7b:b5:36:09:ce:a3:a8:
3e:8b:d0:6c:a3:eb:96:4d:3d:7d:68:ac:6f:56:b1:
ea:bf:21:36:a0:77:1a:65:7a:32:ee:4b:60:62:f1:
2c:3f:b7:05:84:38:33:7a:87:56:43:d4:e2:4d:39:
01:c7:5a:ed:ed:1e:1b:7f:d6:0f:cc:2c:3a:07:8a:
40:e7:26:c7:0d:22:5f:9f:06:e6:52:9f:09:2b:95:
84:4d:74:b4:ba:ae:34:c6:83:b4:73:a3:a7:91:60:
48:6a:16:4c:a4:2f:60:90:4d:5b:87:af:21:c0:50:
45:36:94:15:c5:6f:40:27:a4:e7:33:fc:80:2e:34:
f1:fd:e6:b4:18:cb:03:c7:db:58:94:5d:e2:25:8d:
24:b4:ce:10:ac:95:ab:42:63:47:14:f3:99:23:c7:
d3:4b:c1:ba:38:52:60:9f:1b:73:f4:59:4f:df:02:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0B:A9:F8:94:01:39:4D:A7:6C:E7:96:B8:B2:64:9C:B8:50:61:A3
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/kwup-JQBOU2nbOeWuLJknLhQYaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.208.0/23
88.216.182.0/23
Signature Algorithm: sha256WithRSAEncryption
81:f1:46:57:61:fb:27:0d:5f:6d:1d:eb:f6:6b:b3:a0:f1:b2:
e4:ad:3a:00:3b:14:92:f0:a4:fd:4b:23:0b:f8:94:66:f7:63:
ae:89:08:89:51:b4:5f:48:da:2d:5a:d7:5c:bc:d8:93:17:1f:
ef:4b:e6:e9:59:57:1d:2b:3c:9b:2a:07:06:23:e2:13:b8:e2:
5d:fb:57:6e:63:c4:85:68:a8:fe:ad:f9:bd:87:fa:c6:2b:ef:
21:0b:ba:d2:fb:a0:44:9d:f9:de:e1:97:82:1f:46:6a:82:12:
1e:1c:e8:c4:9b:8e:e4:d7:7b:02:ea:8d:da:d4:26:2d:b3:7a:
85:91:1d:c9:a3:4b:9d:ab:17:19:57:be:5a:98:98:c0:20:5b:
0b:0b:6d:85:66:6c:9a:e1:73:5e:2f:39:fc:3f:87:c2:d6:da:
60:9f:4c:d2:4d:bc:5b:b1:ac:6b:8f:c8:a7:4a:e4:7b:46:ab:
7b:0b:4f:30:fc:b6:f5:d0:65:ea:12:f1:c9:de:65:32:65:b3:
70:da:ef:4a:21:7d:f3:ea:66:89:35:e4:15:fd:41:2b:cf:83:
74:2f:93:8e:1b:48:cc:02:dd:da:28:7d:37:c9:95:11:3a:f8:
c5:31:25:bc:35:38:3d:7d:db:fc:60:cc:25:82:e7:92:c1:fe:
96:84:3f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:44:39 2024 by rpki-client on console-ams.rpki-client.org